aboutsummaryrefslogtreecommitdiffstats
path: root/libavformat/mov.c
diff options
context:
space:
mode:
authorwm4 <nfxjfg@googlemail.com>2014-12-06 16:53:30 +0100
committerMichael Niedermayer <michaelni@gmx.at>2014-12-07 22:30:56 +0100
commit6551acab6877addae815decd02aeca33ba4990c8 (patch)
tree508d586a457224eaf20375a163c9d6f00ec4666c /libavformat/mov.c
parentb1c8dfc84eb09a4284dda73ce528684148e97eb2 (diff)
downloadffmpeg-6551acab6877addae815decd02aeca33ba4990c8.tar.gz
avformat/matroskadec: fix handling of recursive SeekHead elements
When matroska_execute_seekhead() is called, it goes through the list of seekhead entries and attempts to read elements not read yet. When doing this, the parser can find further SeekHead elements, and will extend the matroska->seekhead list. This can lead to a (practically) infinite loop with certain broken files. (Maybe it can happen even with valid files. The demuxer doesn't seem to check correctly whether an element has already been read.) Fix this by ignoring elements that were added to the seekhead field during executing seekhead entries. This does not fix the possible situation when multiple SeekHead elements after the file header (i.e. occur after the "before_pos" file position) point to the same elements. These elements will probably be parsed multiple times, likely leading to bugs. Fixes ticket #4162. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavformat/mov.c')
0 files changed, 0 insertions, 0 deletions