Re: [FFmpeg-devel] [PATCH] avcodec/v4l2_m2m: handle the v4l2 eos event

2020-03-16 Thread BYHYKCHKIO WEIINZWLM
You're welcome. Can this bug help me apply for a CVE? On Tue, Mar 17, 2020 at 12:20 PM Andriy Gelman wrote: > On Mon, 16. Mar 10:03, Ming Qian wrote: > > when the last frame of capture is dequeueed, > > driver may send this V4L2_EVENT_EOS event, > > if this event is received, then we can set the

Re: [FFmpeg-devel] [PATCH] avcodec/v4l2_buffers: don't prevent enqueue capture buffer to driver

2020-03-16 Thread BYHYKCHKIO WEIINZWLM
When digging the application, I found this vulnerability in the program, because when the sws_scale function was called, the application did not check the validity of the parameters, resulting in an address access exception vulnerability. So I want to know if this is a problem in FFmpage, so I sent

[FFmpeg-devel] sws_scale function exception access

2020-03-16 Thread BYHYKCHKIO WEIINZWLM
Hello, I have a vulnerability about FFmpage to report. Regarding the sws_scale function in the swscale.c file, when the parameter SwsContext is 0, the program access address is abnormal, causing the program to crash. ___ ffmpeg-devel mailing list ffmpeg