Fixes: OOM
Fixes: 15575/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-
5654666781655040
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
offset += av_xiphlacing(&p[offset], data_len[j]);
for (j = 0; j < num_data; j++) {
- avio_read(pb, &p[offset], data_len[j]);
+ int ret = avio_read(pb, &p[offset], data_len[j]);
+ if (ret < data_len[j]) {
+ st->codecpar->extradata_size = 0;
+ av_freep(&st->codecpar->extradata);
+ break;
+ }
offset += data_len[j];
}