On 09/01/2016 11:30 PM, Michael Niedermayer wrote:
missing alloc failure check
Fixed.
missing checks anything comming out of av_stream_get_side_data() could originate from an attacker and have manually choosen evil values.
Oh, well it seems I have trusted it quite a bit more. I will harden the code that uses the function.
Thanks for review! _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel