No testcase

Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
---
 libavformat/aviobuf.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavformat/aviobuf.c b/libavformat/aviobuf.c
index 78cc60b2ae..7730547106 100644
--- a/libavformat/aviobuf.c
+++ b/libavformat/aviobuf.c
@@ -917,6 +917,8 @@ uint64_t ffio_read_varlen(AVIOContext *bc){
 
     do{
         tmp = avio_r8(bc);
+        if (val > UINT64_MAX>>7)
+            return AVERROR_INVALIDDATA;
         val= (val<<7) + (tmp&127);
     }while(tmp&128);
     return val;
-- 
2.17.1

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".

Reply via email to