# HG changeset patch # User Yoshiki Yazawa # Date 1267211416 -32400 # Node ID 12b9192becaab34b405948c9a4370025bac80e84 # Parent 0a9406f92f32f567f98ab47a553e364cd968921e avoid infinite loop. length in the first descriptor loop can be zero. diff -r 0a9406f92f32 -r 12b9192becaa recpt1/tssplitter_lite.c --- a/recpt1/tssplitter_lite.c Fri Feb 26 22:58:59 2010 +0900 +++ b/recpt1/tssplitter_lite.c Sat Feb 27 04:10:16 2010 +0900 @@ -605,6 +605,10 @@ tag = buf[p]; len = buf[p+1]; + + if(len == 0) + break; + if(tag == 0x09 && len >= 4 && p+len <= N) { ca_pid = ((buf[p+4] << 8) | buf[p+5]) & 0x1fff; sp->pids[ca_pid] = 1;