mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-12-05 14:30:00 +01:00
avformat/ac4dec: Check remaining space in ac4_probe()
Fixes: CID1538298 Untrusted loop bound Fixes: undefined behavior Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -43,6 +43,8 @@ static int ac4_probe(const AVProbeData *p)
|
||||
size += 4;
|
||||
if (buf[1] == 0x41)
|
||||
size += 2;
|
||||
if (left < size)
|
||||
break;
|
||||
max_frames++;
|
||||
left -= size;
|
||||
buf += size;
|
||||
|
||||
Reference in New Issue
Block a user