avformat/img2dec: fix infinite loop

Fixes: kira-poc

Found-by: Kira <kira_cxy@foxmail.com>
Change suggested by Kira
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
pull/281/head
Michael Niedermayer 7 years ago
parent f655ddfb47
commit a6cba06205
  1. 6
      libavformat/img2dec.c

@ -878,10 +878,14 @@ static int svg_probe(AVProbeData *p)
{
const uint8_t *b = p->buf;
const uint8_t *end = p->buf + p->buf_size;
if (memcmp(p->buf, "<?xml", 5))
return 0;
while (b < end) {
b += ff_subtitles_next_line(b);
int inc = ff_subtitles_next_line(b);
if (!inc)
break;
b += inc;
if (b >= end - 4)
return 0;
if (!memcmp(b, "<svg", 4))

Loading…
Cancel
Save