diff options
author | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-05-27 19:09:14 +0200 |
---|---|---|
committer | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-06-15 04:18:16 +0200 |
commit | 82d70d8038aed96552a77fa583a82c08b0d12636 (patch) | |
tree | a40e9ba1832ec620ef48773ce24318836e6281a3 /doc/libavfilter.texi | |
parent | cc948a1c8c86847cc4dac848b1aff2a68aef0843 (diff) | |
download | ffmpeg-82d70d8038aed96552a77fa583a82c08b0d12636.tar.gz |
avcodec/hevc_mp4toannexb_bsf: Check NAL size against available input
The hevc_mp4toannexb bsf does not explicitly check whether a NAL unit
is so big that it extends beyond the end of the input packet; it does so
only implicitly by using the checked version of the bytestream2 API.
But this has downsides compared to real checks: It can lead to huge
allocations (up to 2GiB) even when the input packet is just a few bytes.
And furthermore it leads to uninitialized data being output.
So add a check to error out early if it happens.
Also check directly whether there is enough data for the length field.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
(cherry picked from commit ea1b71e82f5a1752d59d3bfb9704092a79eba6b5)
Diffstat (limited to 'doc/libavfilter.texi')
0 files changed, 0 insertions, 0 deletions