[FFmpeg-devel] [PATCH] lavf/mov: ensure only one tkhd per trak

Michael Niedermayer michael at niedermayer.cc
Fri Dec 14 19:18:16 EET 2018


On Thu, Dec 13, 2018 at 01:58:40PM -0800, chcunningham wrote:
> Chromium fuzzing produced a whacky file with extra tkhds. This caused
> an AVStream that was already in use to be corrupted by assigning it a
> new id, which blows up later in mov_read_trun because the
> MOVFragmentStreamInfo.index_entry now points OOB.
> ---
>  libavformat/mov.c | 12 +++++++++++-
>  1 file changed, 11 insertions(+), 1 deletion(-)

from a quick look, i did not find a file this breaks

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Observe your enemies, for they first find out your faults. -- Antisthenes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20181214/4fd15f51/attachment.sig>


More information about the ffmpeg-devel mailing list