Changeset 7c24ca1b in ffmpeg

Timestamp:
Apr 28, 2015, 8:56:14 PM (10 years ago)
Author:
Michael Niedermayer <michaelni@gmx.at>
Branches:
master
Children:
77010a41
Parents:
36170266
git-author:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (04/28/15 20:37:19)
git-committer:
Michael Niedermayer <michaelni@gmx.at> (04/28/15 20:56:14)
Message:

nutdec: fix illegal count check in decode_main_header

The existing check has two problems:

1) i + count can overflow, so that the check '< 256' returns true.
2) In the (i == 'N') case occurs a j-- so that the loop runs once more.

This can trigger the assertion 'nut->header_len[0] == 0' or cause
segmentation faults or infinite hangs.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

(No files)

Note: See TracChangeset for help on using the changeset viewer.