提交 2a187a07 编写于 作者: A Alexandra Hájková 提交者: Anton Khirnov

asfdec: avoid crash in the case when chunk_len is 0 or pkt_len is 0

Signed-off-by: NAnton Khirnov <anton@khirnov.net>
上级 93f16f33
......@@ -776,6 +776,8 @@ static int asf_read_stream_properties(AVFormatContext *s, const GUIDParseTable *
asf_st->span = span;
asf_st->virtual_pkt_len = avio_rl16(pb);
asf_st->virtual_chunk_len = avio_rl16(pb);
if (!asf_st->virtual_chunk_len || !asf_st->virtual_pkt_len)
return AVERROR_INVALIDDATA;
avio_skip(pb, err_data_len - 5);
} else
avio_skip(pb, err_data_len - 1);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册