[vlc-commits] packetizer: mpegvideo: fix OOB read

[Francois Cartegnie]

vlc/vlc-2.2 | branch: master | Francois Cartegnie <fcvlcdev at free.fr> | Thu Feb 16 14:03:22 2017 +0100| [abbb50a5d8ee2ff22815737efaa67e9afe3378b3] | committer: Francois Cartegnie

packetizer: mpegvideo: fix OOB read

> http://git.videolan.org/gitweb.cgi/vlc/vlc-2.2.git/?a=commit;h=abbb50a5d8ee2ff22815737efaa67e9afe3378b3
---

 modules/packetizer/mpegvideo.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/packetizer/mpegvideo.c b/modules/packetizer/mpegvideo.c
index 038366c..9cba574 100644
--- a/modules/packetizer/mpegvideo.c
+++ b/modules/packetizer/mpegvideo.c
@@ -619,7 +619,7 @@ static block_t *ParseMPEGBlock( decoder_t *p_dec, block_t *p_frag )
 #endif
 
         }
-        else if( i_type == 0x08 )
+        else if( i_type == 0x08 && p_frag->i_buffer > 8 )
         {
             /* picture extension */
             p_sys->i_picture_structure = p_frag->p_buffer[6]&0x03;