From: Minje Ahn <minje.ahn@samsung.com>
Date: Thu, 11 Mar 2021 08:21:30 +0000 (+0900)
Subject: Fix heap buffer overflow
X-Git-Tag: submit/tizen/20210312.013632^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=b1207b82c4d1b88d5a73adf1249db3100df5422c;p=platform%2Fcore%2Fmultimedia%2Flibmm-fileinfo.git

Fix heap buffer overflow

Change-Id: I3fb0f4762c979a54f2d990f3696c4f66f2383383
Signed-off-by: Minje Ahn <minje.ahn@samsung.com>
---

diff --git a/formats/ffmpeg/mm_file_format_midi.c b/formats/ffmpeg/mm_file_format_midi.c
index 06e9e55..e9a170a 100755
--- a/formats/ffmpeg/mm_file_format_midi.c
+++ b/formats/ffmpeg/mm_file_format_midi.c
@@ -787,13 +787,13 @@ static void __AvGetMidiDuration(char *szFileName, MIDI_INFO_SIMPLE *info)
 	}
 
 	/*check format*/
-	if (!(memcmp(pbFile, MMFILE_XMF_100, 8)) ||
+	if (dFileSize >= 8 && (!(memcmp(pbFile, MMFILE_XMF_100, 8)) ||
 		!(memcmp(pbFile, MMFILE_XMF_101, 8)) ||
-		!(memcmp(pbFile, MMFILE_MXMF_200, 8))) {
+		!(memcmp(pbFile, MMFILE_MXMF_200, 8)))) {
 
 		is_xmf = 1;
 		codecType = AV_DEC_AUDIO_XMF;
-	} else if (!(memcmp(pbFile, MMFILE_RMF, 4))) {
+	} else if (dFileSize >= 4 && !(memcmp(pbFile, MMFILE_RMF, 4))) {
 		is_xmf = 0;
 		codecType = AV_DEC_AUDIO_RMF;
 	} else {