qtdemux: prevent reading past avc1 atom when parsing

... when one of the subatoms has a large/invalid size.

Fixes #626609.
This commit is contained in:
Mark Nauwelaerts 2010-08-11 11:17:18 +02:00
parent 7e032540c0
commit 8ea04c66b8

View file

@ -5435,8 +5435,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak)
break; break;
} }
len -= QT_UINT32 (avc_data); len -= size + 8;
avc_data += QT_UINT32 (avc_data); avc_data += size + 8;
} }
break; break;