mp4ff: Fix infinite loop in mp4ff_parse_tag(). Closes: #301.

audacious-media-player · May 30, 2013 · 4f36dd9 · 4f36dd9
1 parent 77a63a0
commit 4f36dd9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/aac/mp4ff/mp4meta.c b/src/aac/mp4ff/mp4meta.c
@@ -236,6 +236,9 @@ static int32_t mp4ff_parse_tag(mp4ff_t *f, const uint8_t parent_atom_type, const
     {
         uint64_t destpos;
         subsize = mp4ff_atom_read_header(f, &atom_type, &header_size);
+        if (!subsize)
+            break;
+
         destpos = mp4ff_position(f)+subsize-header_size;
         if (!done)
         {