Ignore es_map_length when parsing mpeg program stream map.

Fixes ticket #3195.
11 years ago · af7562a035
parent e2bf00ce46
commit af7562a035
1 changed files with 2 additions and 0 deletions
--- a/libavformat/mpeg.c
+++ b/libavformat/mpeg.c
@ -193,6 +193,8 @@ static long mpegps_psm_parse(MpegDemuxContext *m, AVIOContext *pb)
    /* skip program_stream_info */
    avio_skip(pb, ps_info_length);
    es_map_length = avio_rb16(pb);
+    /* Ignore es_map_length, trust psm_length */
+    es_map_length = psm_length - ps_info_length - 10;

    /* at least one es available? */
    while (es_map_length >= 4){