[Ffmpeg-devel] [PATCH] different vorbis extradata handling
matthieu castet
castet.matthieu
Fri May 13 07:51:20 CEST 2005
Hi,
Nico Sabbi wrote:
> Michael Niedermayer wrote:
>
>> Hi
>>
>> On Friday 13 May 2005 01:36, Nico Sabbi wrote:
>>
>>
>>> Michael Niedermayer wrote:
>>>
>>>
>>>>> + offset += xiphlacing(&ptr[offset], priv->len[1]);
>>>>>
>>>>
>>>> looks possibly exploitable if a packet is larger then 64*255= 16320
>>>>
>>>
>>> what value do you advise?
>>>
>>
>>
>> len/255 + 64 for example
>>
>> [...]
>>
>>
> attached is the updated patch
>
Don't you should falback on the old method if the header is wrong ?
All vorbis saved in nut, ... won't be playable anymore...
Shouldn't you do the same thing for theora ?
And for flac ?
Matthieu
More information about the ffmpeg-devel
mailing list