Browse Source

avformat/swfdec: Fix inflate() error code check

Fixes infinite loop
Fixes endless.poc

Found-by: 连一汉 <lianyihan@360.cn>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit a453bbb68f)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
tags/n2.8.8
Michael Niedermayer 9 years ago
parent
commit
e965fedf7e
1 changed files with 2 additions and 2 deletions
  1. +2
    -2
      libavformat/swfdec.c

+ 2
- 2
libavformat/swfdec.c View File

@@ -113,10 +113,10 @@ retry:
z->avail_out = buf_size;

ret = inflate(z, Z_NO_FLUSH);
if (ret < 0)
return AVERROR(EINVAL);
if (ret == Z_STREAM_END)
return AVERROR_EOF;
if (ret != Z_OK)
return AVERROR(EINVAL);

if (buf_size - z->avail_out == 0)
goto retry;


Loading…
Cancel
Save