[FFmpeg-devel] [PATCH] Vorbisdec check the result of a potentially very large malloc.
Mon Aug 2 22:26:08 CEST 2010
Alex Converse <alex.converse at gmail.com> writes:
> res_setup->ptns_to_read ranges [0, 2^24)
> vc->audio_channels ranges [1, 255]
> Do any platforms we support have sizeof(uint_fast8_t) > 1
The _fast types are usually at least 32 bits.
> and size_t <= 4?
That would be most 32-bit systems.
> If so we also need to look for an integer overflow.
Guess we do.
mans at mansr.com
More information about the ffmpeg-devel