if buff + frameSize is bigger than srcEnd, break before memcpy (#838)

justdan96 · Mar 13, 2024 · 224312f · 224312f
1 parent 75c9cb3
commit 224312f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tsMuxer/movDemuxer.cpp b/tsMuxer/movDemuxer.cpp
@@ -184,6 +184,7 @@ class MovParsedAudioTrackData final : public ParsedTrackPrivData
             unsigned frameSize = m_sc->sample_size;
             if (frameSize == 0)
                 frameSize = m_sc->m_index[m_sc->m_indexCur++];
+	    if (buff + frameSize > srcEnd) break;
             if (isAAC)
             {
                 m_aacRaw.m_channels = static_cast<uint8_t>(m_sc->channels);