[FFmpeg-devel] [PATCH 3/3] avformat/mov: fix use invalid box size/type due to eof
Zhao Zhili
quinkblack at foxmail.com
Tue Apr 26 11:20:26 EEST 2022
---
libavformat/mov.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/libavformat/mov.c b/libavformat/mov.c
index e948c6cd0f..429f9fcbf7 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -7691,10 +7691,12 @@ static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
if (atom.size < 0)
atom.size = INT64_MAX;
- while (total_size <= atom.size - 8 && !avio_feof(pb)) {
+ while (total_size <= atom.size - 8) {
int (*parse)(MOVContext*, AVIOContext*, MOVAtom) = NULL;
a.size = avio_rb32(pb);
a.type = avio_rl32(pb);
+ if (avio_feof(pb))
+ break;
if (((a.type == MKTAG('f','r','e','e') && c->moov_retry) ||
a.type == MKTAG('h','o','o','v')) &&
a.size >= 8 &&
--
2.35.3
More information about the ffmpeg-devel
mailing list