[vlc-commits] demux/vobsub: Fix out-of-bounds array read

[Marvin Scholz]

vlc | branch: master | Marvin Scholz <epirat07 at gmail.com> | Tue Dec 10 13:42:46 2019 +0100| [edc61c637b6ff04f374c4eb16421e071e557ea4b] | committer: Marvin Scholz

demux/vobsub: Fix out-of-bounds array read

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=edc61c637b6ff04f374c4eb16421e071e557ea4b
---

 modules/demux/vobsub.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/demux/vobsub.c b/modules/demux/vobsub.c
index ba247d9a10..1597c4109c 100644
--- a/modules/demux/vobsub.c
+++ b/modules/demux/vobsub.c
@@ -290,6 +290,10 @@ static int Control( demux_t *p_demux, int i_query, va_list args )
                                 p_sys->track[i].p_es, &b_selected );
                 if( b_selected ) break;
             }
+            if (i >= p_sys->i_tracks) {
+                /* No selected ES found */
+                return VLC_EGENERIC;
+            }
             if( p_sys->track[i].i_current_subtitle >= p_sys->track[i].i_subtitles )
             {
                 *pf = 1.0;