mirror of
https://github.com/librempeg/librempeg
synced 2024-11-22 18:49:58 +00:00
avformat/mov: check avio_read() return in mov_read_dref()
Fixes: msan_uninit-mem_7f4960453a02_7264_mr_cork_jpeg.mov Fixes use of uninitialized memory Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
c09bb235bf
commit
4156df59f5
@ -537,7 +537,8 @@ static int mov_read_dref(MOVContext *c, AVIOContext *pb, MOVAtom atom)
|
||||
dref->dir = av_malloc(len+1);
|
||||
if (!dref->dir)
|
||||
return AVERROR(ENOMEM);
|
||||
avio_read(pb, dref->dir, len);
|
||||
if (avio_read(pb, dref->dir, len) != len)
|
||||
return AVERROR_INVALIDDATA;
|
||||
dref->dir[len] = 0;
|
||||
for (j = 0; j < len; j++)
|
||||
if (dref->dir[j] == ':')
|
||||
|
Loading…
Reference in New Issue
Block a user