[FFmpeg-cvslog] mov: Fix spherical metadata_source parsing

Aaron Colwell git at videolan.org
Tue Oct 17 21:57:16 EEST 2017


ffmpeg | branch: master | Aaron Colwell <acolwell at google.com> | Fri Jan 27 09:33:29 2017 -0800| [17adcc40adf1f30cba55c9727dabc1365944d32b] | committer: Vittorio Giovara

mov: Fix spherical metadata_source parsing

Signed-off-by: James Almer <jamrial at gmail.com>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=17adcc40adf1f30cba55c9727dabc1365944d32b
---

 libavformat/mov.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libavformat/mov.c b/libavformat/mov.c
index 5c9f85c738..d5de5d6b13 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -3252,7 +3252,7 @@ static int mov_read_sv3d(MOVContext *c, AVIOContext *pb, MOVAtom atom)
     }
 
     size = avio_rb32(pb);
-    if (size > atom.size)
+    if (size <= 12 || size > atom.size)
         return AVERROR_INVALIDDATA;
 
     tag = avio_rl32(pb);
@@ -3261,7 +3261,7 @@ static int mov_read_sv3d(MOVContext *c, AVIOContext *pb, MOVAtom atom)
         return 0;
     }
     avio_skip(pb, 4); /*  version + flags */
-    avio_skip(pb, avio_r8(pb)); /* metadata_source */
+    avio_skip(pb, size - 12); /* metadata_source */
 
     size = avio_rb32(pb);
     if (size > atom.size)



More information about the ffmpeg-cvslog mailing list