[PATCH] fixed #1879

Gbp-Pq: Name CVE-2021-40607.patch

diff --git a/src/isomedia/box_code_drm.c b/src/isomedia/box_code_drm.c
index 32c5e166b5b82e98d2c1e58fddbbe996908bb3e7..aa73a16d432a2047165a38772bd8ebce651e0de9 100644 (file)
--- a/src/isomedia/box_code_drm.c
+++ b/src/isomedia/box_code_drm.c
@@ -148,9 +148,10 @@ GF_Err schm_box_read(GF_Box *s, GF_BitStream *bs)
 
        if (ptr->size && (ptr->flags & 0x000001)) {
                u32 len = (u32) (ptr->size);
-               ptr->URI = (char*)gf_malloc(sizeof(char)*len);
+               ptr->URI = (char*)gf_malloc(sizeof(char)*(len+1));
                if (!ptr->URI) return GF_OUT_OF_MEM;
                gf_bs_read_data(bs, ptr->URI, len);
+               ptr->URI[len] = 0;
        }
        return GF_OK;
 }