asfdec: reject size > INT64_MAX in asf_read_unknown
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Wed, 6 Jan 2016 06:32:25 +0000 (07:32 +0100)
committerAnton Khirnov <anton@khirnov.net>
Thu, 7 Jan 2016 07:20:21 +0000 (08:20 +0100)
commit2aec600ae7af7d46a4877b5ccc263b39f05a91cb
treeb123102db75c64b77b3b91841a4fdf2a9dd2c9a9
parentc69461d73797e02e7a3ab4316050c241fa91f53f
asfdec: reject size > INT64_MAX in asf_read_unknown

Both avio_skip and detect_unknown_subobject use int64_t for the size
parameter.

This fixes a segmentation fault due to infinite recursion.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Alexandra Hájková <alexandra.khirnova@gmail.com>
Signed-off-by: Anton Khirnov <anton@khirnov.net>
libavformat/asfdec.c