[FFmpeg-devel] [PATCH] avcodec/options_table: remove extradata_size from the AVOptions table

Nicolas George george at nsup.org
Mon Mar 9 17:33:46 CET 2015


Le nonidi 19 ventôse, an CCXXIII, Michael Niedermayer a écrit :
> you miss the problem, this is a demuxer side problem,
> a attacker can at least crash your application no muxer side change
> can fix this, the attacker has his own self written muxer that
> produces a mallicious bitstream

(Unrelated to this particular change, which seems right to me.)

Maybe we need a flag to indicate whether an option can be safely set, even
with a value coming from an hostile source.

Regards,

-- 
  Nicolas George
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20150309/99747178/attachment.asc>


More information about the ffmpeg-devel mailing list