Traneptora/FFmpeg
1
Fork 0
forked from FFmpeg/FFmpeg
Code Pull requests Activity

avformat/oggparseogm: check input size before reading t

Browse source 
Makes no difference in outcome, as the checks on t have no effect
when t was uninitialized

Fixes use of uninitialized memory
Fixes: msan_uninit-mem_7fa2b7b5d97c_3598_anOTHERS_DixX_in_Ogg_Sample.avi
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2013-12-23 18:09:58 +01:00
parent 6359872877
commit 0875a9e4fc
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
libavformat/oggparseogm.c
View file

@ -126,6 +126,8 @@ ogm_dshow_header(AVFormatContext *s, int idx)
if(*p != 1)
return 1;
if (os->psize < 100)
return AVERROR_INVALIDDATA;
t = AV_RL32(p + 96);
if(t == 0x05589f80){