Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9ae62202 authored by Robert Shih's avatar Robert Shih
Browse files

MPEG2PSExtractor: check number of bits left before skipping 

Bug: 18752034
Change-Id: Ie185ebac8324b4fd6dbb68d7cc53124dfe97cbc2
parent f105b28e

media/libstagefright/mpeg2ts/MPEG2PSExtractor.cpp

+4 −0
Original line number Diff line number Diff line
@@ -464,6 +464,10 @@ ssize_t MPEG2PSExtractor::dequeuePES() { 
            optional_bytes_remaining -= 3;

        }



        if (br.numBitsLeft() < optional_bytes_remaining * 8) {

            return ERROR_MALFORMED;

        }



        br.skipBits(optional_bytes_remaining * 8);



        // ES data follows.