CVE-2021-45764
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Tue, 23 May 2023 11:53:25 +0000 (12:53 +0100)
committerAron Xu <aron@debian.org>
Tue, 23 May 2023 11:53:25 +0000 (12:53 +0100)
Origin: https://github.com/gpac/gpac/commit/e54df17892bee983d09d9437e44e6a1528fb46cb
Reviewed-by: Aron Xu <aron@debian.org>
From e54df17892bee983d09d9437e44e6a1528fb46cb Mon Sep 17 00:00:00 2001
From: jeanlf <jeanlf@gpac.io>
Date: Mon, 13 Dec 2021 11:42:13 +0100
Subject: [PATCH] fixed #1971

Gbp-Pq: Name CVE-2021-45764.patch

src/isomedia/isom_store.c

index e9144edf920a122fdf1c9948819ac7121fef8d20..254902b915429b35bc16148a59cadedcd7f28b2d 100644 (file)
@@ -253,6 +253,7 @@ static GF_Err ShiftOffset(GF_ISOFile *file, GF_List *writers, u64 offset)
 
        i=0;
        while ((writer = (TrackWriter *)gf_list_enum(writers, &i))) {
+                if (!writer->stsc || !writer->stco) return GF_ISOM_INVALID_FILE;
                if (writer->mdia->mediaTrack->meta) ShiftMetaOffset(writer->mdia->mediaTrack->meta, offset);
 
                //we have to proceed entry by entry in case a part of the media is not self-contained...