|
@@ -679,7 +679,7 @@ static int viv_read_packet(AVFormatContext *s, |
|
|
return AVERROR_INVALIDDATA; |
|
|
return AVERROR_INVALIDDATA; |
|
|
|
|
|
|
|
|
ffio_read_varlen(pb); |
|
|
ffio_read_varlen(pb); |
|
|
if (v_size > INT_MAX) |
|
|
|
|
|
|
|
|
if (v_size > INT_MAX || !v_size) |
|
|
return AVERROR_INVALIDDATA; |
|
|
return AVERROR_INVALIDDATA; |
|
|
ret = av_get_packet(pb, pkt, v_size); |
|
|
ret = av_get_packet(pb, pkt, v_size); |
|
|
if (ret < 0) |
|
|
if (ret < 0) |
|
@@ -708,7 +708,7 @@ static int viv_read_packet(AVFormatContext *s, |
|
|
} else { |
|
|
} else { |
|
|
uint64_t v_size = ffio_read_varlen(pb); |
|
|
uint64_t v_size = ffio_read_varlen(pb); |
|
|
|
|
|
|
|
|
if (v_size > INT_MAX) |
|
|
|
|
|
|
|
|
if (v_size > INT_MAX || !v_size) |
|
|
return AVERROR_INVALIDDATA; |
|
|
return AVERROR_INVALIDDATA; |
|
|
ret = av_get_packet(pb, pkt, v_size); |
|
|
ret = av_get_packet(pb, pkt, v_size); |
|
|
if (ret < 0) |
|
|
if (ret < 0) |
|
|