Index: media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
===================================================================
--- media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
+++ media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
@@ -8,11 +8,11 @@
 +++ b/src/nestegg.c
 @@ -1026,7 +1026,8 @@ ne_read_uint(ne_io * io, uint64_t * val, uint64_t length)
    unsigned char b;
    int r;
 
--  if (length == 0 || length > 8)
+-  if (length > 8)
 +  /* Mozilla: EBML unsigned integers are 1..8 bytes wide (RFC 8794 s7.1). */
-+  if (length == 0 || length > 8)
++  if (length > 8)
      return -1;
-   r = ne_io_read(io, &b, 1);
-   if (r != 1)
+
+   *val = 0;