projects / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3ca1ad4) | patch
avformat/mpc8: fix hang with fuzzed file
authorwm4 <nfxjfg@googlemail.com>
Tue, 3 Feb 2015 18:04:12 +0000 (19:04 +0100)
committerSylvain Beucler <beuc@debian.org>
Thu, 5 Dec 2019 16:27:00 +0000 (16:27 +0000)
commit082627c60eaee795c96d20511705929034faa2df
tree3a948a9b4f3110b9df32b83f2c4e52d4fb94bf48tree | snapshot
parent3ca1ad46371272335d386bbbbfaf48ec3924113fcommit | diff
avformat/mpc8: fix hang with fuzzed file

This can lead to an endless loop by seeking back a few bytes after each
attempted chunk read. Assuming negative sizes are always invalid, this
is easy to fix. Other code in this demuxer treats negative sizes as
invalid as well.

Fixes ticket #4262.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Gbp-Pq: Name CVE-2019-14442.patch
libavformat/mpc8.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.