From f8cd66727cda7c0e58289ca0eaf9158b32b0dbfa Mon Sep 17 00:00:00 2001 From: JonnyBurger Date: Sat, 18 Oct 2025 11:23:44 +0200 Subject: [PATCH] Make Mediabunny more resilient against `data` boxes ending abruptly --- src/isobmff/isobmff-reader.ts | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/isobmff/isobmff-reader.ts b/src/isobmff/isobmff-reader.ts index f3090a1..ddb6f94 100644 --- a/src/isobmff/isobmff-reader.ts +++ b/src/isobmff/isobmff-reader.ts @@ -70,6 +70,10 @@ export const readDataBox = (slice: FileSlice) => { return null; } + if (slice.remainingLength < 4) { + return null; + } + const typeIndicator = readU32Be(slice); slice.skip(4); // Locale indicator const data = readBytes(slice, header.contentSize - 8);