Commit 8ea04c66 authored by Mark Nauwelaerts's avatar Mark Nauwelaerts

qtdemux: prevent reading past avc1 atom when parsing

... when one of the subatoms has a large/invalid size.

Fixes #626609.
parent 7e032540
......@@ -5435,8 +5435,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak)
break;
}
len -= QT_UINT32 (avc_data);
avc_data += QT_UINT32 (avc_data);
len -= size + 8;
avc_data += size + 8;
}
break;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment