MrBesen/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

avformat/mpegvideodec: fix hypothetical pointer overflow in mpegvideo_probe()

Browse Source 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2015-03-15 13:39:56 +01:00
parent 84d8b4fb81
commit 32c4b504b4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavformat/mpegvideodec.c
View File

@ -52,11 +52,11 @@ static int mpegvideo_probe(AVProbeData *p)
j = -1;
if (ptr[j + 8] & 2)
j+= 64;
if (ptr + j >= end)
if (j >= end - ptr)
break;
if (ptr[j + 8] & 1)
j+= 64;
if (ptr + j >= end)
if (j >= end - ptr)
break;
if (AV_RB24(ptr + j + 9) & 0xFFFFFE)
break;