diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2016-06-06 14:32:48 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-08-23 13:15:16 +0200 |
| commit | 95eaa6af1d182dfd3d84f4e34aac5bfb0c5e669c (patch) | |
| tree | 5ed530d68dd2d7ba6d7d22d57b7a4d0817a253d5 | |
| parent | c3d08784fd6324db75f9237f08b1efd401400017 (diff) | |
| download | ffmpeg-95eaa6af1d182dfd3d84f4e34aac5bfb0c5e669c.tar.gz | |
avcodec/bmp_parser: Check fsize
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 43a4276c6964a2ec57e08c3c622bb94d35c0441f)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/bmp_parser.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libavcodec/bmp_parser.c b/libavcodec/bmp_parser.c index d2a04ef69b..cd65f02a2e 100644 --- a/libavcodec/bmp_parser.c +++ b/libavcodec/bmp_parser.c @@ -53,7 +53,8 @@ restart: if (bpc->pc.frame_start_found == 0) { if ((state >> 48) == (('B' << 8) | 'M')) { bpc->fsize = av_bswap32(state >> 16); - bpc->pc.frame_start_found = 1; + if (bpc->fsize > 17) + bpc->pc.frame_start_found = 1; } } else if (bpc->pc.frame_start_found == 2+4+4) { // unsigned hsize = av_bswap32(state>>32); |