avformat/ty: check if header is correctly parsed and is still present
Fixes #6829. Signed-off-by: Paul B Mahol <onemda@gmail.com>
This commit is contained in:
		
							parent
							
								
									c31ce95f1c
								
							
						
					
					
						commit
						6665938ca8
					
				| @ -440,6 +440,8 @@ static int get_chunk(AVFormatContext *s) | |||||||
|         return AVERROR_INVALIDDATA; |         return AVERROR_INVALIDDATA; | ||||||
| 
 | 
 | ||||||
|     ty->rec_hdrs = parse_chunk_headers(ty->chunk + 4, num_recs); |     ty->rec_hdrs = parse_chunk_headers(ty->chunk + 4, num_recs); | ||||||
|  |     if (!ty->rec_hdrs) | ||||||
|  |         return AVERROR(ENOMEM); | ||||||
|     ty->cur_chunk_pos += 16 * num_recs; |     ty->cur_chunk_pos += 16 * num_recs; | ||||||
| 
 | 
 | ||||||
|     return 0; |     return 0; | ||||||
| @ -723,8 +725,8 @@ static int ty_read_packet(AVFormatContext *s, AVPacket *pkt) | |||||||
|         return AVERROR_EOF; |         return AVERROR_EOF; | ||||||
| 
 | 
 | ||||||
|     while (ret <= 0) { |     while (ret <= 0) { | ||||||
|         if (ty->first_chunk || ty->cur_rec >= ty->num_recs) { |         if (!ty->rec_hdrs || ty->first_chunk || ty->cur_rec >= ty->num_recs) { | ||||||
|             if (get_chunk(s) < 0 || ty->num_recs == 0) |             if (get_chunk(s) < 0 || ty->num_recs <= 0) | ||||||
|                 return AVERROR_EOF; |                 return AVERROR_EOF; | ||||||
|         } |         } | ||||||
| 
 | 
 | ||||||
|  | |||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user