if a.size > atom.size, then throw (#876)

* if a.size > atom.size, then throw * fix lint
justdan96 · May 9, 2024 · 6836d7c · 6836d7c
1 parent 86b2fe2
commit 6836d7c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tsMuxer/movDemuxer.cpp b/tsMuxer/movDemuxer.cpp
@@ -1525,6 +1525,10 @@ if (bits_per_sample) {
 
         // this will read extra atoms at the end (wave, alac, damr, avcC, SMI ...)
         a.size = size - (m_processedBytes - start_pos);
+        if (a.size > atom.size)
+        {
+            THROW(ERR_MOV_PARSE, "MP4/MOV error: Invalid a.size in mov_read_stsd")
+        }
         if (a.size > 8)
         {
             if (mov_read_default(a) < 0)