[Ffmpeg-devel] [PATCH] Fixes dv.c out of bounds memory access

[Chsherrick at aol.com]

In a message dated 4/20/2006 1:40:21 P.M. Pacific Daylight Time,  
ffmpeg-devel-request at mplayerhq.hu writes:

Message:  1
Date: Thu, 20 Apr 2006 11:13:38 -0700
From: Roman Shaposhnick  <rvs at sun.com>
Subject: Re: [Ffmpeg-devel] [PATCH] Fixes dv.c out of  bounds memory
access
To: FFMpeg development discussions  and patches
<ffmpeg-devel at mplayerhq.hu>
Message-ID:  <20060420181338.GJ21244 at submarine>
Content-Type: text/plain;  charset=koi8-r

On Thu, Apr 20, 2006 at 09:14:10AM +0200, Guillaume  Poirier wrote:
> Hi,
> 
> Chsherrick at aol.com wrote:
>  > We had a corrupt file that caused dv.c (in libavcodec) to reference out  
of  
> > bounds memory.  Our corrupt file was sending 16  byte packets, and  
> > dv_frame_profile() looked a bit beyond  that without checking the size  
first.
> 
> Can you upload a  sample in order for us to reproduce your problem on
> our  machines?

Thanks for asking. I'd be happy to incorporate the  original patch into the
DV changes I'm working on right now (albeit  very, very slowly,
because of the LinuxTAG excitement) but I need a  testcase.

Thanks,
Roman.


I've put up a sample here:  _http://eqreed.info/video.avi_ 
(http://eqreed.info/video.avi)   It's  rather large though (120M).
 
 -  Chris