projects / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4227a87) | patch
avformat/mpc8: fix hang with fuzzed file
authorwm4 <nfxjfg@googlemail.com>
Tue, 3 Feb 2015 18:04:12 +0000 (19:04 +0100)
committerMike Gabriel <sunweaver@debian.org>
Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)
commit0c0c8e5ff3e93daea5ffef923404420343eda8c0
treea7d14aa02f28565f96385aeb4b30140c681ed35dtree | snapshot
parent4227a87f30f1aaadb4a8e36dc89616ef1d5517d3commit | diff
avformat/mpc8: fix hang with fuzzed file

This can lead to an endless loop by seeking back a few bytes after each
attempted chunk read. Assuming negative sizes are always invalid, this
is easy to fix. Other code in this demuxer treats negative sizes as
invalid as well.

Fixes ticket #4262.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Gbp-Pq: Name CVE-2019-14442.patch
libavformat/mpc8.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.