Crash on java.lang.OutOfMemoryError

[Han0nly]

Recently, we found that two code snippet in metadta-extractor (2.18.0) can trigger java.lang.OutOfMemoryError errors, which will lead to local denial-of-service. Error handling needs to be added, otherwise the java thread will crash, and apps that rely on this library will malfunction.

1. metadata-extractor/Source/com/drew/metadata/mov/atoms/SampleDescriptionAtom.java

   Line 46 in e3235ea

   sampleDescriptions = new ArrayList<T>((int)numberOfEntries);

2. metadata-extractor/Source/com/drew/metadata/mov/atoms/TimeToSampleAtom.java

   Line 45 in e3235ea

   entries = new ArrayList<Entry>((int)numberOfEntries);