break if atom size is more than size left in container atom, fix shooter.mov

Originally committed as revision 8544 to svn://svn.ffmpeg.org/ffmpeg/trunk
pull/126/head
Baptiste Coudurier 18 years ago
parent db56acd480
commit 62b6498df2
  1. 2
      libavformat/mov.c

@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
a.size -= 8;
if(a.size < 0)
if(a.size < 0 || a.size > atom.size - total_size)
break;
if (c->parse_table[i].type == 0) { /* skip leaf atoms data */

Loading…
Cancel
Save