| OLD | NEW |
| 1 diff -rpu -N orig/libavformat/mov.c ffmpeg-mt/libavformat/mov.c | 1 diff -wurp -N orig/libavformat/mov.c ffmpeg-mt/libavformat/mov.c |
| 2 --- orig/libavformat/mov.c» 2010-10-11 16:54:07 -0700 | 2 --- orig/libavformat/mov.c» 2010-11-04 08:05:13 -0700 |
| 3 +++ ffmpeg-mt/libavformat/mov.c»2010-10-11 16:54:08 -0700 | 3 +++ ffmpeg-mt/libavformat/mov.c»2010-11-04 08:05:16 -0700 |
| 4 @@ -344,6 +344,8 @@ static int mov_read_dref(MOVContext *c, | 4 @@ -344,6 +344,8 @@ static int mov_read_dref(MOVContext *c, |
| 5 MOVDref *dref = &sc->drefs[i]; | 5 MOVDref *dref = &sc->drefs[i]; |
| 6 uint32_t size = get_be32(pb); | 6 uint32_t size = get_be32(pb); |
| 7 int64_t next = url_ftell(pb) + size - 4; | 7 int64_t next = url_ftell(pb) + size - 4; |
| 8 + if (size < 8) | 8 + if (size < 8) |
| 9 + return -1; | 9 + return -1; |
| 10 | 10 |
| 11 if (size < 12) | 11 if (size < 12) |
| 12 return -1; | 12 return -1; |
| OLD | NEW |