demux: mp4: fix heap overflow reading esds

44c7fb66 · Francois Cartegnie · fa6b1937 · 44c7fb66
Commit 44c7fb66 authored Sep 27, 2014 by Francois Cartegnie
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

modules/demux/mp4/libmp4.c modules/demux/mp4/libmp4.c +1 -0

No files found.
--- a/modules/demux/mp4/libmp4.c
+++ b/modules/demux/mp4/libmp4.c
@@ -1237,6 +1237,7 @@ static int MP4_ReadBox_esds( stream_t *p_stream, MP4_Box_t *p_box )
            unsigned int i_len;

            MP4_GET1BYTE( i_len );
+            i_len = __MIN(i_read, i_len);
            es_descriptor.psz_URL = malloc( i_len + 1 );
            if( es_descriptor.psz_URL )
            {