From: Markus Koschany <apo@debian.org>
Date: Sun, 30 Dec 2018 15:51:20 +0000 (+0100)
Subject: CVE-2018-14394
X-Git-Tag: archive/raspbian/6%11.12-1_deb8u5+rpi1^2~18
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=236f15dcf1ce4874d9af1fa33ed32b896187730f;p=libav.git

CVE-2018-14394

Origin: https://github.com/FFmpeg/FFmpeg/commit/3a2d21bc5f97aa0161db3ae731fc2732be6108b8

Gbp-Pq: Name CVE-2018-14394.patch
---

diff --git a/libavformat/movenc.c b/libavformat/movenc.c
index e48a363..6d99a0a 100644
--- a/libavformat/movenc.c
+++ b/libavformat/movenc.c
@@ -3033,6 +3033,11 @@ int ff_mov_write_packet(AVFormatContext *s, AVPacket *pkt)
     else
         samples_in_chunk = 1;
 
+    if (samples_in_chunk < 1) {
+        av_log(s, AV_LOG_ERROR, "fatal error, input packet contains no samples\n");
+        return AVERROR_PATCHWELCOME;
+    }
+
     /* copy extradata if it exists */
     if (trk->vos_len == 0 && enc->extradata_size > 0) {
         trk->vos_len  = enc->extradata_size;