mirror of
https://gitee.com/openharmony/third_party_ffmpeg
synced 2024-11-23 19:30:05 +00:00
stop parsing udta if size is wrong/garbage, fix issue 154, fix RQ004F14.MOV
Originally committed as revision 10481 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
parent
36cb992b54
commit
aaac6c29d2
@ -1060,6 +1060,9 @@ static int mov_read_udta(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
|
||||
uint32_t tag = get_le32(pb);
|
||||
uint64_t next = url_ftell(pb) + tag_size - 8;
|
||||
|
||||
if (next > end) // stop if tag_size is wrong
|
||||
break;
|
||||
|
||||
switch (tag) {
|
||||
case MKTAG(0xa9,'n','a','m'):
|
||||
mov_parse_udta_string(pb, c->fc->title, sizeof(c->fc->title));
|
||||
|
Loading…
Reference in New Issue
Block a user