[FFmpeg-devel] [PATCH] Fix nullptr dereference with invalid encryption metadata.

Michael Niedermayer michael at niedermayer.cc
Mon Aug 19 00:02:06 EEST 2024


On Fri, Aug 02, 2024 at 03:08:29PM -0700, Dale Curtis wrote:
> Found by fuzzer.
> 
> Bug: https://crbug.com/356720789
> Signed-off-by: Dale Curtis <dalecurtis at chromium.org>
> ---
>  libavformat/mov.c | 8 ++++++--
>  1 file changed, 6 insertions(+), 2 deletions(-)

>  mov.c |    8 ++++++--
>  1 file changed, 6 insertions(+), 2 deletions(-)
> c9e390f10a211dc05c2bb1677d61eda2374bc83b  mov_fuzz_fix_v1.patch
> From a1c7aae91bef9822515f9fdebe5c624d1fdf300a Mon Sep 17 00:00:00 2001
> From: Dale Curtis <dalecurtis at chromium.org>
> Date: Fri, 2 Aug 2024 22:04:46 +0000
> Subject: [PATCH] Fix nullptr dereference with invalid encryption metadata.
> 
> Found by fuzzer.
> 
> Bug: https://crbug.com/356720789
> Signed-off-by: Dale Curtis <dalecurtis at chromium.org>
> ---
>  libavformat/mov.c | 8 ++++++--
>  1 file changed, 6 insertions(+), 2 deletions(-)

will apply

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

"You are 36 times more likely to die in a bathtub than at the hands of a
terrorist. Also, you are 2.5 times more likely to become a president and
2 times more likely to become an astronaut, than to die in a terrorist
attack." -- Thoughty2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20240818/08f24646/attachment.sig>


More information about the ffmpeg-devel mailing list