[FFmpeg-devel] [PATCH] Add CPiA video decoder

Michael Niedermayer michaelni at gmx.at
Fri Aug 31 00:54:50 CEST 2012

On Thu, Aug 30, 2012 at 11:30:51PM +0200, Stephan Hilb wrote:
> I fixed the return error codes.
> > This looks exploitable, there is no check that  the writes are within
> > the picture
> > the same issue exists in the u/v code
> There are now checks for each line if the to be written value is inside
> the boundries of that line.
> Besides I noted and fixed a case where the source data would be read
> three bytes outside the boundries.
> It should be safe now.

patch applied

> > also if you like to be the official maintainer of this, then add
> > yourself to MAINTAINERS
> I'd like to and have added myself to the list.

good, you might want to get a public git clone of ffmpeg where
you maintain the code (and if you are happy with some changes in your
repo, tell me to merge them)



Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

DNS cache poisoning attacks, popular search engine, Google internet authority
dont be evil, please
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20120831/316c0c6f/attachment.asc>

More information about the ffmpeg-devel mailing list