mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
ogg: prevent NULL pointer deference in theora gptopts
Additional safety in case a special ogg stream is crafted with the proper number of Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
d1f05dd183
commit
bb146bb57b
@ -131,8 +131,13 @@ theora_gptopts(AVFormatContext *ctx, int idx, uint64_t gp, int64_t *dts)
|
|||||||
struct ogg *ogg = ctx->priv_data;
|
struct ogg *ogg = ctx->priv_data;
|
||||||
struct ogg_stream *os = ogg->streams + idx;
|
struct ogg_stream *os = ogg->streams + idx;
|
||||||
struct theora_params *thp = os->private;
|
struct theora_params *thp = os->private;
|
||||||
uint64_t iframe = gp >> thp->gpshift;
|
uint64_t iframe, pframe;
|
||||||
uint64_t pframe = gp & thp->gpmask;
|
|
||||||
|
if (!thp)
|
||||||
|
return AV_NOPTS_VALUE;
|
||||||
|
|
||||||
|
iframe = gp >> thp->gpshift;
|
||||||
|
pframe = gp & thp->gpmask;
|
||||||
|
|
||||||
if (thp->version < 0x030201)
|
if (thp->version < 0x030201)
|
||||||
iframe++;
|
iframe++;
|
||||||
|
Loading…
Reference in New Issue
Block a user