diff options
| author | Aaron Colwell <acolwell@google.com> | 2017-01-27 09:33:29 -0800 |
|---|---|---|
| committer | James Almer <jamrial@gmail.com> | 2017-01-27 22:52:33 -0300 |
| commit | b9f2f93261548f7cfdfc7a4040b23baed11e5554 (patch) | |
| tree | 483283ba06ff19554284913fd8813ce1f6626698 /libavformat/mov.c | |
| parent | 6294247730549064b1c948c423cf12aa6ff8cf03 (diff) | |
mov: Fix spherical metadata_source parsing
Signed-off-by: James Almer <jamrial@gmail.com>
Diffstat (limited to 'libavformat/mov.c')
| -rw-r--r-- | libavformat/mov.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/mov.c b/libavformat/mov.c index 7dc550eb99..b1bfa0a35f 100644 --- a/libavformat/mov.c +++ b/libavformat/mov.c @@ -4566,7 +4566,7 @@ static int mov_read_sv3d(MOVContext *c, AVIOContext *pb, MOVAtom atom) } size = avio_rb32(pb); - if (size > atom.size) + if (size <= 12 || size > atom.size) return AVERROR_INVALIDDATA; tag = avio_rl32(pb); @@ -4575,7 +4575,7 @@ static int mov_read_sv3d(MOVContext *c, AVIOContext *pb, MOVAtom atom) return 0; } avio_skip(pb, 4); /* version + flags */ - avio_skip(pb, avio_r8(pb)); /* metadata_source */ + avio_skip(pb, size - 12); /* metadata_source */ size = avio_rb32(pb); if (size > atom.size) |