mirror of https://git.videolan.org/git/ffmpeg.git
fftools/ffmpeg: avoid possible invalid reads with short -tag values
Fixes #10319 and #10309.
This commit is contained in:
parent
65e537b833
commit
89c9a3ac35
|
@ -736,8 +736,12 @@ static void add_input_streams(const OptionsContext *o, Demuxer *d)
|
|||
MATCH_PER_STREAM_OPT(codec_tags, str, codec_tag, ic, st);
|
||||
if (codec_tag) {
|
||||
uint32_t tag = strtol(codec_tag, &next, 0);
|
||||
if (*next)
|
||||
tag = AV_RL32(codec_tag);
|
||||
if (*next) {
|
||||
uint8_t buf[4] = { 0 };
|
||||
memcpy(buf, codec_tag, FFMIN(sizeof(buf), strlen(codec_tag)));
|
||||
tag = AV_RL32(buf);
|
||||
}
|
||||
|
||||
st->codecpar->codec_tag = tag;
|
||||
}
|
||||
|
||||
|
|
|
@ -610,8 +610,11 @@ static OutputStream *new_output_stream(Muxer *mux, const OptionsContext *o,
|
|||
MATCH_PER_STREAM_OPT(codec_tags, str, codec_tag, oc, st);
|
||||
if (codec_tag) {
|
||||
uint32_t tag = strtol(codec_tag, &next, 0);
|
||||
if (*next)
|
||||
tag = AV_RL32(codec_tag);
|
||||
if (*next) {
|
||||
uint8_t buf[4] = { 0 };
|
||||
memcpy(buf, codec_tag, FFMIN(sizeof(buf), strlen(codec_tag)));
|
||||
tag = AV_RL32(buf);
|
||||
}
|
||||
ost->st->codecpar->codec_tag = tag;
|
||||
if (ost->enc_ctx)
|
||||
ost->enc_ctx->codec_tag = tag;
|
||||
|
|
Loading…
Reference in New Issue