From 5c4aa72b75c1715d031df38d925445698be67de4 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 22 Nov 2013 23:44:57 +0100 Subject: avformat/hnm: check chunk_size == 0 Fixes potential infinite loop Signed-off-by: Michael Niedermayer --- libavformat/hnm.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libavformat/hnm.c') diff --git a/libavformat/hnm.c b/libavformat/hnm.c index e315414..47a1808 100644 --- a/libavformat/hnm.c +++ b/libavformat/hnm.c @@ -148,7 +148,7 @@ static int hnm_read_packet(AVFormatContext *s, AVPacket *pkt) chunk_id = avio_rl16(pb); avio_skip(pb, 2); - if (chunk_size > hnm->superchunk_remaining) { + if (chunk_size > hnm->superchunk_remaining || !chunk_size) { av_log(s, AV_LOG_ERROR, "invalid chunk size: %u, offset: %u\n", chunk_size, (int) avio_tell(pb)); avio_skip(pb, hnm->superchunk_remaining - 8); -- cgit v1.1