diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2024-07-11 20:49:08 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2024-07-21 17:02:10 +0200 |
| commit | 759aae590c0298414db4d2925a33b084d7f9e7f9 (patch) | |
| tree | c1d3028fc2a7af3281dff86f870349527671577e /libavformat/sauce.c | |
| parent | 3e305a0e703843765d4dd7042092c3a38c0f97af (diff) | |
| download | ffmpeg-759aae590c0298414db4d2925a33b084d7f9e7f9.tar.gz | |
avformat/sauce: Check avio_size() for failure
Fixes: CID1604592 Overflowed constant
Sponsored-by: Sovereign Tech Fund
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/sauce.c')
| -rw-r--r-- | libavformat/sauce.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/libavformat/sauce.c b/libavformat/sauce.c index 150be4705b..96e9bfc337 100644 --- a/libavformat/sauce.c +++ b/libavformat/sauce.c @@ -34,7 +34,12 @@ int ff_sauce_read(AVFormatContext *avctx, uint64_t *fsize, int *got_width, int g AVIOContext *pb = avctx->pb; char buf[36]; int datatype, filetype, t1, t2, nb_comments; - uint64_t start_pos = avio_size(pb) - 128; + int64_t start_pos = avio_size(pb); + + if (start_pos < 128) + return AVERROR_INVALIDDATA; + + start_pos -= 128; avio_seek(pb, start_pos, SEEK_SET); if (avio_read(pb, buf, 7) != 7) |