From bf4eb194cfd35c65d523685d35168d7107394e9c Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Wed, 8 Apr 2026 13:49:28 +0200 Subject: [PATCH] avcodec/tdsc: Better input size check Signed-off-by: Michael Niedermayer --- libavcodec/tdsc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/tdsc.c b/libavcodec/tdsc.c index 985ed405fc..88ff575f99 100644 --- a/libavcodec/tdsc.c +++ b/libavcodec/tdsc.c @@ -403,7 +403,7 @@ static int tdsc_decode_tiles(AVCodecContext *avctx, int number_tiles) } tile_size = bytestream2_get_le32(&ctx->gbc); - if (bytestream2_get_bytes_left(&ctx->gbc) < tile_size) + if (bytestream2_get_bytes_left(&ctx->gbc) < tile_size + 24LL) return AVERROR_INVALIDDATA; tile_mode = bytestream2_get_le32(&ctx->gbc);