[FFmpeg-cvslog] Changelog: document msrle bugfix

Reinhard Tartler git at videolan.org
Sun Apr 7 16:08:21 CEST 2013


ffmpeg | branch: release/0.10 | Reinhard Tartler <siretart at tauware.de> | Sun Mar 17 08:25:46 2013 +0100| [fabdeed6fcefa113c41c03315a6b440a02305e73] | committer: Reinhard Tartler

Changelog: document msrle bugfix

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fabdeed6fcefa113c41c03315a6b440a02305e73
---

 Changelog |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/Changelog b/Changelog
index 576eeb8..edf3213 100644
--- a/Changelog
+++ b/Changelog
@@ -17,6 +17,7 @@ version 0.8.6:
 - lzo: fix overflow checking in copy_backptr()
 - matroskadec: request a read buffer for the wav header
 - mp3: exit on parsing error in mp_decode_frame
+- msrledec: convert to bytestream2 API and add proper bounds checking (CVE-2013-2496)
 - oggdec: make sure the private parse data is cleaned up
 - parser: fix large overreads
 - png: use av_mallocz_array() for the zlib zalloc function, avoids accessing uninitialized memory
@@ -31,6 +32,7 @@ version 0.8.6:
 - wmaprodec: return an error, not 0, when the input is too small
 - xxan: fix invalid memory access in xan_decode_frame_type0()
 
+
 version 0.8.5:
 
 - Several bugs and crashes have been fixed in the following codecs:



More information about the ffmpeg-cvslog mailing list