Commit 47247dc2 authored by bcoudurier's avatar bcoudurier

break if atom size is more than size left in container atom, fix shooter.mov

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@8544 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b
parent 29ef2ba9
...@@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom) ...@@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
a.size -= 8; a.size -= 8;
if(a.size < 0) if(a.size < 0 || a.size > atom.size - total_size)
break; break;
if (c->parse_table[i].type == 0) { /* skip leaf atoms data */ if (c->parse_table[i].type == 0) { /* skip leaf atoms data */
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment