Hello,I use the fuzzer(AFL) to fuzz binary gpac and got some crashes.
The following is the details.

### Description


A SEGV on unknown address 0x000000000000 has occurred in function split_isomedia_file_main gpac/applications/mp4box/fileimport.c:2364:6
when running program MP4Box, this can reproduce on the lattest commit.


### System && Software version info

```
$ ./MP4Box -version
MP4Box - GPAC version 2.3-DEV-rev389-g6ae306f5a-master
(c) 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
 $uname -a
Linux ppg-X10DRi 5.11.0-49-generic #55-Ubuntu SMP Wed Jan 12 17:36:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
```
### Steps to reproduce
```
CFLAGS="-g -O0 -lpthread -fsanitize=address"  ./configure
make -j
```

###  Command&&Result

```
$./MP4Box -add poc3 -new /tmp/output.mp4 -split-size 5000000
Unrecognized import option 000004,sig, ignoring
Unrecognized import option 11,src, ignoring
Unrecognized import option 004830,argv, ignoring
Unrecognized import option 000060,time, ignoring
Unrecognized import option 1651917,execs, ignoring
Unrecognized import option 173547,op, ignoring
Unrecognized import option argv,pos, ignoring
Unrecognized import option 0, ignoring
[iso file] Unknown box type st80l in parent minf
[iso file] Track with no sample table !
[iso file] Track with no sample description box !
[iso file] Incomplete box mdat - start 11977 size 276821
[iso file] Incomplete file while reading for dump - aborting parsing
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 201 - Video (size 0 x 0)
[iso file] Unknown box type st80l in parent minf
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 65737 - media type "hint:00000000"
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 101 - Audio (SR 11025 - 1 channels)
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 65637 - media type "hint:rtp "
Split by size but output not a template, using /tmp/output_$num$.mp4 as output
AddressSanitizer:DEADLYSIGNAL
=================================================================
==2366747==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbaf17fa3dc bp 0x607000007410 sp 0x7ffc8b8dbfc0 T0)
==2366747==The signal is caused by a READ memory access.
==2366747==Hint: address points to the zero page.
    #0 0x7fbaf17fa3dc in gf_isom_add_user_data (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x39a3dc)
    #1 0x7fbaf1d5ba69 in mp4_mux_set_udta (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x8fba69)
    #2 0x7fbaf1d55480 in mp4_mux_setup_pid (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x8f5480)
    #3 0x7fbaf1b6c030 in gf_filter_pid_configure (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x70c030)
    #4 0x7fbaf1b7aad6 in gf_filter_pid_connect_task (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x71aad6)
    #5 0x7fbaf1ba5a94 in gf_fs_thread_proc (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x745a94)
    #6 0x7fbaf1ba49a0 in gf_fs_run (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x7449a0)
    #7 0x525413 in split_isomedia_file /home/ppg/fuz_carpet/gpac/applications/mp4box/fileimport.c:2364:6
    #8 0x4eae0b in mp4box_main /home/ppg/fuz_carpet/gpac/applications/mp4box/mp4box.c:6551:7
    #9 0x7fbaf10ee564 in __libc_start_main csu/../csu/libc-start.c:332:16
    #10 0x42ad1d in _start (/home/ppg/fuzz/gpac/build_carpet/bin/MP4Box+0x42ad1d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/home/ppg/fuzz_carpet/gpac/build_carpet/lib/libgpac.so.12+0x39a3dc) in gf_isom_add_user_data
==2366747==ABORTING
```

### Impact

This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution.

###  POC

[poc3.zip](https://github.com/gpac/gpac/files/11889469/poc3.zip)

A SEGV  in function split_isomedia_file_main at gpac/applications/mp4box/fileimport.c:2364:6
This is a GitHub Issue
repo:gpac
owner:gpac
Title : A SEGV  in function split_isomedia_file_main at gpac/applications/mp4box/fileimport.c:2364:6
Issue date:

--- start body ---
Hello,I use the fuzzer(AFL) to fuzz binary gpac and got some crashes.
The following is the details.

### Description


A SEGV on unknown address 0x000000000000 has occurred in function split_isomedia_file_main gpac/applications/mp4box/fileimport.c:2364:6
when running program MP4Box, this can reproduce on the lattest commit.


### System && Software version info

```
$ ./MP4Box -version
MP4Box - GPAC version 2.3-DEV-rev389-g6ae306f5a-master
(c) 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
 $uname -a
Linux ppg-X10DRi 5.11.0-49-generic #55-Ubuntu SMP Wed Jan 12 17:36:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
```
### Steps to reproduce
```
CFLAGS="-g -O0 -lpthread -fsanitize=address"  ./configure
make -j
```

###  Command&&Result

```
$./MP4Box -add poc3 -new /tmp/output.mp4 -split-size 5000000
Unrecognized import option 000004,sig, ignoring
Unrecognized import option 11,src, ignoring
Unrecognized import option 004830,argv, ignoring
Unrecognized import option 000060,time, ignoring
Unrecognized import option 1651917,execs, ignoring
Unrecognized import option 173547,op, ignoring
Unrecognized import option argv,pos, ignoring
Unrecognized import option 0, ignoring
[iso file] Unknown box type st80l in parent minf
[iso file] Track with no sample table !
[iso file] Track with no sample description box !
[iso file] Incomplete box mdat - start 11977 size 276821
[iso file] Incomplete file while reading for dump - aborting parsing
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 201 - Video (size 0 x 0)
[iso file] Unknown box type st80l in parent minf
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 65737 - media type "hint:00000000"
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 101 - Audio (SR 11025 - 1 channels)
IsoMedia import id:000004,sig:11,src:004830,argv:000060,time:1651917,execs:173547,op:argv,pos:0 - track ID 65637 - media type "hint:rtp "
Split by size but output not a template, using /tmp/output_$num$.mp4 as output
AddressSanitizer:DEADLYSIGNAL
=================================================================
==2366747==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbaf17fa3dc bp 0x607000007410 sp 0x7ffc8b8dbfc0 T0)
==2366747==The signal is caused by a READ memory access.
==2366747==Hint: address points to the zero page.
    #0 0x7fbaf17fa3dc in gf_isom_add_user_data (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x39a3dc)
    #1 0x7fbaf1d5ba69 in mp4_mux_set_udta (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x8fba69)
    #2 0x7fbaf1d55480 in mp4_mux_setup_pid (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x8f5480)
    #3 0x7fbaf1b6c030 in gf_filter_pid_configure (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x70c030)
    #4 0x7fbaf1b7aad6 in gf_filter_pid_connect_task (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x71aad6)
    #5 0x7fbaf1ba5a94 in gf_fs_thread_proc (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x745a94)
    #6 0x7fbaf1ba49a0 in gf_fs_run (/home/ppg/fuzz/gpac/build_carpet/lib/libgpac.so.12+0x7449a0)
    #7 0x525413 in split_isomedia_file /home/ppg/fuz_carpet/gpac/applications/mp4box/fileimport.c:2364:6
    #8 0x4eae0b in mp4box_main /home/ppg/fuz_carpet/gpac/applications/mp4box/mp4box.c:6551:7
    #9 0x7fbaf10ee564 in __libc_start_main csu/../csu/libc-start.c:332:16
    #10 0x42ad1d in _start (/home/ppg/fuzz/gpac/build_carpet/bin/MP4Box+0x42ad1d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/home/ppg/fuzz_carpet/gpac/build_carpet/lib/libgpac.so.12+0x39a3dc) in gf_isom_add_user_data
==2366747==ABORTING
```

### Impact

This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution.

###  POC

[poc3.zip](https://github.com/gpac/gpac/files/11889469/poc3.zip)

--- end body ---
