From 1651b4581d61572c75736fcd388f3aafe208e21d Mon Sep 17 00:00:00 2001 From: jeanlf Date: Tue, 19 Apr 2022 09:15:58 +0200 Subject: [PATCH] [PATCH] fixed #2175 Gbp-Pq: Name CVE-2022-1441.patch --- src/isomedia/box_code_3gpp.c | 16 ++++------------ 1 file changed, 4 insertions(+), 12 deletions(-) diff --git a/src/isomedia/box_code_3gpp.c b/src/isomedia/box_code_3gpp.c index 0e8681c..f48c777 100644 --- a/src/isomedia/box_code_3gpp.c +++ b/src/isomedia/box_code_3gpp.c @@ -1121,20 +1121,12 @@ void diST_box_del(GF_Box *s) GF_Err diST_box_read(GF_Box *s, GF_BitStream *bs) { - u32 i; - char str[1024]; GF_DIMSScriptTypesBox *p = (GF_DIMSScriptTypesBox *)s; - i=0; - str[0]=0; - while (1) { - str[i] = gf_bs_read_u8(bs); - if (!str[i]) break; - i++; - } - ISOM_DECREASE_SIZE(p, i); - - p->content_script_types = gf_strdup(str); + p->content_script_types = gf_malloc(sizeof(char) * (s->size+1)); + if (!p->content_script_types) return GF_OUT_OF_MEM; + gf_bs_read_data(bs, p->content_script_types, s->size); + p->content_script_types[s->size] = 0; return GF_OK; } -- 2.30.2