asfdec_o: reject size > INT64_MAX in asf_read_unknown
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Tue, 5 Jan 2016 12:20:11 +0000 (13:20 +0100)
committerAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Wed, 27 Jan 2016 22:45:44 +0000 (23:45 +0100)
commit407ab167c07c9afb4aa3518f850241fad0ac0df9
tree0477d890557d6d3469e39c89fe60a63f33b7a9f0
parentd7fbd0366005b2d4abf06e97d623e078ccf3e160
asfdec_o: reject size > INT64_MAX in asf_read_unknown

Both avio_skip and detect_unknown_subobject use int64_t for the size
parameter.

This fixes a segmentation fault due to infinite recursion.

Reviewed-by: Alexandra Hájková <alexandra.khirnova@gmail.com>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit aa180169961b46cf0d2bcc23cb686f93c079b256)
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
libavformat/asfdec_o.c