avformat/oggparseogm: Check available data before reading global header

Fixes use of uninitialized data Found-by: Thomas Guilbert <[email protected]> Signed-off-by: Michael Niedermayer <[email protected]>
SaschaVasarrhelyi · Apr 11, 2017 · 170d864 · 170d864
1 parent cd8e627
commit 170d864
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/libavformat/oggparseogm.c b/libavformat/oggparseogm.c
@@ -108,6 +108,8 @@ ogm_header(AVFormatContext *s, int idx)
             if (size > 52) {
                 av_assert0(AV_INPUT_BUFFER_PADDING_SIZE <= 52);
                 size -= 52;
+                if (bytestream2_get_bytes_left(&p) < size)
+                    return AVERROR_INVALIDDATA;
                 ff_alloc_extradata(st->codecpar, size);
                 bytestream2_get_buffer(&p, st->codecpar->extradata, st->codecpar->extradata_size);
             }