X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavcodec%2Fmovtextdec.c;h=a33fff7518c537ee5a05016ac379375385de8e1a;hb=3aa7b0a27326bd312ef790d9149f6b5efff97311;hp=abf8711a9c06c42e26a2981a2139cb6b5e7809db;hpb=9b35242370be013074de4c48ac9156bd9e88d6d6;p=ffmpeg diff --git a/libavcodec/movtextdec.c b/libavcodec/movtextdec.c index abf8711a9c0..a33fff7518c 100644 --- a/libavcodec/movtextdec.c +++ b/libavcodec/movtextdec.c @@ -471,6 +471,10 @@ static int mov_text_decode_frame(AVCodecContext *avctx, tsmb_type = AV_RB32(tsmb); tsmb += 4; + if (tsmb_size == 0) { + return AVERROR_INVALIDDATA; + } + if (tsmb_size == 1) { if (m->tracksize + 16 > avpkt->size) break;