mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-11-21 10:55:51 +02:00
avformat/mxfdec: check index entry array size
Signed-off-by: Marton Balint <cus@passwd.hu>
This commit is contained in:
parent
757218564d
commit
6aff3c5e43
@ -1198,11 +1198,15 @@ static int mxf_read_essence_container_data(void *arg, AVIOContext *pb, int tag,
|
||||
static int mxf_read_index_entry_array(AVIOContext *pb, MXFIndexTableSegment *segment)
|
||||
{
|
||||
int i, length;
|
||||
uint32_t nb_index_entries;
|
||||
|
||||
if (segment->temporal_offset_entries)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
segment->nb_index_entries = avio_rb32(pb);
|
||||
nb_index_entries = avio_rb32(pb);
|
||||
if (nb_index_entries > INT_MAX)
|
||||
return AVERROR_INVALIDDATA;
|
||||
segment->nb_index_entries = nb_index_entries;
|
||||
|
||||
length = avio_rb32(pb);
|
||||
if(segment->nb_index_entries && length < 11)
|
||||
|
Loading…
Reference in New Issue
Block a user