On Sun, Feb 17, 2019 at 09:53:03AM +0000, Steve Lhomme wrote: > ffmpeg | branch: master | Steve Lhomme <rob...@ycbcr.xyz> | Wed Feb 13 > 13:20:45 2019 +0100| [9326117bf63b04a466d9e787224e56ba8cdbb215] | committer: > Michael Niedermayer > > avformat/matroskadec: Check parents remaining length > > This was found through the Hacker One program on VLC but is not a security > issue in libavformat > Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> > > > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9326117bf63b04a466d9e787224e56ba8cdbb215 > --- > > libavformat/matroskadec.c | 12 ++++++++++++ > 1 file changed, 12 insertions(+)
this detects an issue in ffmpeg generated mkv: ./ffmpeg -f lavfi -i color=black -pix_fmt yuv422p10le -bitexact -vframes 1 -c:v ffv1 -level 3 -y fff.mkv && ./ffmpeg -i fff.mkv -f null - [matroska,webm @ 0x35e9040] Invalid length 0x17 > 0x9b0 in parent [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Everything should be made as simple as possible, but not simpler. -- Albert Einstein
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".