[PATCH] mpeg2ts: add section size check (#2395)

Gbp-Pq: Name CVE-2023-0819.patch

diff --git a/src/media_tools/mpegts.c b/src/media_tools/mpegts.c
index 8f26bc711c323a26e5d8cb480b0ce8aa06006ded..386d69977bb1be2ee197ac9b5935d0a5a72c038e 100644 (file)
--- a/src/media_tools/mpegts.c
+++ b/src/media_tools/mpegts.c
@@ -925,6 +925,11 @@ static void gf_m2ts_process_tdt_tot(GF_M2TS_Demuxer *ts, GF_M2TS_SECTION_ES *tdt
                return;
        }
 
+       if (data_size < 5) {
+               GF_LOG(GF_LOG_ERROR, GF_LOG_CONTAINER, ("[MPEG-2 TS] Section data size too small to read date (len: %u)\n", data_size));
+               return;
+       }
+
        /*UTC_time - see annex C of DVB-SI ETSI EN 300468*/
 /* decodes an Modified Julian Date (MJD) into a Co-ordinated Universal Time (UTC)
 See annex C of DVB-SI ETSI EN 300468 */