[vlc-commits] codec: substx3g: fix oob read

[Francois Cartegnie]

vlc | branch: master | Francois Cartegnie <fcvlcdev at free.fr> | Tue Jan  2 16:47:21 2018 +0100| [a38f6756ed57188ca1ed7def63ee7672412316bd] | committer: Francois Cartegnie

codec: substx3g: fix oob read

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=a38f6756ed57188ca1ed7def63ee7672412316bd
---

 modules/codec/substx3g.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/codec/substx3g.c b/modules/codec/substx3g.c
index b08c96790f..f20ba89016 100644
--- a/modules/codec/substx3g.c
+++ b/modules/codec/substx3g.c
@@ -318,6 +318,12 @@ static int Decode( decoder_t *p_dec, block_t *p_block )
 
     /* Read our raw string and create the styled segment for HTML */
     uint16_t i_psz_bytelength = GetWBE( p_buf );
+    if( p_block->i_buffer < i_psz_bytelength + 2U )
+    {
+        block_Release( p_block );
+        return VLCDEC_SUCCESS;
+    }
+
     const uint8_t *p_pszstart = p_block->p_buffer + sizeof(uint16_t);
     char *psz_subtitle;
     if ( i_psz_bytelength > 2 &&