diff options
| author | James Almer <jamrial@gmail.com> | 2024-03-20 23:52:36 -0300 |
|---|---|---|
| committer | James Almer <jamrial@gmail.com> | 2024-03-21 09:08:22 -0300 |
| commit | 97d2990ea6241a569bc4c259d427f7739c97d766 (patch) | |
| tree | b231c6130a1de43583ed827dcd980b5009af942d | |
| parent | e04c638f5f2541d1dd4eb0cf68cd71c66199b5e7 (diff) | |
avformat/iamf_reader: propagate avio_skip() error values
Fixes: null pointer derference
Fixes: 67007/clusterfuzz-testcase-minimized-ffmpeg_dem_IAMF_fuzzer-6522819204677632
Tested-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
| -rw-r--r-- | libavformat/iamf_reader.c | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/libavformat/iamf_reader.c b/libavformat/iamf_reader.c index 42d20f1ae6..270cfac389 100644 --- a/libavformat/iamf_reader.c +++ b/libavformat/iamf_reader.c @@ -310,10 +310,8 @@ int ff_iamf_read_packet(AVFormatContext *s, IAMFDemuxContext *c, c->recon_size = 0; } else { int64_t offset = avio_skip(pb, obu_size); - if (offset < 0) { - ret = offset; - break; - } + if (offset < 0) + return offset; } max_size -= len; if (max_size < 0) |