qtdemux: prevent reading past avc1 atom when parsing

... when one of the subatoms has a large/invalid size.

Fixes #626609.
This commit is contained in:
Mark Nauwelaerts 2010-08-11 11:17:18 +02:00
parent 7e032540c0
commit 8ea04c66b8

View file

@ -5435,8 +5435,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak)
break;
}
len -= QT_UINT32 (avc_data);
avc_data += QT_UINT32 (avc_data);
len -= size + 8;
avc_data += size + 8;
}
break;