mirror/taglib
1
0
Fork 0
mirror of https://github.com/taglib/taglib.git synced 2026-05-25 13:08:55 -04:00
Code Issues Packages Projects Releases Wiki Activity

Limit MP4 atom sibling count at top level (#1344)

Browse Source
This commit is contained in:
Urs Fleisch
2026-04-24 18:52:45 +02:00
parent e7e4f0958c
commit 5e1cb4081d
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
taglib/mp4/mp4atom.cpp
View File

@@ -222,6 +222,8 @@ public:
MP4::Atoms::Atoms(File *file) :
d(std::make_unique<AtomsPrivate>())
{
static constexpr int MAX_MP4_ATOM_COUNT_PER_LEVEL = 5000;
d->atoms.setAutoDelete(true);
file->seek(0, File::End);
@@ -232,6 +234,13 @@ MP4::Atoms::Atoms(File *file) :
d->atoms.append(atom);
if (atom->length() == 0)
break;
if(d->atoms.size() > MAX_MP4_ATOM_COUNT_PER_LEVEL) {
debug("MP4: Maximum atom count exceeded");
// Make sure the file is detected as invalid.
d->atoms.clear();
break;
}
}
}