On 26.02.2015 04:15, Luca Barbato wrote:
The decoder has this

     /* channels */
     avctx->channels = buf[7];
     if (avctx->channels <= 0 || avctx->channels > 2)
         return AVERROR_INVALIDDATA;

So by the time you get there the channels are already validated.

the extradata is validated on container and codec level so it should be fine.

This validation just makes sure that the codec can't be opened. But then avformat_find_stream_info continues with reading a frame from the demuxer, leading to the segfault if avctx->channels is 0.

Best regards,
Andreas
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Reply via email to