From: Lorenz Brun <lorenz@brun.one>
Date: Sat, 23 May 2020 15:23:50 +0000 (+0200)
Subject: Fix infinite loop when parsing invalid EIT CRID data
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=749f51914c7ffe68ddec4e9272481110d753324d;p=thirdparty%2Ftvheadend.git

Fix infinite loop when parsing invalid EIT CRID data
---

diff --git a/src/epggrab/module/eit.c b/src/epggrab/module/eit.c
index e7cf7b5d4..3bcb34d80 100644
--- a/src/epggrab/module/eit.c
+++ b/src/epggrab/module/eit.c
@@ -478,8 +478,13 @@ static int _eit_desc_crid
       /* Next */
       len -= 1 + r;
       ptr += 1 + r;
+    } else {
+      break;
     }
   }
+  if (len > 3) {
+    return -1;
+  }
 
   return 0;
 }