blob: edfaec2abf53eafa2c26e4a22365a8686f4d9799 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
Index: ifo_read.c
===================================================================
--- libdvdread.orig/src/ifo_read.c 2009-10-29 09:11:32.066743831 -0700
+++ libdvdread/src/ifo_read.c 2009-11-13 10:27:49.293174360 -0800
@@ -1138,6 +1127,14 @@
return 0;
}
+ if(vts_ptt_srpt->nr_of_srpts * sizeof(uint32_t) > info_length) {
+ fprintf(stderr, "libdvdread: PTT search table too small.\n");
+ free(vts_ptt_srpt);
+ free(data);
+ ifofile->vts_ptt_srpt = 0;
+ return 0;
+ }
+
for(i = 0; i < vts_ptt_srpt->nr_of_srpts; i++) {
B2N_32(data[i]);
/* assert(data[i] + sizeof(ptt_info_t) <= vts_ptt_srpt->last_byte + 1);
|
