avformat/concatdec: Check file

Fixes: null pointer dereference
Fixes: -stream_loop 1 -ss 00:00:05 -i zgclab/ffmpeg_crash/poc2 -codec:v copy -codec:a aac -y output.mp4

Found-by: Wang Dawei and Zhou Geng, from Zhongguancun Laboratory
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
release/7.1
Michael Niedermayer 8 months ago
parent 24bd01ea65
commit a5d1497f33
No known key found for this signature in database
GPG Key ID: B18E8928B3948D64
  1. 5
      libavformat/concatdec.c

@ -639,6 +639,11 @@ static int concat_parse_script(AVFormatContext *avf)
} }
} }
if (!file) {
ret = AVERROR_INVALIDDATA;
goto fail;
}
if (file->inpoint != AV_NOPTS_VALUE && file->outpoint != AV_NOPTS_VALUE) { if (file->inpoint != AV_NOPTS_VALUE && file->outpoint != AV_NOPTS_VALUE) {
if (file->inpoint > file->outpoint || if (file->inpoint > file->outpoint ||
file->outpoint - (uint64_t)file->inpoint > INT64_MAX) file->outpoint - (uint64_t)file->inpoint > INT64_MAX)

Loading…
Cancel
Save