[PATCH] fixed #1719
authorjeanlf <jeanlf@gpac.io>
Mon, 29 Mar 2021 07:21:51 +0000 (09:21 +0200)
committerMoritz Mühlenhoff <jmm@debian.org>
Thu, 19 Aug 2021 22:03:29 +0000 (23:03 +0100)
Gbp-Pq: Name CVE-2021-30019.patch

src/filters/reframe_adts.c

index a66e8b25091c1a3a3f18ff575f44bf72fd77b71c..734410c4de44f1d28008fb826e01b1329ae14862 100644 (file)
@@ -683,6 +683,12 @@ GF_Err adts_dmx_process(GF_Filter *filter)
                        break;
                }
 
+               if (ctx->hdr.frame_size < ctx->hdr.hdr_size) {
+                       GF_LOG(GF_LOG_WARNING, GF_LOG_PARSER, ("[ADTSDmx] Corrupted ADTS frame header, resyncing\n"));
+                       ctx->nb_frames = 0;
+                       goto drop_byte;
+               }
+
                adts_dmx_check_pid(filter, ctx);
 
                if (!ctx->is_playing) {