diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2018-08-16 15:36:29 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2018-11-01 00:52:46 +0100 |
| commit | 44ebea8657e2c786b8b22ebee69d97a2b0efd07f (patch) | |
| tree | 74f22634b8e90911523256e56af9c6d39df96c37 | |
| parent | 907699d1207f50f3a0f9c96443ffbde71bb580e5 (diff) | |
| download | ffmpeg-44ebea8657e2c786b8b22ebee69d97a2b0efd07f.tar.gz | |
avformat/rmdec: Fix EOF check in the stream loop in ivr_read_header()
Fixes: long running loop
Fixes: ivr-timeout-42468cb797f52f025fb329394702f5d4d64322d6
Found-by: Paul Ch <paulcher@icloud.com>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit c2eec1762d372663c35aaf3d6ee419bafb185057)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/rmdec.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/libavformat/rmdec.c b/libavformat/rmdec.c index 3eb49a5d29..f3fa550c63 100644 --- a/libavformat/rmdec.c +++ b/libavformat/rmdec.c @@ -1270,6 +1270,8 @@ static int ivr_read_header(AVFormatContext *s) if (avio_rb32(pb) == MKBETAG('M', 'L', 'T', 'I')) { ret = rm_read_multi(s, pb, st, NULL); } else { + if (avio_feof(pb)) + return AVERROR_INVALIDDATA; avio_seek(pb, -4, SEEK_CUR); ret = ff_rm_read_mdpr_codecdata(s, pb, st, st->priv_data, len, NULL); } |