opensource/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-06 15:49:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

avformat/imf_cpl: do not continue looping forever

Browse Source 
Fixes: infinite loop
Fixes: 401658595/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5756875014733824
Regression since: 61fa1e14e4178d3f2550c76f7a36484220f6dc0c

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2025-05-10 23:52:57 +02:00
parent 9fc2702f6f
commit 39800d78b0
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavformat/imf_cpl.c
View File

@ -709,8 +709,7 @@ static int fill_virtual_tracks(void *log_ctx, xmlNodePtr cpl_element, FFIMFCPL *
av_log(log_ctx, AV_LOG_DEBUG, "Processing IMF CPL Segment\n"); av_log(log_ctx, AV_LOG_DEBUG, "Processing IMF CPL Segment\n");
sequence_list_elem = ff_imf_xml_get_child_element_by_name(segment_elem, "SequenceList"); sequence_list_elem = ff_imf_xml_get_child_element_by_name(segment_elem, "SequenceList");
if (!sequence_list_elem) if (sequence_list_elem) {
continue;
sequence_elem = xmlFirstElementChild(sequence_list_elem); sequence_elem = xmlFirstElementChild(sequence_list_elem);
while (sequence_elem) { while (sequence_elem) {
@ -735,6 +734,7 @@ static int fill_virtual_tracks(void *log_ctx, xmlNodePtr cpl_element, FFIMFCPL *
sequence_elem = xmlNextElementSibling(sequence_elem); sequence_elem = xmlNextElementSibling(sequence_elem);
} }
}
segment_elem = xmlNextElementSibling(segment_elem); segment_elem = xmlNextElementSibling(segment_elem);
} }