From: Alexandra Hájková Date: Tue, 21 Jul 2015 08:45:01 +0000 (+0200) Subject: asfdec: avoid crash in the case when chunk_len is 0 or pkt_len is 0 X-Git-Tag: n2.8~153^2~131 X-Git-Url: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff_plain;h=2a187a074a7f5ad9f01f72ac9715ddfcb2dbb8ec asfdec: avoid crash in the case when chunk_len is 0 or pkt_len is 0 Signed-off-by: Anton Khirnov --- diff --git a/libavformat/asfdec.c b/libavformat/asfdec.c index 6a71be9ab2..6dc34d9735 100644 --- a/libavformat/asfdec.c +++ b/libavformat/asfdec.c @@ -776,6 +776,8 @@ static int asf_read_stream_properties(AVFormatContext *s, const GUIDParseTable * asf_st->span = span; asf_st->virtual_pkt_len = avio_rl16(pb); asf_st->virtual_chunk_len = avio_rl16(pb); + if (!asf_st->virtual_chunk_len || !asf_st->virtual_pkt_len) + return AVERROR_INVALIDDATA; avio_skip(pb, err_data_len - 5); } else avio_skip(pb, err_data_len - 1);