]> git.sesse.net Git - ffmpeg/commitdiff
dcadec: Do not check for overreads in auxiliary data
authorTim Walker <tdskywalker@gmail.com>
Sat, 21 Nov 2015 23:02:37 +0000 (00:02 +0100)
committerLuca Barbato <lu_zero@gentoo.org>
Mon, 23 Nov 2015 10:32:32 +0000 (11:32 +0100)
The auxiliary data length field is not reliable,
and incorrect overread errors could be returned
for valid, real-world bitstreams.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
libavcodec/dcadec.c

index 610857ddf2b85a37a3bb8eb59b750a3337bfed74..7e9463861c4a6e40c120e3407366de1bc3ddf968 100644 (file)
@@ -1086,12 +1086,12 @@ static int dca_subframe_footer(DCAContext *s, int base_channel)
             align_get_bits(&s->gb); // byte align
             skip_bits(&s->gb, 16);  // nAUXCRC16
 
-            // additional data (reserved, cf. ETSI TS 102 114 V1.4.1)
-            if ((reserved = (aux_data_end - get_bits_count(&s->gb))) < 0) {
-                av_log(s->avctx, AV_LOG_ERROR,
-                       "Overread auxiliary data by %d bits\n", -reserved);
-                return AVERROR_INVALIDDATA;
-            } else if (reserved) {
+            /*
+             * additional data (reserved, cf. ETSI TS 102 114 V1.4.1)
+             *
+             * Note: don't check for overreads, aux_data_count can't be trusted.
+             */
+            if ((reserved = (aux_data_end - get_bits_count(&s->gb))) > 0) {
                 avpriv_request_sample(s->avctx,
                                       "Core auxiliary data reserved content");
                 skip_bits_long(&s->gb, reserved);