diff options
author | Michael Niedermayer <michaelni@gmx.at> | 2012-10-18 04:58:20 +0200 |
---|---|---|
committer | Carl Eugen Hoyos <cehoyos@ag.or.at> | 2012-12-10 00:48:13 +0100 |
commit | 1a5b7ce0ea676aa5811a19660724dbc446d0e988 (patch) | |
tree | fab20339553e1384d87f1ccf630fd95eaceac34a | |
parent | 213f651498483c86097d5e0480a09b975ad1f28c (diff) | |
download | ffmpeg-1a5b7ce0ea676aa5811a19660724dbc446d0e988.tar.gz |
riff: retry reading metadata without padding if it fails with
Fixes Ticket1821
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit d0c27e88d2bb495d61bd32f41769f767a0c2a802)
-rw-r--r-- | libavformat/riff.c | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/libavformat/riff.c b/libavformat/riff.c index 4efd1ad756..522c57b869 100644 --- a/libavformat/riff.c +++ b/libavformat/riff.c @@ -707,8 +707,13 @@ int ff_read_riff_info(AVFormatContext *s, int64_t size) chunk_code = avio_rl32(pb); chunk_size = avio_rl32(pb); if (chunk_size > end || end - chunk_size < cur || chunk_size == UINT_MAX) { - av_log(s, AV_LOG_ERROR, "too big INFO subchunk\n"); - return AVERROR_INVALIDDATA; + avio_seek(pb, -9, SEEK_CUR); + chunk_code = avio_rl32(pb); + chunk_size = avio_rl32(pb); + if (chunk_size > end || end - chunk_size < cur || chunk_size == UINT_MAX) { + av_log(s, AV_LOG_ERROR, "too big INFO subchunk\n"); + return AVERROR_INVALIDDATA; + } } chunk_size += (chunk_size & 1); |