[PATCH] fixed #1905
authorjeanlf <jeanlf@gpac.io>
Wed, 1 Sep 2021 11:50:54 +0000 (13:50 +0200)
committerMoritz Mühlenhoff <jmm@debian.org>
Mon, 19 Jun 2023 21:46:06 +0000 (22:46 +0100)
Gbp-Pq: Name CVE-2021-40575.patch

src/filters/reframe_mpgvid.c

index 7b13500c16629916177614d53c2246c01bbd5573..8fb82e7929ce11b71479c2e0cdb412ccae4c7c26 100644 (file)
@@ -760,8 +760,14 @@ GF_Err mpgviddmx_process(GF_Filter *filter)
                        mpgviddmx_enqueue_or_dispatch(ctx, dst_pck, GF_FALSE, GF_FALSE);
                }
 
-               //parse headers
+               //not enough bytes to parse start code
+                if (remain<5) {
+                        memcpy(ctx->hdr_store, start, remain);
+                        ctx->bytes_in_header = remain;
+                        break;
+                }
 
+               //parse headers
                //we have a start code loaded, eg the data packet does not have a full start code at the begining
                if (sc_type_forced) {
                        gf_bs_reassign_buffer(ctx->bs, start + hdr_offset, remain - hdr_offset);