From 85b3fa5406aa00a4041f84551888ceeb3fac5fa5 Mon Sep 17 00:00:00 2001 From: Debian Multimedia Maintainers Date: Mon, 3 Oct 2016 15:36:42 +0000 Subject: [PATCH] CVE-2016-2326 Gbp-Pq: Name CVE-2016-2326.patch --- libavformat/asfenc.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavformat/asfenc.c b/libavformat/asfenc.c index 1cfc857..d1ab2b7 100644 --- a/libavformat/asfenc.c +++ b/libavformat/asfenc.c @@ -800,6 +800,11 @@ static int asf_write_packet(AVFormatContext *s, AVPacket *pkt) pts = (pkt->pts != AV_NOPTS_VALUE) ? pkt->pts : pkt->dts; assert(pts != AV_NOPTS_VALUE); + if ( pts < - PREROLL_TIME + || pts > (INT_MAX-3)/10000LL * ASF_INDEXED_INTERVAL - PREROLL_TIME) { + av_log(s, AV_LOG_ERROR, "input pts %"PRId64" is invalid\n", pts); + return AVERROR(EINVAL); + } duration = pts * 10000; asf->duration= FFMAX(asf->duration, duration + pkt->duration * 10000); -- 2.30.2