mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-01-13 21:28:01 +02:00
riff: fix infinite loop
Fixes Ticket2241 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
2b20397e1f
commit
a8343bfb6a
@ -818,7 +818,13 @@ int ff_read_riff_info(AVFormatContext *s, int64_t size)
|
||||
|
||||
chunk_code = avio_rl32(pb);
|
||||
chunk_size = avio_rl32(pb);
|
||||
|
||||
if (url_feof(pb)) {
|
||||
if (chunk_code || chunk_size) {
|
||||
av_log(s, AV_LOG_WARNING, "INFO subchunk truncated\n");
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
break;
|
||||
}
|
||||
if (chunk_size > end || end - chunk_size < cur || chunk_size == UINT_MAX) {
|
||||
avio_seek(pb, -9, SEEK_CUR);
|
||||
chunk_code = avio_rl32(pb);
|
||||
|
Loading…
Reference in New Issue
Block a user