--- Found an infinite loop on probing while zzuf'ing. --- libavformat/apngdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavformat/apngdec.c b/libavformat/apngdec.c index 189480e..d97b015 100644 --- a/libavformat/apngdec.c +++ b/libavformat/apngdec.c @@ -87,7 +87,7 @@ static int apng_probe(AVProbeData *p) /* we don't check IDAT size, as this is the last tag * we check, and it may be larger than the probe buffer */ if (tag != MKTAG('I', 'D', 'A', 'T') && - len > bytestream2_get_bytes_left(&gb)) + len + 4 > bytestream2_get_bytes_left(&gb)) return 0; switch (tag) { -- 2.2.0 _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel