[FFmpeg-devel] [PATCH] ffmdec: sanitize codec parameters

[Rostislav Pehlivanov]

On 17 November 2016 at 00:08, Andreas Cadhalpun <
andreas.cadhalpun at googlemail.com> wrote:

> All the fields can be set via options read from the ffm file and thus
> have to be sanitized.
>
> A negative extradata size for example gets passed to memcpy in
> avcodec_parameters_from_context causing a segmentation fault.
>
> Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
> ---
>
>
The ffm demuxer and ffserver will be removed before the next release (no
getting out of this, Reynaldo),
so it'll be pointless but whatever.