aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/qpeg.c
diff options
context:
space:
mode:
authorAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2020-05-27 19:09:14 +0200
committerAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2020-07-02 22:46:35 +0200
commit6536090792e8c46ef05cff26137d82501625e7a6 (patch)
treee81fad8c3e77e706e920d4005c802c58de3c0216 /libavcodec/qpeg.c
parentda63a31a1042d194a6277f7f320067dd6baa2a97 (diff)
downloadffmpeg-6536090792e8c46ef05cff26137d82501625e7a6.tar.gz
avcodec/hevc_mp4toannexb_bsf: Check NAL size against available input
The hevc_mp4toannexb bsf does not explicitly check whether a NAL unit is so big that it extends beyond the end of the input packet; it does so only implicitly by using the checked version of the bytestream2 API. But this has downsides compared to real checks: It can lead to huge allocations (up to 2GiB) even when the input packet is just a few bytes. And furthermore it leads to uninitialized data being output. So add a check to error out early if it happens. Also check directly whether there is enough data for the length field. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> (cherry picked from commit ea1b71e82f5a1752d59d3bfb9704092a79eba6b5) Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Diffstat (limited to 'libavcodec/qpeg.c')
0 files changed, 0 insertions, 0 deletions