packetizer: mpeg4video: check for oob read

4faf56ff · François Cartegnie · 19b8ec85 · 4faf56ff
Commit 4faf56ff authored Mar 30, 2017 by François Cartegnie 🤞
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

modules/packetizer/mpeg4video.c modules/packetizer/mpeg4video.c +3 -0

No files found.
--- a/modules/packetizer/mpeg4video.c
+++ b/modules/packetizer/mpeg4video.c
@@ -285,6 +285,9 @@ static block_t *ParseMPEGBlock( decoder_t *p_dec, block_t *p_frag )
    decoder_sys_t *p_sys = p_dec->p_sys;
    block_t *p_pic = NULL;

+    if( p_frag->i_buffer < 4 )
+        return p_frag;
+
    const uint32_t i_startcode = GetDWBE( p_frag->p_buffer );
    if( i_startcode == VISUAL_OBJECT_SEQUENCE_START_CODE ||
        i_startcode == VISUAL_OBJECT_SEQUENCE_END_CODE ||