changeset 1962:f28d346de931 libavformat

break if atom size is more than size left in container atom, fix shooter.mov
author bcoudurier
date Thu, 29 Mar 2007 10:37:07 +0000
parents 0bb1bfbaa031
children 81268e2bd9aa
files mov.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/mov.c	Thu Mar 29 06:32:54 2007 +0000
+++ b/mov.c	Thu Mar 29 10:37:07 2007 +0000
@@ -250,7 +250,7 @@
 
         a.size -= 8;
 
-        if(a.size < 0)
+        if(a.size < 0 || a.size > atom.size - total_size)
             break;
 
         if (c->parse_table[i].type == 0) { /* skip leaf atoms data */