mirrors/gstreamer
mirrors/gstreamer
1
1
Fork 0
mirror of https://gitlab.freedesktop.org/gstreamer/gstreamer.git synced 2024-10-02 16:52:42 +00:00
Code Issues 1 Projects Releases Wiki Activity

Revert "mpegtsparse: check offset when retrieving table_id on malformed packets"

Browse source 
This reverts commit e62978d045.
This commit is contained in:
Sebastian Dröge 2011-12-13 10:44:42 +01:00
parent c869b21b17
commit 0d40afa9f0
1 changed files with 6 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
gst/mpegdemux/mpegtsparse.c
View file

@ -1,7 +1,7 @@
/*
* mpegtsparse.c -
* mpegtsparse.c -
* Copyright (C) 2007 Alessandro Decina
*
*
* Authors:
* Alessandro Decina <alessandro@nnva.org>
* Zaheer Abbas Merali <zaheerabbas at merali dot org>
@ -222,9 +222,11 @@ mpegts_parse_base_init (gpointer klass)
{
GstElementClass *element_class = GST_ELEMENT_CLASS (klass);
gst_element_class_add_static_pad_template (element_class, &sink_template);
gst_element_class_add_static_pad_template (element_class,
&sink_template);
gst_element_class_add_static_pad_template (element_class, &src_template);
gst_element_class_add_static_pad_template (element_class, &program_template);
gst_element_class_add_static_pad_template (element_class,
&program_template);
gst_element_class_set_details_simple (element_class,
"MPEG transport stream parser", "Codec/Parser",
@ -892,19 +894,6 @@ mpegts_parse_is_psi (MpegTSParse * parse, MpegTSPacketizerPacket * packet)
if (packet->payload_unit_start_indicator) {
data = packet->data;
pointer = *data++;
/* avoid out of range:
* packet->data is equal to GST_BUFFER_DATA (packet->buffer)
* so the data size is GST_BUFFER_SIZE (packet->buffer).
* 'pointer' is the offset (the next line is data += pointer)
* so we need to check that 'pointer' is not greater than the data size
* For example GST_BUFFER_SIZE (packet->buffer) is typically equal to 188
* So 'pointer' has to be strictly less than 188
*/
if (!(pointer < GST_BUFFER_SIZE (packet->buffer))) {
GST_WARNING_OBJECT (parse,
"Wrong offset when retrieving table id: 0x%x", pointer);
return FALSE;
}
data += pointer;
table_id = *data;
i = 0;