Re: [libaacs-devel] [PATCH] Add processing for discs with Null-UnitKeyRo file

2016-01-12 Thread Petri Hintukainen
On ke, 2015-12-16 at 21:38 +0100, Roland Fischer wrote: > Hello! > > To make things easier I simply zipped the AACS folder of the disc an > uploaded it to tinyupload: > http://s000.tinyupload.com/index.php?file_id=43898648543121342749 > > MKB_RO.inf and MKB_RW.inf are completely empty - both are

[libaacs-devel] Check calloc() result

2016-01-12 Thread npzacs
libaacs | branch: master | npzacs | Mon Jan 11 12:51:36 2016 +0200| [9f3f74051d92c2072b272ed1089751f1220ec997] | committer: npzacs Check calloc() result > http://git.videolan.org/gitweb.cgi/libaacs.git/?a=commit;h=9f3f74051d92c2072b272ed1089751f1220ec997 --- src/file/keydbcfg.c |9 +++

[libaacs-devel] Check cache memory size before reading.

2016-01-12 Thread npzacs
libaacs | branch: master | npzacs | Mon Jan 11 12:52:04 2016 +0200| [b05f96370b68b1d7cc934c0363ca0009bee04ced] | committer: npzacs Check cache memory size before reading. TOCTOU between data size check and read: attacker could replace cache file with larger one and cause buffer overflow. > htt

[libaacs-devel] mkb: add sanity checks

2016-01-12 Thread npzacs
libaacs | branch: master | npzacs | Tue Dec 15 14:31:32 2015 +0200| [72e4a984b5599d49421ee047196b0bc452924ec3] | committer: npzacs mkb: add sanity checks Avoid overreading if record is too short. > http://git.videolan.org/gitweb.cgi/libaacs.git/?a=commit;h=72e4a984b5599d49421ee047196b0bc452924