mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
dv: check buffer size before reading profile.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
This commit is contained in:
parent
6e2821160b
commit
e97efecec8
@ -286,11 +286,13 @@ static const DVprofile dv_profiles[] = {
|
||||
const DVprofile* avpriv_dv_frame_profile(const DVprofile *sys,
|
||||
const uint8_t* frame, unsigned buf_size)
|
||||
{
|
||||
int i;
|
||||
int i, dsf, stype;
|
||||
|
||||
int dsf = (frame[3] & 0x80) >> 7;
|
||||
if (buf_size < 80*5 + 48 + 4)
|
||||
return NULL;
|
||||
|
||||
int stype = frame[80*5 + 48 + 3] & 0x1f;
|
||||
dsf = (frame[3] & 0x80) >> 7;
|
||||
stype = frame[80*5 + 48 + 3] & 0x1f;
|
||||
|
||||
/* 576i50 25Mbps 4:1:1 is a special case */
|
||||
if (dsf == 1 && stype == 0 && frame[4] & 0x07 /* the APT field */) {
|
||||
|
Loading…
Reference in New Issue
Block a user