Commit 98a7d60a authored by Petri Hintukainen's avatar Petri Hintukainen

Validate TextST sub path id (fix possible OOB read)

parent 6d45ee0c
Pipeline #3824 passed with stage
in 2 minutes and 39 seconds
......@@ -2103,6 +2103,10 @@ static int _preload_textst_subpath(BLURAY *bd)
return 0;
}
if ((unsigned)textst_subpath >= bd->title->sub_path_count) {
BD_DEBUG(DBG_BLURAY | DBG_CRIT, "_preload_textst_subpath(): invalid subpath id\n");
return -1;
}
if (textst_subclip >= bd->title->sub_path[textst_subpath].clip_list.count) {
BD_DEBUG(DBG_BLURAY | DBG_CRIT, "_preload_textst_subpath(): invalid subclip id\n");
return -1;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment