From: Andreas Cadhalpun <[email protected]>

asf_read_payload can unset eof_reached, so check it also before calling
that function.

This fixes infinite loops.

Signed-off-by: Andreas Cadhalpun <[email protected]>
Signed-off-by: Alexandra Hájková <[email protected]>
---
 libavformat/asfdec.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavformat/asfdec.c b/libavformat/asfdec.c
index b877846..98f209f 100644
--- a/libavformat/asfdec.c
+++ b/libavformat/asfdec.c
@@ -1426,6 +1426,8 @@ static int asf_read_packet(AVFormatContext *s, AVPacket 
*pkt)
     while (!pb->eof_reached) {
         if (asf->state == PARSE_PACKET_HEADER) {
             asf_read_packet_header(s);
+            if (pb->eof_reached)
+                break;
             if (!asf->nb_mult_left)
                 asf->state = READ_SINGLE;
             else
-- 
2.1.4

_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to