[PATCH] fixed #2343

Gbp-Pq: Name CVE-2022-47091.patch

diff --git a/src/filters/load_text.c b/src/filters/load_text.c
index 9447647487ef28408c4ee0d88c113c41018fca94..5914505b893851451ae2d39f555522ad17d0817e 100644 (file)
--- a/src/filters/load_text.c
+++ b/src/filters/load_text.c
@@ -1753,7 +1753,7 @@ static GF_Err gf_text_process_sub(GF_Filter *filter, GF_TXTIn *ctx)
        u32 i, j, len, line;
        GF_TextSample *samp;
        Double ts_scale;
-       char szLine[2048], szTime[20], szText[2048];
+       char szLine[2048], szTime[41], szText[2048];
 
        //same setup as for srt
        if (!ctx->is_setup) {
@@ -1795,8 +1795,7 @@ static GF_Err gf_text_process_sub(GF_Filter *filter, GF_TXTIn *ctx)
                while (szLine[i+1] && szLine[i+1]!='}') {
                        szTime[i] = szLine[i+1];
                        i++;
-                       if (i>=19)
-                               break;
+                       if (i>=40) break;
                }
                szTime[i] = 0;
                ctx->start = atoi(szTime);
@@ -1813,6 +1812,7 @@ static GF_Err gf_text_process_sub(GF_Filter *filter, GF_TXTIn *ctx)
                while (szLine[i+1+j] && szLine[i+1+j]!='}') {
                        szTime[i] = szLine[i+1+j];
                        i++;
+                       if (i>=40) break;
                }
                szTime[i] = 0;
                ctx->end = atoi(szTime);