diff options
Diffstat (limited to 'gst/isomp4/qtdemux.c')
| -rw-r--r-- | gst/isomp4/qtdemux.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/gst/isomp4/qtdemux.c b/gst/isomp4/qtdemux.c index 76924cb9e..9bd299dc7 100644 --- a/gst/isomp4/qtdemux.c +++ b/gst/isomp4/qtdemux.c @@ -10657,8 +10657,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) } stream->stsd_entries_length = stsd_entry_count = QT_UINT32 (stsd_data + 12); - if (stream->stsd_entries_length == 0) + /* each stsd entry must contain at least 8 bytes */ + if (stream->stsd_entries_length == 0 + || stream->stsd_entries_length > stsd_len / 8) { + stream->stsd_entries_length = 0; goto corrupt_file; + } stream->stsd_entries = g_new0 (QtDemuxStreamStsdEntry, stsd_entry_count); GST_LOG_OBJECT (qtdemux, "stsd len: %d", stsd_len); GST_LOG_OBJECT (qtdemux, "stsd entry count: %u", stsd_entry_count); |