Robert Lukassen <[email protected]> added the comment: The file IC-9000-020304-n.f is uploaded in the context of issue 2116.
It contains the firmware for an IP camera (IC-9000) distributed by Edimax. This camera is probably a clone of the IC-602 camera distributed by StarVedia. The firmware file contains a gzipped ramdisk, starting at offset 0xcb98c continuing up to the end of the file (excluding some padding). After gunzipping, the resulting file can be mounted via a loop device as an ext2 filesystem. This contains a directory /ffmpeg holding an ffserver executable that is clearly modified. It can be shown that this firmware contains a modified binary derived from GPL'd ffmpeg/ffserver sources. While running this firmware, it can be demonstrated that the ffserver is active by visiting a specific link (stat.html). This produces the following result: FFServer Status Available Streams Path Served Conns bytes Format Bit rate kbits/s Video kbits/s Codec Audio kbits/s Codec Feed test.ts 0 0 mpegts 1536 1536 mpeg4 0 feed1.ffm test2.ts 0 0 mpegts 256 256 mpeg4 0 feed2.ffm rtspvideo 0 0 rtp 256 256 mpeg4 0 feed2.ffm rtspmp2 0 25051M rtp 1536 1536 mpeg4 0 feed1.ffm stat.html 1 0 - - - - index.html 0 0 - - - - Feed feed1.ffm Stream type kbits/s codec Parameters 0 video 1536 mpeg4 640x480, q=1-31, fps=30 Feed feed2.ffm Stream type kbits/s codec Parameters 0 video 256 mpeg4 320x240, q=1-31, fps=15 Connection Status Number of connections: 4 / 24 Bandwidth in use: 0k / 20480k # File IP Proto State Target bits/sec Actual bits/sec Bytes transferred 1 stat.html 192.168.1.18 HTTP/1.1 HTTP_WAIT_REQUEST 0 0 0 2 feed2.ffm(input) 127.0.0.1 HTTP/1.0 RECEIVE_DATA 256k 0 0 3 feed1.ffm(input) 127.0.0.1 HTTP/1.0 RECEIVE_DATA 1536k 0 0 4 (input) 127.0.0.1 RECEIVE_DATA 0 2432 83288k Generated at Sun Jan 4 04:04:07 1970 ________________________________________________ FFmpeg issue tracker <[email protected]> <https://roundup.ffmpeg.org/issue2116> ________________________________________________
