aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2016-08-19 10:28:22 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2016-08-19 11:03:50 +0200
commite965fedf7e94b7e50cd11be00fa729ee8faeb21b (patch)
tree3da4c3a5cff171356cf02a72c02cc8cba27132ff
parent7132e71a841c1eced215729786b362dae54606ee (diff)
downloadffmpeg-e965fedf7e94b7e50cd11be00fa729ee8faeb21b.tar.gz
avformat/swfdec: Fix inflate() error code check
Fixes infinite loop Fixes endless.poc Found-by: 连一汉 <lianyihan@360.cn> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit a453bbb68f3eec202673728988bba3bc76071761) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavformat/swfdec.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/swfdec.c b/libavformat/swfdec.c
index 68cd8561fb..3dea139e3e 100644
--- a/libavformat/swfdec.c
+++ b/libavformat/swfdec.c
@@ -113,10 +113,10 @@ retry:
z->avail_out = buf_size;
ret = inflate(z, Z_NO_FLUSH);
- if (ret < 0)
- return AVERROR(EINVAL);
if (ret == Z_STREAM_END)
return AVERROR_EOF;
+ if (ret != Z_OK)
+ return AVERROR(EINVAL);
if (buf_size - z->avail_out == 0)
goto retry;