dilim/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2026-06-24 08:48:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

avformat/rtpenc_amr: Check input size

Browse Source 
Fixes: heap buffer overflow

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
jiale yao
2026-06-12 17:26:09 +02:00
committed by michaelni
parent b1d2190f5f
commit 71478d1165
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavformat/rtpenc_amr.c
View File

@@ -34,6 +34,10 @@ void ff_rtp_send_amr(AVFormatContext *s1, const uint8_t *buff, int size)
int max_header_toc_size = 1 + s->max_frames_per_packet;
uint8_t *p;
int len;
int max_size = st->codecpar->codec_id == AV_CODEC_ID_AMR_NB ? 32 : 61;
if (size < 1 || size > max_size)
return;
/* Test if the packet must be sent. */
len = s->buf_ptr - s->buf;