[vlc-commits] [Git][videolan/vlc][master] demux: mpeg4: fix OOB read

[Steve Lhomme (@robUx4)]

Steve Lhomme pushed to branch master at VideoLAN / VLC


Commits:
f277d35f by François Cartegnie at 2026-09-08T08:28:38+00:00
demux: mpeg4: fix OOB read

refs #29696

- - - - -


1 changed file:

- modules/demux/mpeg/mpeg4_iod.c


Changes:

=====================================
modules/demux/mpeg/mpeg4_iod.c
=====================================
@@ -629,8 +629,8 @@ sl_header_data DecodeSLHeader( unsigned i_data, const uint8_t *p_data,
         /* more to read if ExtSLConfigDescrTag */
     }
 
-    if ( b_has_padding && !i_padding ) /* all padding */
-        ret.i_size =  i_data;
+    if ( ( b_has_padding && !i_padding ) /* all padding */ || bs_error( &s ) /* overread bits/truncated header */ )
+        ret.i_size = i_data;
     else
         ret.i_size = (bs_pos( &s ) + 7) / 8;
 



View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/f277d35fae155eb49cc14e402e2dc8267fc79603

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/f277d35fae155eb49cc14e402e2dc8267fc79603
You're receiving this email because of your account on code.videolan.org. Manage all notifications: https://code.videolan.org/-/profile/notifications | Help: https://code.videolan.org/help