[FFmpeg-devel] Security issues?
Wed Sep 23 20:44:39 CEST 2009
On Wed, Sep 23, 2009 at 11:18:09AM -0700, Baptiste Coudurier wrote:
> On 09/23/2009 03:17 AM, Michael Niedermayer wrote:
>> On Tue, Sep 22, 2009 at 08:09:08PM +0200, Michael Niedermayer wrote:
>>> lars has mailed me the following 2 links
>> another mov issue (not security relevant!)
>> i think this one can just be applied
> Nope, not security relevant, besides I'd like to see the file the causes
> the problem.
i havnt downloaded it but they list this one:
> Because the counter is fixed and it will stop after some time,
> although seeking around.
i think the issue is that it can seek back to the same spot so even a
very small file could tie up the demuxer for a long time until the
counter reachs zero
Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
> ... defining _GNU_SOURCE...
For the love of all that is holy, and some that is not, don't do that.
-- Luca & Mans
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: Digital signature
More information about the ffmpeg-devel