Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-29 Thread wm4
On Tue, 29 Aug 2017 03:07:45 +0200 Michael Niedermayer wrote: > On Mon, Aug 28, 2017 at 11:21:39AM +0200, wm4 wrote: > > On Sun, 27 Aug 2017 19:16:03 +0200 > > Michael Niedermayer wrote: > > > > > On Sat, Aug 26, 2017 at 01:26:58AM +0200, Michael Niedermayer wrote: > > > > Fixes: loop.m3u >

Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-28 Thread Michael Niedermayer
On Mon, Aug 28, 2017 at 11:21:39AM +0200, wm4 wrote: > On Sun, 27 Aug 2017 19:16:03 +0200 > Michael Niedermayer wrote: > > > On Sat, Aug 26, 2017 at 01:26:58AM +0200, Michael Niedermayer wrote: > > > Fixes: loop.m3u > > > > > > The default max iteration count of 1000 is arbitrary and ideas for a

Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-28 Thread wm4
On Sun, 27 Aug 2017 19:16:03 +0200 Michael Niedermayer wrote: > On Sat, Aug 26, 2017 at 01:26:58AM +0200, Michael Niedermayer wrote: > > Fixes: loop.m3u > > > > The default max iteration count of 1000 is arbitrary and ideas for a better > > solution are welcome > > > > Found-by: Xiaohei and Wa

Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-27 Thread Michael Niedermayer
On Sat, Aug 26, 2017 at 01:26:58AM +0200, Michael Niedermayer wrote: > Fixes: loop.m3u > > The default max iteration count of 1000 is arbitrary and ideas for a better > solution are welcome > > Found-by: Xiaohei and Wangchu from Alibaba Security Team > Signed-off-by: Michael Niedermayer > --- >

Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-25 Thread Michael Niedermayer
On Sat, Aug 26, 2017 at 06:49:00AM +0800, Steven Liu wrote: > 2017-08-25 18:14 GMT+08:00 Michael Niedermayer : > > Fixes: loop.m3u > > > > The default max iteration count of 1000 is arbitrary and ideas for a better > > solution are welcome > > > > Found-by: Xiaohei and Wangchu from Alibaba Securit

[FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-25 Thread Michael Niedermayer
Fixes: loop.m3u The default max iteration count of 1000 is arbitrary and ideas for a better solution are welcome Found-by: Xiaohei and Wangchu from Alibaba Security Team Signed-off-by: Michael Niedermayer --- doc/demuxers.texi | 18 ++ libavformat/hls.c | 7 +++ 2 files ch

Re: [FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-25 Thread Steven Liu
2017-08-25 18:14 GMT+08:00 Michael Niedermayer : > Fixes: loop.m3u > > The default max iteration count of 1000 is arbitrary and ideas for a better > solution are welcome > > Found-by: Xiaohei and Wangchu from Alibaba Security Team > Signed-off-by: Michael Niedermayer > --- > libavformat/hls.c |

[FFmpeg-devel] [PATCH] avformat/hls: Fix DoS due to infinite loop

2017-08-25 Thread Michael Niedermayer
Fixes: loop.m3u The default max iteration count of 1000 is arbitrary and ideas for a better solution are welcome Found-by: Xiaohei and Wangchu from Alibaba Security Team Signed-off-by: Michael Niedermayer --- libavformat/hls.c | 7 +++ 1 file changed, 7 insertions(+) diff --git a/libavfor