[FFmpeg-devel] [PATCH] lavf/utils.c Protect against accessing entries[nb_entries]

Matthew Wolenetz wolenetz at chromium.org
Thu Dec 15 01:38:18 EET 2016


In ff_index_search_timestamp(), if b == num_entries,
m == num_entries - 1, and entries[m].flags & AVINDEX_DISCARD_FRAME is
true, then the search for the next non-discarded packet could access
entries[nb_entries], exceeding its bounds. This change adds a protection
against that scenario. Reference: https://crbug.com/666770
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 666770-lavf-utils.c-Protect-against-accessing-entries-nb_en.patch
Type: text/x-patch
Size: 1268 bytes
Desc: not available
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20161214/79cb12f5/attachment.bin>


More information about the ffmpeg-devel mailing list