[FFmpeg-devel] [PATCH] lavf/mov: fix huge alloc in mov_read_ctts

Michael Niedermayer michael at niedermayer.cc
Thu Nov 30 22:56:20 EET 2017


On Sun, Nov 26, 2017 at 07:32:30AM -0800, John Stebbins wrote:
> An invalid file may cause huge alloc.  Delay expansion of ctts entries
> until the number of samples is known in mov_build_index.
> 
> Found-by: zhao dongzhuo, AD-lab of Venustech
> ---
>  libavformat/mov.c | 31 +++++++++++++++++++++++++++----
>  1 file changed, 27 insertions(+), 4 deletions(-)

will apply

thanks

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The worst form of inequality is to try to make unequal things equal.
-- Aristotle
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20171130/817c278e/attachment.sig>


More information about the ffmpeg-devel mailing list