[FFmpeg-devel] [PATCH 6/8] avformat/vividas: Fix another infinite loop

Paul B Mahol onemda at gmail.com
Sun Aug 11 12:04:12 EEST 2019


On Sat, Aug 10, 2019 at 11:17 PM Michael Niedermayer <michael at niedermayer.cc>
wrote:

> Not found by the fuzzer
>
> Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> ---
>  libavformat/vividas.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/libavformat/vividas.c b/libavformat/vividas.c
> index a5f33181de..0c33ca2da8 100644
> --- a/libavformat/vividas.c
> +++ b/libavformat/vividas.c
> @@ -546,7 +546,7 @@ static int viv_read_header(AVFormatContext *s)
>              break;
>
>          block_len = ffio_read_varlen(pb);
> -        if (avio_feof(pb))
> +        if (avio_feof(pb) || block_len <= 0)
>              return AVERROR_INVALIDDATA;
>
>
LGTM


>          block_type = avio_r8(pb);
> --
> 2.22.0
>
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel at ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request at ffmpeg.org with subject "unsubscribe".


More information about the ffmpeg-devel mailing list