github-mirrors/FFmpeg
1
0
Fork 0
mirror of https://mirror.skon.top/https://github.com/FFmpeg/FFmpeg synced 2026-04-20 21:00:41 +08:00
Code Issues Packages Projects Releases Wiki Activity

avformat/rsd: reject short ADPCM_THP extradata reads

Browse Source 
Use ffio_read_size() to enforce exact-length reads of the per-channel
ADPCM_THP coefficient tables. Previously the return value of
avio_read() was unchecked, silently accepting truncated extradata.
This commit is contained in:
Weidong Wang
2026-03-14 13:18:41 -05:00
committed by michaelni
parent e9c6d411c4
commit 06d19d000d
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libavformat/rsd.c
View File

@@ -22,6 +22,7 @@
#include "libavutil/intreadwrite.h"
#include "avformat.h"
#include "avio.h"
#include "avio_internal.h"
#include "demux.h"
#include "internal.h"
@@ -131,9 +132,9 @@ static int rsd_read_header(AVFormatContext *s)
return ret;
for (i = 0; i < par->ch_layout.nb_channels; i++) {
if (avio_feof(pb))
return AVERROR_EOF;
avio_read(s->pb, st->codecpar->extradata + 32 * i, 32);
ret = ffio_read_size(s->pb, st->codecpar->extradata + 32 * i, 32);
if (ret < 0)
return ret;
avio_skip(s->pb, 8);
}
break;