OSDN Git Service

mov: immediately return from mov_fix_index without old index entries
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Tue, 1 Nov 2016 00:05:01 +0000 (01:05 +0100)
committerAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Tue, 1 Nov 2016 17:45:34 +0000 (18:45 +0100)
commit9d83b209d8861f1daf55f6719b1e0c226ed7269a
tree38495bb9f4824ff00eda5a0c27040fb7edeb7715
parent6089c44a2af1394bb34257814ba50e05b84112ec
mov: immediately return from mov_fix_index without old index entries

If there are no index entries, e_old = st->index_entries is only one
byte large, since it was created by av_realloc called with size 0.

Thus accessing e_old[0].timestamp causes a heap buffer overflow.

Reviewed-by: Sasi Inguva <isasi@google.com>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
libavformat/mov.c