POC:

Run 'ffmpeg -y -i logo.iki -vn -f wav /dev/null' (with the attached
file)

On the latest ubuntu/i386:
- SVN r13990 will crash immediately. Under valgrind 3.3.0 it will report 
several invalid writes and then valgrind itself will crash.
- SVN r13993 and up shouldn't crash or have any valgrind warnings. 

** Attachment added: "logo.iki"
   http://launchpadlibrarian.net/16039022/logo.iki

-- 
CVE-2008-3162 Stack-based buffer overflow
https://bugs.launchpad.net/bugs/248674
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to