diff options
| author | Janne Grunau <janne-libav@jannau.net> | 2012-11-26 22:18:31 +0100 |
|---|---|---|
| committer | Janne Grunau <janne-libav@jannau.net> | 2012-12-07 11:43:28 +0100 |
| commit | 8cc2fa1e5db0655c053b35c948ef05ba0fe13707 (patch) | |
| tree | 0d941674dc103cf342a49ec58185a95d51237a4d /libavformat/siff.c | |
| parent | 80b6b31417c6791f9d4f1bc8c3c2a726d71e45e0 (diff) | |
| download | ffmpeg-8cc2fa1e5db0655c053b35c948ef05ba0fe13707.tar.gz | |
mov: validate number of DataReferenceBox entries against box size
Avoids a 2G memory allocation and parsing of random data in
mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this.
Diffstat (limited to 'libavformat/siff.c')
0 files changed, 0 insertions, 0 deletions