[FFmpeg-devel] [PATCH] avformat/apv: fix range of au_size (PR #20340)

[Dariusz Frankiewicz via ffmpeg-devel <ffmpeg-devel@ffmpeg.org>]

PR #20340 opened by Dariusz Frankiewicz (dariusz-f)
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20340
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20340.patch

Acces unit size is described in documentation as > 0 < 0xFFFFFFFF

Signed-off-by: Dariusz Frankiewicz <d.frankiewic@samsung.com>


>From d0405772f7bcd5c6a1c5591e83ab8783526ce84b Mon Sep 17 00:00:00 2001
From: Dariusz Frankiewicz <d.frankiewic@samsung.com>
Date: Wed, 6 Aug 2025 14:11:56 +0200
Subject: [PATCH] avformat/apv: fix range of au_size

Acces unit size is described in documentation as > 0 < 0xFFFFFFFF

Signed-off-by: Dariusz Frankiewicz <d.frankiewic@samsung.com>
---
 libavformat/apvdec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/apvdec.c b/libavformat/apvdec.c
index 52adb17e41..4a5592d98c 100644
--- a/libavformat/apvdec.c
+++ b/libavformat/apvdec.c
@@ -207,7 +207,7 @@ static int apv_read_packet(AVFormatContext *s, AVPacket *pkt)
     au_size = avio_rb32(s->pb);
     if (au_size == 0 && avio_feof(s->pb))
         return AVERROR_EOF;
-    if (au_size < 24 || au_size > 1 << 24) {
+    if (au_size == 0 || au_size > UINT32_MAX) {
         av_log(s, AV_LOG_ERROR,
                "APV AU has invalid size: %"PRIu32"\n", au_size);
         return AVERROR_INVALIDDATA;
-- 
2.49.1

_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org