Mercurial > pt1
changeset 106:12b9192becaa
avoid infinite loop. length in the first descriptor loop can be zero.
author | Yoshiki Yazawa <yaz@honeyplanet.jp> |
---|---|
date | Sat, 27 Feb 2010 04:10:16 +0900 |
parents | 0a9406f92f32 |
children | 1ccbe20c4ce5 |
files | recpt1/tssplitter_lite.c |
diffstat | 1 files changed, 4 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/recpt1/tssplitter_lite.c Fri Feb 26 22:58:59 2010 +0900 +++ b/recpt1/tssplitter_lite.c Sat Feb 27 04:10:16 2010 +0900 @@ -605,6 +605,10 @@ tag = buf[p]; len = buf[p+1]; + + if(len == 0) + break; + if(tag == 0x09 && len >= 4 && p+len <= N) { ca_pid = ((buf[p+4] << 8) | buf[p+5]) & 0x1fff; sp->pids[ca_pid] = 1;