diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2025-05-10 23:52:57 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2025-05-15 03:03:55 +0200 |
| commit | 39800d78b07e65a6b29a69366d651f80105b95a1 (patch) | |
| tree | c6f158708ce78e46255f5f2d04bc292920b57e0d | |
| parent | 9fc2702f6f502064d0d2d75c97ece33f4b56eb84 (diff) | |
| download | ffmpeg-39800d78b07e65a6b29a69366d651f80105b95a1.tar.gz | |
avformat/imf_cpl: do not continue looping forever
Fixes: infinite loop
Fixes: 401658595/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5756875014733824
Regression since: 61fa1e14e4178d3f2550c76f7a36484220f6dc0c
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/imf_cpl.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/imf_cpl.c b/libavformat/imf_cpl.c index 137cff2a63..6ddea62abe 100644 --- a/libavformat/imf_cpl.c +++ b/libavformat/imf_cpl.c @@ -709,8 +709,7 @@ static int fill_virtual_tracks(void *log_ctx, xmlNodePtr cpl_element, FFIMFCPL * av_log(log_ctx, AV_LOG_DEBUG, "Processing IMF CPL Segment\n"); sequence_list_elem = ff_imf_xml_get_child_element_by_name(segment_elem, "SequenceList"); - if (!sequence_list_elem) - continue; + if (sequence_list_elem) { sequence_elem = xmlFirstElementChild(sequence_list_elem); while (sequence_elem) { @@ -735,6 +734,7 @@ static int fill_virtual_tracks(void *log_ctx, xmlNodePtr cpl_element, FFIMFCPL * sequence_elem = xmlNextElementSibling(sequence_elem); } + } segment_elem = xmlNextElementSibling(segment_elem); } |