[FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

wm4 nfxjfg at googlemail.com
Mon Aug 28 12:21:39 EEST 2017


On Sun, 27 Aug 2017 19:16:03 +0200
Michael Niedermayer <michael at niedermayer.cc> wrote:

> On Sat, Aug 26, 2017 at 01:26:58AM +0200, Michael Niedermayer wrote:
> > Fixes: loop.m3u
> > 
> > The default max iteration count of 1000 is arbitrary and ideas for a better solution are welcome
> > 
> > Found-by: Xiaohei and Wangchu from Alibaba Security Team
> > Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> > ---
> >  doc/demuxers.texi | 18 ++++++++++++++++++
> >  libavformat/hls.c |  7 +++++++
> >  2 files changed, 25 insertions(+)  
> 
> applied
> 
> [...]

I rejected this approach, but I guess patch reviews are ignored anyway.


More information about the ffmpeg-devel mailing list