Fix possible heap buffer overflow in MP4GetVideoProfileLevel().

linkflowlab · Apr 3, 2023 · aefcd67 · aefcd67
1 parent c9b726d
commit aefcd67
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/mp4.cpp b/src/mp4.cpp
@@ -515,7 +515,7 @@ MP4FileHandle MP4ModifyCallbacks(const MP4IOCallbacks* callbacks,
                                                    &foo,
                                                    &bufsize)) {
                         uint8_t *ptr = foo;
-                        while (bufsize > 0) {
+                        while (bufsize >= 5) {
                             if (MP4V2_HTONL(*(uint32_t *)ptr) == 0x1b0) {
                                 uint8_t ret = ptr[4];
                                 free(foo);