LAV/FFmpeg
1
0
Fork 0
Code

avformat/concatdec: Check file

Browse Source 
Fixes: null pointer dereference
Fixes: -stream_loop 1 -ss 00:00:05 -i zgclab/ffmpeg_crash/poc2 -codec:v copy -codec:a aac -y output.mp4

Found-by: Wang Dawei and Zhou Geng, from Zhongguancun Laboratory
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2024-04-30 00:47:31 +02:00
parent 24bd01ea65
commit a5d1497f33
No known key found for this signature in database
GPG Key ID: B18E8928B3948D64
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libavformat/concatdec.c
View File

@ -639,6 +639,11 @@ static int concat_parse_script(AVFormatContext *avf)
}
}
if (!file) {
ret = AVERROR_INVALIDDATA;
goto fail;
}
if (file->inpoint != AV_NOPTS_VALUE && file->outpoint != AV_NOPTS_VALUE) {
if (file->inpoint > file->outpoint ||
file->outpoint - (uint64_t)file->inpoint > INT64_MAX)