From 6091a8d92d26f55c83e907da59ffdb8dfc7865c3 Mon Sep 17 00:00:00 2001
From: Carl Eugen Hoyos <cehoyos@ag.or.at>
Date: Sat, 2 Mar 2013 18:37:55 +0100
Subject: [PATCH] Avoid huge memory allocations from asf demuxer.
Fixes ticket #1888.
---
libavformat/asfdec.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/libavformat/asfdec.c b/libavformat/asfdec.c
index 233b6cae795..38f46a64740 100644
--- a/libavformat/asfdec.c
+++ b/libavformat/asfdec.c
@@ -1011,6 +1011,7 @@ static int asf_read_frame_header(AVFormatContext *s, AVIOContext *pb)
asf->packet_obj_size = avio_rl32(pb);
if (asf->packet_obj_size >= (1 << 24) || asf->packet_obj_size <= 0) {
av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n");
+ asf->packet_obj_size = 0;
return AVERROR_INVALIDDATA;
}
asf->packet_frag_timestamp = avio_rl32(pb); // timestamp
--
GitLab