avformat/hls: Fix DoS due to infinite loop
authorMichael Niedermayer <michael@niedermayer.cc>
Fri, 25 Aug 2017 23:26:58 +0000 (01:26 +0200)
committerSylvain Beucler <beuc@debian.org>
Thu, 5 Dec 2019 16:27:00 +0000 (16:27 +0000)
commita9d87f6a4ee5ae38378c95e7715667c35cead53b
tree281e5062537c0b958d6b02fef620d1fbf16fa515
parentf3fa8d83211c0a0eb0f849ad26e606525ab9d162
avformat/hls: Fix DoS due to infinite loop

Fixes: loop.m3u
The default max iteration count of 1000 is arbitrary and ideas for a better solution are welcome

Found-by: Xiaohei and Wangchu from Alibaba Security Team
Previous version reviewed-by: Steven Liu <lingjiujianke@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
[sunweaver] Rebased against a libavformat/hls.c version that did not yet have AVOption support.
            Initializing HLS_Context.max_reload statically with the value 1000.

Gbp-Pq: Name CVE-2017-14058.patch
libavformat/hls.c