avformat/mov: Error on too large stsd entry counts.
authorDale Curtis <dalecurtis@chromium.org>
Thu, 30 Aug 2018 22:18:25 +0000 (15:18 -0700)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 28 Oct 2018 00:22:42 +0000 (02:22 +0200)
commiteab5f6e419ec8b195d0247d5a4acce9cfc9e0f7a
treece33a9a45137e332a8a702272b69c76d240d88f7
parent462edf5b94354fac265f5c76eff7c733f8ee5b3e
avformat/mov: Error on too large stsd entry counts.

Entries are always at least 8 bytes per the parsing code, so if we
see an impossible entry count avoid massive allocations. This is
similar to an existing check in mov_read_stsc().

Since ff_mov_read_stsd_entries() does eof checks, an alternative
approach could be to clamp the entry count to atom.size / 8.

Signed-off-by: Dale Curtis <dalecurtis@chromium.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 320b631a99a9f759fd1d5460fd4e285d184b8186)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/mov.c