avformat/mov: check for EOF inside the infe list parsing loop

Signed-off-by: James Almer <jamrial@gmail.com>
7 months ago · dc51d491cf
parent fbe52bd65c
commit dc51d491cf
1 changed files with 2 additions and 0 deletions
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@ -8202,6 +8202,8 @@ static int mov_read_iinf(MOVContext *c, AVIOContext *pb, MOVAtom atom)
    for (i = 0; i < entry_count; i++) {
        MOVAtom infe;

+        if (avio_feof(pb))
+            return AVERROR_INVALIDDATA;
        infe.size = avio_rb32(pb) - 8;
        infe.type = avio_rl32(pb);
        ret = mov_read_infe(c, pb, infe, i);