[vlc-commits] packetizer: mpegvideo: fix OOB read

[Francois Cartegnie]

vlc | branch: master | Francois Cartegnie <fcvlcdev at free.fr> | Thu Feb 16 14:03:22 2017 +0100| [80c9a893dbf38d3d66d4ee816fe450fff9baf0e3] | committer: Francois Cartegnie

packetizer: mpegvideo: fix OOB read

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=80c9a893dbf38d3d66d4ee816fe450fff9baf0e3
---

 modules/packetizer/mpegvideo.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/packetizer/mpegvideo.c b/modules/packetizer/mpegvideo.c
index fc205d7..660123e 100644
--- a/modules/packetizer/mpegvideo.c
+++ b/modules/packetizer/mpegvideo.c
@@ -631,7 +631,7 @@ static block_t *ParseMPEGBlock( decoder_t *p_dec, block_t *p_frag )
 #endif
 
         }
-        else if( i_type == 0x08 )
+        else if( i_type == 0x08 && p_frag->i_buffer > 8 )
         {
             /* picture extension */
             p_sys->i_picture_structure = p_frag->p_buffer[6]&0x03;