Signed-off-by: Oleksij Rempel <[email protected]>
---
libavformat/dss.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/libavformat/dss.c b/libavformat/dss.c
index 89f9554..ccaa3bf 100644
--- a/libavformat/dss.c
+++ b/libavformat/dss.c
@@ -272,6 +272,9 @@ static int dss_723_1_read_packet(AVFormatContext *s,
AVPacket *pkt)
/* We make here one byte step.
* Don't forget to add offset. */
byte = avio_r8(s->pb);
+ if (byte == 0xff)
+ return AVERROR_INVALIDDATA;
+
size = frame_size[byte & 3];
priv->counter -= size;
--
1.9.1
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel
