Commit640a67d

committed

fix potential Denial of Service via specially crafted payloads

1 parent9d41448 commit640a67dCopy full SHA for 640a67d

File tree

-1

lines changed

-1

lines changed

Lines changed: 3 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -79,6 +79,8 @@ export function findBox(input: Uint8Array, boxName: string, offset: number) {`
`79`	`79`	`constbox=readBox(input,offset)`
`80`	`80`	`if(!box)break`
`81`	`81`	`if(box.name===boxName)returnbox`
`82`		`-offset+=box.size`
	`82`	`+// Fix the infinite loop by ensuring offset always increases`
	`83`	`+// If box.size is 0, advance by at least 8 bytes (the size of the box header)`
	`84`	`+offset+=box.size>0 ?box.size :8`
`83`	`85`	`}`
`84`	`86`	`}`

Comments

(0)