Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 69b6ab33 authored by Dongwon Kang's avatar Dongwon Kang
Browse files

MP4: limit extent_count in iloc box. 

ItemLoc::getLoc() has a CHECK for extents.size() == 1.

Test: poc & MediaMetadataRetrieverTest
Bug: 124389881
Change-Id: Ic45cafb8ce47aea106aabdffeccd031b446579b2
parent 34a740d5

media/extractors/mp4/ItemTable.cpp

+2 −4
Original line number Diff line number Diff line
@@ -426,10 +426,8 @@ status_t IlocBox::parse(off64_t offset, size_t size) { 
        }

        ALOGV("extent_count %d", extent_count);



        if (extent_count > 1 && (offset_size == 0 || length_size == 0)) {

            // if the item is dividec into more than one extents, offset and

            // length must be present.

            return ERROR_MALFORMED;

        if (extent_count > 1) {

            return ERROR_UNSUPPORTED;

        }

        offset += 2;