matroskademux: Verify lace size in _parse_blockgroup_or_simpleblock
authorPhilip Jägenstedt <philipj@opera.com>
Thu, 13 May 2010 10:10:54 +0000 (12:10 +0200)
committerSebastian Dröge <sebastian.droege@collabora.co.uk>
Wed, 19 May 2010 18:35:52 +0000 (20:35 +0200)
commit081f2d00aa7fb243e53c2343ecbe8def31c53a0c
treec937fd388c3ad05b9fe75126e50ac8537c3e2db3
parentc659c92091e5ae10baaf3e66f5caf7ddc6d34f0d
matroskademux: Verify lace size in _parse_blockgroup_or_simpleblock

Failure to do this for corrupt input can cause a subbuffer bigger
than the actual buffer to be created, quickly leading to segfault.
Test case:
bug_s222005751_r0.001____memcpy.webm
gst/matroska/matroska-demux.c