You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-10 06:10:52 +02:00
break if atom size is more than size left in container atom, fix shooter.mov
Originally committed as revision 8544 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
@@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
|
||||
|
||||
a.size -= 8;
|
||||
|
||||
if(a.size < 0)
|
||||
if(a.size < 0 || a.size > atom.size - total_size)
|
||||
break;
|
||||
|
||||
if (c->parse_table[i].type == 0) { /* skip leaf atoms data */
|
||||
|
Reference in New Issue
Block a user