From 4d3f227366fb42ebddf12a87b021f56857daf697 Mon Sep 17 00:00:00 2001 From: Edward Hervey Date: Thu, 7 Dec 2017 11:03:20 +0100 Subject: typefind: Fix ico out-of-bound read The furthest we go to verify the data is reading a guint32 at offset 18, therefore make sure we can read as much. --- gst/typefind/gsttypefindfunctions.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gst/typefind/gsttypefindfunctions.c b/gst/typefind/gsttypefindfunctions.c index 76dbb461c..70a8bf9b1 100644 --- a/gst/typefind/gsttypefindfunctions.c +++ b/gst/typefind/gsttypefindfunctions.c @@ -5243,7 +5243,7 @@ windows_icon_typefind (GstTypeFind * find, gpointer user_data) gint32 size, offset; datalen = gst_type_find_get_length (find); - if (datalen < 18) + if (datalen < 22) return; if ((data = gst_type_find_peek (find, 0, 6)) == NULL) return; -- cgit v1.2.1