[FFmpeg-devel] Security issues?

Michael Niedermayer michaelni
Wed Sep 23 11:22:28 CEST 2009


On Wed, Sep 23, 2009 at 10:44:34AM +0200, Robert Swain wrote:
> Hey,
> 
> 2009/9/23 Carl Eugen Hoyos <cehoyos at ag.or.at>:
> > Michael Niedermayer <michaelni <at> gmx.at> writes:
> >
> >>
> >> On Tue, Sep 22, 2009 at 08:09:08PM +0200, Michael Niedermayer wrote:
> >> > Hi
> >> >
> >> > lars has mailed me the following 2 links
> >> >
> > http://www.heise.de/newsticker/Sicherheitsluecken-in-VLC-und-FFmpeg--/meldung/145655
> >> > http://secunia.com/advisories/36805/
> >>
> >> infinite loop in aac.c
> >> chrome patch:
> >>
> > http://src.chromium.org/viewvc/chrome/trunk/deps/third_party/ffmpeg/patches/to_upstream/42_aac_zero_bands.patch?revision=25254&view=markup
> >>
> >> aac maintainer please check & apply
> >
> > This is not on roundup because I was unable to reproduce it with current svn.
> 
> I can't reproduce with trunk either.

hmm, ok

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

When you are offended at any man's fault, turn to yourself and study your
own failings. Then you will forget your anger. -- Epictetus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20090923/e22a4362/attachment.pgp>



More information about the ffmpeg-devel mailing list