From: Markus Koschany <apo@debian.org>
Date: Sun, 30 Dec 2018 19:51:01 +0000 (+0100)
Subject: CVE-2017-14171
X-Git-Tag: archive/raspbian/6%11.12-1_deb8u9+rpi1^2~29
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=c0aa8578a2ab74eb18076d0c4fb80a789edc0c18;p=libav.git

CVE-2017-14171

Origin: https://github.com/FFmpeg/FFmpeg/commit/c24bcb553650b91e9eff15ef6e54ca73de2453b7

Gbp-Pq: Name CVE-2017-14171.patch
---

diff --git a/libavformat/nsvdec.c b/libavformat/nsvdec.c
index 670b867..25cc443 100644
--- a/libavformat/nsvdec.c
+++ b/libavformat/nsvdec.c
@@ -351,8 +351,11 @@ static int nsv_parse_NSVf_header(AVFormatContext *s)
         if (!nsv->nsvs_file_offset)
             return AVERROR(ENOMEM);
 
-        for(i=0;i<table_entries_used;i++)
+        for(i=0;i<table_entries_used;i++) {
+            if (avio_feof(pb))
+                return AVERROR_INVALIDDATA;
             nsv->nsvs_file_offset[i] = avio_rl32(pb) + size;
+        }
 
         if(table_entries > table_entries_used &&
            avio_rl32(pb) == MKTAG('T','O','C','2')) {