|
|
@ -39,8 +39,7 @@ vorbis_comment(AVFormatContext * as, uint8_t *buf, int size) |
|
|
|
if (size < 8) /* must have vendor_length and user_comment_list_length */ |
|
|
|
if (size < 8) /* must have vendor_length and user_comment_list_length */ |
|
|
|
return -1; |
|
|
|
return -1; |
|
|
|
|
|
|
|
|
|
|
|
s = AV_RL32(p); |
|
|
|
s = bytestream_get_le32(&p); |
|
|
|
p += 4; |
|
|
|
|
|
|
|
size -= 4; |
|
|
|
size -= 4; |
|
|
|
|
|
|
|
|
|
|
|
if (size - 4 < s) |
|
|
|
if (size - 4 < s) |
|
|
@ -49,16 +48,14 @@ vorbis_comment(AVFormatContext * as, uint8_t *buf, int size) |
|
|
|
p += s; |
|
|
|
p += s; |
|
|
|
size -= s; |
|
|
|
size -= s; |
|
|
|
|
|
|
|
|
|
|
|
n = AV_RL32(p); |
|
|
|
n = bytestream_get_le32(&p); |
|
|
|
p += 4; |
|
|
|
|
|
|
|
size -= 4; |
|
|
|
size -= 4; |
|
|
|
|
|
|
|
|
|
|
|
while (size >= 4) { |
|
|
|
while (size >= 4) { |
|
|
|
char *t, *v; |
|
|
|
char *t, *v; |
|
|
|
int tl, vl; |
|
|
|
int tl, vl; |
|
|
|
|
|
|
|
|
|
|
|
s = AV_RL32(p); |
|
|
|
s = bytestream_get_le32(&p); |
|
|
|
p += 4; |
|
|
|
|
|
|
|
size -= 4; |
|
|
|
size -= 4; |
|
|
|
|
|
|
|
|
|
|
|
if (size < s) |
|
|
|
if (size < s) |
|
|
|