Re: [libav-devel] [PATCH] http: Check for negative chunk sizes

2016-12-23 Thread Martin Storsjö
On Mon, 19 Dec 2016, Vittorio Giovara wrote: On Mon, Dec 19, 2016 at 9:56 PM, Martin Storsjö wrote: A negative chunk size is illegal and would end up used as length for memcpy, where it would lead to memory accesses out of bounds. Found-by: Paul Cher

Re: [libav-devel] [PATCH] http: Check for negative chunk sizes

2016-12-19 Thread Vittorio Giovara
On Mon, Dec 19, 2016 at 9:56 PM, Martin Storsjö wrote: > A negative chunk size is illegal and would end up used as > length for memcpy, where it would lead to memory accesses > out of bounds. > > Found-by: Paul Cher > > CC: libav-sta...@libav.org > --- >

[libav-devel] [PATCH] http: Check for negative chunk sizes

2016-12-19 Thread Martin Storsjö
A negative chunk size is illegal and would end up used as length for memcpy, where it would lead to memory accesses out of bounds. Found-by: Paul Cher CC: libav-sta...@libav.org --- libavformat/http.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavformat/http.c