[FFmpeg-cvslog] Check for invalid packet size in the smacker demuxer.

Laurent Aimar git at videolan.org
Sun Dec 25 01:36:01 CET 2011


ffmpeg | branch: release/0.6 | Laurent Aimar <fenrir at videolan.org> | Mon Sep 12 20:50:13 2011 +0200| [6f70111e817ea83cfad8cc9be313c2c05cb2d28b] | committer: Reinhard Tartler

Check for invalid packet size in the smacker demuxer.

Signed-off-by: Martin Storsjö <martin at martin.st>
(cherry picked from commit e055932f5636a82275837968eea9c8fcb5bca474)

Signed-off-by: Anton Khirnov <anton at khirnov.net>
Signed-off-by: Reinhard Tartler <siretart at tauware.de>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6f70111e817ea83cfad8cc9be313c2c05cb2d28b
---

 libavformat/smacker.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/libavformat/smacker.c b/libavformat/smacker.c
index 056e9dc..a916a7b 100644
--- a/libavformat/smacker.c
+++ b/libavformat/smacker.c
@@ -306,6 +306,8 @@ static int smacker_read_packet(AVFormatContext *s, AVPacket *pkt)
             }
             flags >>= 1;
         }
+        if (frame_size < 0)
+            return AVERROR_INVALIDDATA;
         if (av_new_packet(pkt, frame_size + 768))
             return AVERROR(ENOMEM);
         if(smk->frm_size[smk->cur_frame] & 1)



More information about the ffmpeg-cvslog mailing list