Commit bdaa3772 for libheif
commit bdaa37728442800497ea224bd232ca25e2f9bdff
Author: Dirk Farin <dirk.farin@gmail.com>
Date: Sat Mar 14 20:32:39 2026 +0100
check that 'stsc' box does not have zero samples per chunk
diff --git a/libheif/sequences/seq_boxes.cc b/libheif/sequences/seq_boxes.cc
index 7c6c0b2d..9da5f497 100644
--- a/libheif/sequences/seq_boxes.cc
+++ b/libheif/sequences/seq_boxes.cc
@@ -884,6 +884,13 @@ Error Box_stsc::parse(BitstreamRange& range, const heif_security_limits* limits)
entry.samples_per_chunk = range.read32();
entry.sample_description_index = range.read32();
+ if (entry.samples_per_chunk == 0) {
+ return {
+ heif_error_Invalid_input,
+ heif_suberror_Unspecified,
+ "'stsc' box with zero samples per chunk entry."};
+ }
+
if (entry.sample_description_index == 0) {
return {
heif_error_Invalid_input,