On 3/21/2024 11:25 PM, Michael Niedermayer wrote:
Hi all

we have code like
st->codecpar->ch_layout.nb_channels = avio_rb32(pb);

and then somewhere there is some code that uses this by first allocating
an array and that then hits OOM
(it was this here:
     map = av_calloc(nb_channels, sizeof(*channel_layout->u.map));)

is anyone against adding a max_channels field to AVFormatContext  or something
like that ?

alternative is "wont fix" for all such cases, or maybe someone sees another way 
?

thx

We have FF_SANE_NB_CHANNELS, so maybe add a check for it to mxfdec.c (Where i assume this is happening) and mov_chan.c or mov.c before continuing with such a layout.



_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".

Reply via email to