aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2021-12-03 17:42:22 +0100
committerMichael Niedermayer <michael@niedermayer.cc>2022-04-06 20:27:35 +0200
commit4846536e678f0295aeec24d178a34f501f062665 (patch)
tree91842a52c552e0b163a57a2fed80ccdcf60a6ad3
parenta2b5ffb4acb73dda4b40292a7d01e5adeae6963b (diff)
downloadffmpeg-4846536e678f0295aeec24d178a34f501f062665.tar.gz
avformat/mov: Disallow duplicate smdm
Fixes: memleak Fixes: 39879/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5327819907923968 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit b5ba74053c1ef9f38d9e7b3a036675f06d2b2714) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavformat/mov.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/libavformat/mov.c b/libavformat/mov.c
index a8279eef35..8b002d64cb 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -5447,6 +5447,9 @@ static int mov_read_smdm(MOVContext *c, AVIOContext *pb, MOVAtom atom)
av_log(c->fc, AV_LOG_WARNING, "Unsupported Mastering Display Metadata box version %d\n", version);
return 0;
}
+ if (sc->mastering)
+ return AVERROR_INVALIDDATA;
+
avio_skip(pb, 3); /* flags */
sc->mastering = av_mastering_display_metadata_alloc();