diff options
| author | Matt Wolenetz <wolenetz@google.com> | 2019-07-25 15:54:49 -0700 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2020-07-01 12:11:55 +0200 |
| commit | debbbb5ba67be364db327dddb5b3cf559f1a07bd (patch) | |
| tree | 806a62c700143bf8d514f3fbfe816ec5f8bab677 /libavcodec/mips/lsp_mips.h | |
| parent | 50fbf1041426855aa40f3f0c2c5ce2b0a90f9b9d (diff) | |
| download | ffmpeg-debbbb5ba67be364db327dddb5b3cf559f1a07bd.tar.gz | |
lafv/wavdec: Fail bext parsing on incomplete reads
avio_read can successfully return even when less than the requested
amount of input was read. wavdec's bext parsing mistakenly assumed a
successful avio_read always read the full amount that was requested.
The result could be dictionary tags populated with partially
uninitialized values.
This change also fixes a broken assertion in wav_parse_bext_string that
was off-by-one, though no known current usage of that method hits that
broken case.
Chromium bug: 987270
Signed-off-by: Matt Wolenetz <wolenetz@chromium.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 052d41377a02f480f8e7135c0f7d418e9a405215)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mips/lsp_mips.h')
0 files changed, 0 insertions, 0 deletions