mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-12-12 10:00:08 +01:00
avcodec/ac3_parser: Check init_get_bits8() for failure
Fixes: null pointer dereference
Fixes: ffmpeg_crash_6.avi
Found-by: Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu with AFLSmart
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 00e8181bd9)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -162,7 +162,9 @@ int avpriv_ac3_parse_header(AC3HeaderInfo **phdr, const uint8_t *buf,
|
|||||||
return AVERROR(ENOMEM);
|
return AVERROR(ENOMEM);
|
||||||
hdr = *phdr;
|
hdr = *phdr;
|
||||||
|
|
||||||
init_get_bits8(&gb, buf, size);
|
err = init_get_bits8(&gb, buf, size);
|
||||||
|
if (err < 0)
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
err = ff_ac3_parse_header(&gb, hdr);
|
err = ff_ac3_parse_header(&gb, hdr);
|
||||||
if (err < 0)
|
if (err < 0)
|
||||||
return AVERROR_INVALIDDATA;
|
return AVERROR_INVALIDDATA;
|
||||||
|
|||||||
Reference in New Issue
Block a user