On Sun, Feb 17, 2019 at 09:53:03AM +0000, Steve Lhomme wrote:
> ffmpeg | branch: master | Steve Lhomme <rob...@ycbcr.xyz> | Wed Feb 13 
> 13:20:45 2019 +0100| [9326117bf63b04a466d9e787224e56ba8cdbb215] | committer: 
> Michael Niedermayer
> 
> avformat/matroskadec: Check parents remaining length
> 
> This was found through the Hacker One program on VLC but is not a security 
> issue in libavformat
> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
> 
> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9326117bf63b04a466d9e787224e56ba8cdbb215
> ---
> 
>  libavformat/matroskadec.c | 12 ++++++++++++
>  1 file changed, 12 insertions(+)

this detects an issue in ffmpeg generated mkv:

./ffmpeg -f lavfi -i color=black -pix_fmt yuv422p10le -bitexact -vframes 1 -c:v 
ffv1 -level 3 -y fff.mkv && ./ffmpeg -i fff.mkv -f null -

[matroska,webm @ 0x35e9040] Invalid length 0x17 > 0x9b0 in parent

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Everything should be made as simple as possible, but not simpler.
-- Albert Einstein

Attachment: signature.asc
Description: PGP signature

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".

Reply via email to