On 01/26/2012 07:21 PM, Alex Converse wrote:

> From: Michael Niedermayer <[email protected]>
> 
> dv: Fix null pointer dereference due to ach=0
> 
> Fixes part2 of CVE-2011-3929
> 
> Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
> Reviewed-by: Roman Shaposhnik <[email protected]>
> Signed-off-by: Michael Niedermayer <[email protected]>
> Signed-off-by: Alex Converse <[email protected]>
> ---
>  libavformat/dv.c |    3 ++-
>  1 files changed, 2 insertions(+), 1 deletions(-)
> 
> diff --git a/libavformat/dv.c b/libavformat/dv.c
> index 4896b0a..bde8ca3 100644
> --- a/libavformat/dv.c
> +++ b/libavformat/dv.c
> @@ -343,7 +343,8 @@ int avpriv_dv_produce_packet(DVDemuxContext *c, AVPacket 
> *pkt,
>         c->audio_pkt[i].pts  = c->abytes * 30000*8 / 
> c->ast[i]->codec->bit_rate;
>         ppcm[i] = c->audio_buf[i];
>      }
> -    dv_extract_audio(buf, ppcm, c->sys);
> +    if (c->ach)
> +        dv_extract_audio(buf, ppcm, c->sys);
>  
>      /* We work with 720p frames split in half, thus even frames have
>       * channels 0,1 and odd 2,3. */


ltgm.

-Justin

_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to