[Ffmpeg-devel] [PATCH] Fixes dv.c out of bounds memory access

Roman Shaposhnick rvs
Thu Apr 20 20:13:38 CEST 2006


On Thu, Apr 20, 2006 at 09:14:10AM +0200, Guillaume Poirier wrote:
> Hi,
> 
> Chsherrick at aol.com wrote:
> > We had a corrupt file that caused dv.c (in libavcodec) to reference out of  
> > bounds memory.  Our corrupt file was sending 16 byte packets, and  
> > dv_frame_profile() looked a bit beyond that without checking the size  first.
> 
> Can you upload a sample in order for us to reproduce your problem on
> our machines?

  Thanks for asking. I'd be happy to incorporate the original patch into the
  DV changes I'm working on right now (albeit very, very slowly,
  because of the LinuxTAG excitement) but I need a testcase.

Thanks,
Roman.





More information about the ffmpeg-devel mailing list