diff options
| author | Andreas Rheinhardt <[email protected]> | 2023-09-12 11:36:01 +0200 |
|---|---|---|
| committer | Andreas Rheinhardt <[email protected]> | 2023-09-12 23:34:54 +0200 |
| commit | 197f7e914bc2a7113388156df5b0e617a4a3ba32 (patch) | |
| tree | 089cb8f37c6fff48701c01a1c887e09beca3b512 /libavcodec/pnm_parser.c | |
| parent | c461ee39f941a9d50dbbec9a704d8c739912dcdb (diff) | |
avformat/wtvdec: Skip too big tags
get_tag() is not designed with negative length in mind;
in this case, it will allocate a very small buffer
(LEN_PRETTY_GUID + 1) and might call avio_get_str16le()
with a negative maxlen (which relies on these parameters
to be signed).
Reviewed-by: Peter Ross <[email protected]>
Signed-off-by: Andreas Rheinhardt <[email protected]>
Diffstat (limited to 'libavcodec/pnm_parser.c')
0 files changed, 0 insertions, 0 deletions