[vlc-commits] [Git][videolan/vlc][master] demux: add check to verify sequence table size to prevent oom

[Felix Paul Kühne (@fkuehne)]

Felix Paul Kühne pushed to branch master at VideoLAN / VLC


Commits:
7acd6b4d by unichronic at 2026-03-08T17:27:48+01:00
demux: add check to verify sequence table size to prevent oom

- - - - -


1 changed file:

- modules/demux/ty.c


Changes:

=====================================
modules/demux/ty.c
=====================================
@@ -1658,6 +1658,9 @@ static int parse_master(demux_t *p_demux)
     uint32_t i_map_size = U32_AT(&mst_buf[20]);  /* size of bitmask, in bytes */
     uint32_t i = U32_AT(&mst_buf[28]);   /* size of SEQ table, in bytes */
 
+    if( i_save_pos + 32 + i > p_sys->i_stream_size )
+        return VLC_EGENERIC;
+
     if(i_map_size > UINT32_MAX / 8)
         return VLC_EGENERIC;
 



View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/7acd6b4d267e8cec330eca594d034552ff80d728

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/7acd6b4d267e8cec330eca594d034552ff80d728
You're receiving this email because of your account on code.videolan.org.


VideoLAN code repository instance