PR #20340 opened by Dariusz Frankiewicz (dariusz-f)
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20340
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20340.patch
Acces unit size is described in documentation as > 0 < 0xFFFFFFFF
Signed-off-by: Dariusz Frankiewicz <d.frankie...@samsung.com>
>From d0405772f7bcd5c6a1c5591e83ab8783526ce84b Mon Sep 17 00:00:00 2001
From: Dariusz Frankiewicz <d.frankie...@samsung.com>
Date: Wed, 6 Aug 2025 14:11:56 +0200
Subject: [PATCH] avformat/apv: fix range of au_size
Acces unit size is described in documentation as > 0 < 0xFFFFFFFF
Signed-off-by: Dariusz Frankiewicz <d.frankie...@samsung.com>
---
libavformat/apvdec.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavformat/apvdec.c b/libavformat/apvdec.c
index 52adb17e41..4a5592d98c 100644
--- a/libavformat/apvdec.c
+++ b/libavformat/apvdec.c
@@ -207,7 +207,7 @@ static int apv_read_packet(AVFormatContext *s, AVPacket
*pkt)
au_size = avio_rb32(s->pb);
if (au_size == 0 && avio_feof(s->pb))
return AVERROR_EOF;
- if (au_size < 24 || au_size > 1 << 24) {
+ if (au_size == 0 || au_size > UINT32_MAX) {
av_log(s, AV_LOG_ERROR,
"APV AU has invalid size: %"PRIu32"\n", au_size);
return AVERROR_INVALIDDATA;
--
2.49.1
_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-le...@ffmpeg.org
