third_party/exiv2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

asfvideo fuzz issue : nb_headers should not exceed the max value of uint32

Browse Source
This commit is contained in:
Mohamed Ali Chebbi 2023-03-03 22:20:41 +01:00 committed by Rosen Penev
parent b9d94e61fe
commit 8b96ebc6b4
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/asfvideo.cpp
View File

@ -294,6 +294,7 @@ void AsfVideo::decodeHeader() {
io_->read(nbHeadersBuf.data(), DWORD);
uint32_t nb_headers = Exiv2::getULong(nbHeadersBuf.data(), littleEndian);
Internal::enforce(nb_headers < std::numeric_limits<uint32_t>::max(), Exiv2::ErrorCode::kerCorruptedMetadata);
io_->seekOrThrow(io_->tell() + BYTE * 2, BasicIo::beg,
ErrorCode::kerFailedToReadImageData); // skip two reserved tags
for (uint32_t i = 0; i < nb_headers; i++) {