Eyevinn / mp4ff / 37474134283

83%

master: 83%

Pull #632

github

fix(mp4): bound the size-mismatch error when a FragmentDecoder reuses a moof or traf

decodeChildrenSRInto, which FragmentDecoder uses to decode a moof or traf into the previous fragment's, still listed every child by string concatenation. A moof of 100,000 empty children overrunning it built a 700 KB error in 2.6 s. It now uses childSizes, like the other two container decoders.

The test also covers FragmentDecoder, and overruns containers of 3 and 100 children instead of 100,000: with 100 the error already exceeds the 400-byte limit on all three paths without the fix. The childSizes comment no longer explains the old behaviour, and the CHANGELOG entry is shorter and names the affected APIs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

12 of 12 new or added lines in 1 file covered. (100.0%)

23838 of 28808 relevant lines covered (82.75%)

0.83 hits per line