Re: [FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-09-22 Thread Paul B Mahol
On 9/22/23, Michael Niedermayer wrote: > On Fri, Sep 22, 2023 at 09:31:39PM +0200, Paul B Mahol wrote: >> On 9/22/23, Michael Niedermayer wrote: >> > On Mon, Aug 07, 2023 at 10:22:25AM +0200, Paul B Mahol wrote: >> >> NAK >> > >> > will apply unless you provide technical comments >> >> NAK,

Re: [FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-09-22 Thread Michael Niedermayer
On Fri, Sep 22, 2023 at 09:31:39PM +0200, Paul B Mahol wrote: > On 9/22/23, Michael Niedermayer wrote: > > On Mon, Aug 07, 2023 at 10:22:25AM +0200, Paul B Mahol wrote: > >> NAK > > > > will apply unless you provide technical comments > > NAK, never provided proof that this hack does not break

Re: [FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-09-22 Thread Paul B Mahol
On 9/22/23, Michael Niedermayer wrote: > On Mon, Aug 07, 2023 at 10:22:25AM +0200, Paul B Mahol wrote: >> NAK > > will apply unless you provide technical comments NAK, never provided proof that this hack does not break decoding. This is not really security fix. > > thx > > [...] > -- > Michael

Re: [FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-09-22 Thread Michael Niedermayer
On Mon, Aug 07, 2023 at 10:22:25AM +0200, Paul B Mahol wrote: > NAK will apply unless you provide technical comments thx [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Good people do not need laws to tell them to act responsibly, while bad people will find a

Re: [FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-08-07 Thread Paul B Mahol
NAK ___ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".

[FFmpeg-devel] [PATCH 2/5] avcodec/mv30: Check the input length before allocation

2023-08-06 Thread Michael Niedermayer
Fixes: Timeout Fixes: 60867/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MV30_fuzzer-6381933108527104 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer --- libavcodec/mv30.c | 5 + 1 file changed, 5