diff options
author | chcunningham <chcunningham@chromium.org> | 2018-12-13 13:58:40 -0800 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2019-01-21 07:53:26 +0100 |
commit | 54fbdacc3791a6c5ff5945b139c7221d466676b5 (patch) | |
tree | 6aea0ef98522ee81c86cb3cc54ff669c0fa9f022 /libavformat/vag.c | |
parent | 228f17ced3bd394677f0421f462067a0f287ca8c (diff) | |
download | ffmpeg-54fbdacc3791a6c5ff5945b139c7221d466676b5.tar.gz |
lavf/mov: ensure only one tkhd per trak
Chromium fuzzing produced a whacky file with extra tkhds. This caused
an AVStream that was already in use to be corrupted by assigning it a
new id, which blows up later in mov_read_trun because the
MOVFragmentStreamInfo.index_entry now points OOB.
Reviewed-by: Baptiste Coudurier <baptiste.coudurier@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit c9f7b6f7a9fdffa0ab8f3aa84a1f701cf5b3a6e9)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/vag.c')
0 files changed, 0 insertions, 0 deletions