mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2026-06-16 04:32:47 +02:00
avformat/apv: fix range of au_size
Acces unit size is described in documentation as > 0 < 0xFFFFFFFF Signed-off-by: Dariusz Frankiewicz <d.frankiewic@samsung.com>
This commit is contained in:
committed by
Mark Thompson
parent
09856e4e48
commit
002a940ca6
@@ -207,7 +207,7 @@ static int apv_read_packet(AVFormatContext *s, AVPacket *pkt)
|
||||
au_size = avio_rb32(s->pb);
|
||||
if (au_size == 0 && avio_feof(s->pb))
|
||||
return AVERROR_EOF;
|
||||
if (au_size < 24 || au_size > 1 << 24) {
|
||||
if (au_size == 0 || au_size > UINT32_MAX) {
|
||||
av_log(s, AV_LOG_ERROR,
|
||||
"APV AU has invalid size: %"PRIu32"\n", au_size);
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
Reference in New Issue
Block a user