mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed allocation
authorSebastian Dröge <sebastian@centricular.com>
Thu, 19 Oct 2023 21:09:57 +0000 (00:09 +0300)
committerThorsten Alteholz <debian@alteholz.de>
Sun, 26 Nov 2023 20:55:02 +0000 (22:55 +0200)
commit0a8ee5f5867503048482334aaeb38ba64008ca4f
treea3cf69df1523e488f6b20fd9479d4f5923512db5
parentfcc883a4378e07c7a8ae59d74e2ed421d617e93d
mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed allocation

Origin: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7dfaa57b6f9b55f17ffe824bd8988bb71ae11353
Bug-Debian: https://bugs.debian.org/1056101
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2023-44446

Previously they were stored inline inside a GArray, but as references to
the tracks were stored in various other places although the array could
still be updated (and reallocated!), this could lead to dangling
references in various places.

Instead now store them in a GPtrArray in their own allocation so each
track's memory position stays fixed.

Fixes ZDI-CAN-22299

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3055

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5638>

Gbp-Pq: Name CVE-2023-44446.patch
gst/mxf/mxfdemux.c
gst/mxf/mxfdemux.h