You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-10 06:10:52 +02:00
mov: prevent overflow during bit rate calculation
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
This commit is contained in:
@@ -5887,16 +5887,29 @@ static int mov_read_header(AVFormatContext *s)
|
|||||||
for (i = 0; i < s->nb_streams; i++) {
|
for (i = 0; i < s->nb_streams; i++) {
|
||||||
AVStream *st = s->streams[i];
|
AVStream *st = s->streams[i];
|
||||||
MOVStreamContext *sc = st->priv_data;
|
MOVStreamContext *sc = st->priv_data;
|
||||||
if (st->duration > 0)
|
if (st->duration > 0) {
|
||||||
|
if (sc->data_size > INT64_MAX / sc->time_scale / 8) {
|
||||||
|
av_log(s, AV_LOG_ERROR, "Overflow during bit rate calculation %"PRId64" * 8 * %d\n",
|
||||||
|
sc->data_size, sc->time_scale);
|
||||||
|
mov_read_close(s);
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
}
|
||||||
st->codecpar->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
|
st->codecpar->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
if (mov->use_mfra_for > 0) {
|
if (mov->use_mfra_for > 0) {
|
||||||
for (i = 0; i < s->nb_streams; i++) {
|
for (i = 0; i < s->nb_streams; i++) {
|
||||||
AVStream *st = s->streams[i];
|
AVStream *st = s->streams[i];
|
||||||
MOVStreamContext *sc = st->priv_data;
|
MOVStreamContext *sc = st->priv_data;
|
||||||
if (sc->duration_for_fps > 0) {
|
if (sc->duration_for_fps > 0) {
|
||||||
|
if (sc->data_size > INT64_MAX / sc->time_scale / 8) {
|
||||||
|
av_log(s, AV_LOG_ERROR, "Overflow during bit rate calculation %"PRId64" * 8 * %d\n",
|
||||||
|
sc->data_size, sc->time_scale);
|
||||||
|
mov_read_close(s);
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
}
|
||||||
st->codecpar->bit_rate = sc->data_size * 8 * sc->time_scale /
|
st->codecpar->bit_rate = sc->data_size * 8 * sc->time_scale /
|
||||||
sc->duration_for_fps;
|
sc->duration_for_fps;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user