demux: mp4: fix heap overflow reading esds

(cherry picked from commit 44c7fb66827345a5179b4f919c7234c65d569db1) Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

demux: mp4: fix heap overflow reading esds
(cherry picked from commit 44c7fb66827345a5179b4f919c7234c65d569db1) Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
86271ad8 · Francois Cartegnie · Jean-Baptiste Kempf · 72ba7990 · 86271ad8
Commit 86271ad8 authored Sep 27, 2014 by Francois Cartegnie Committed by Jean-Baptiste Kempf Sep 28, 2014
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

modules/demux/mp4/libmp4.c modules/demux/mp4/libmp4.c +1 -0

No files found.
--- a/modules/demux/mp4/libmp4.c
+++ b/modules/demux/mp4/libmp4.c
@@ -1242,6 +1242,7 @@ static int MP4_ReadBox_esds( stream_t *p_stream, MP4_Box_t *p_box )
            unsigned int i_len;

            MP4_GET1BYTE( i_len );
+            i_len = __MIN(i_read, i_len);
            es_descriptor.psz_URL = malloc( i_len + 1 );
            if( es_descriptor.psz_URL )
            {