[FFmpeg-devel] [PATCH] Fix uninitialized reads on malformed ogg files.
Reimar.Doeffinger at gmx.de
Thu Mar 8 21:04:51 CET 2012
On Thu, Mar 08, 2012 at 05:51:59AM +0100, Michael Niedermayer wrote:
> On Wed, Mar 07, 2012 at 02:26:58PM -0800, dalecurtis at chromium.org wrote:
> > From: Dale Curtis <dalecurtis at chromium.org>
> > The ogg decoder wasn't padding the input buffer with the appropriate
> > FF_INPUT_BUFFER_PADDING_SIZE bytes. Which led to uninitialized reads in
> > various pieces of parsing code when they thought they had more data than
> > they actually did.
> patch looks good to me
> reimar ?
None of the code I am aware of is supposed to require padding, so
I'd really like to hear what code that is. Bugs tend to come in bunches,
so I'd expect that code to be buggy in more ways.
I also have some doubts that that add can never cause integer overflows.
More information about the ffmpeg-devel