tsdemux: Ensure AC3 descriptor is long enough before accessing

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/9044>
This commit is contained in:
Doug Nazar 2025-05-21 10:10:25 -04:00 committed by GStreamer Marge Bot
parent 3df63a079c
commit 7fe08e057c

View File

@ -1256,7 +1256,8 @@ gst_ts_demux_create_tags (TSDemuxStream * stream)
const GstMpegtsDescriptor *ac3_desc =
mpegts_get_descriptor_from_stream (bstream,
GST_MTS_DESC_AC3_AUDIO_STREAM);
if (ac3_desc && DESC_AC_AUDIO_STREAM_has_lang1 (ac3_desc->data)) {
if (ac3_desc && ac3_desc->length >= 8
&& DESC_AC_AUDIO_STREAM_has_lang1 (ac3_desc->data)) {
gchar lang_code[4];
memcpy (lang_code, DESC_AC_AUDIO_STREAM_lang1_code (ac3_desc->data), 3);