[Ffmpeg-devel] [PATCH] different vorbis extradata handling

Nico Sabbi nsabbi
Fri May 13 01:53:34 CEST 2005


Michael Niedermayer wrote:

>Hi
>
>On Friday 13 May 2005 01:36, Nico Sabbi wrote:
>  
>
>>Michael Niedermayer wrote:
>>    
>>
>>>>+    offset += xiphlacing(&ptr[offset], priv->len[1]);
>>>>        
>>>>
>>>looks possibly exploitable if a packet is larger then 64*255= 16320
>>>      
>>>
>>what value do you advise?
>>    
>>
>
>len/255 + 64 for example
>
>[...]
>  
>
attached is the updated patch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: avogg2.c
Type: text/x-csrc
Size: 9945 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20050513/16f743f5/attachment.c>



More information about the ffmpeg-devel mailing list