On Mon, Dec 15, 2014 at 10:54 AM, Anton Khirnov <[email protected]> wrote: > From: Michael Niedermayer <[email protected]> > > Fixes invalid memory access. > > CC: [email protected] > Bug-ID: CVE-2014-8549 > Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind > Signed-off-by: Anton Khirnov <[email protected]> > --- > libavcodec/on2avc.c | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/libavcodec/on2avc.c b/libavcodec/on2avc.c > index deaa2b4..12f1ef6 100644 > --- a/libavcodec/on2avc.c > +++ b/libavcodec/on2avc.c > @@ -918,6 +918,10 @@ static av_cold int on2avc_decode_init(AVCodecContext > *avctx) > av_log(avctx, AV_LOG_ERROR, "0x500 version should be mono\n"); > return AVERROR_INVALIDDATA; > } > + if (avctx->channels > 2) { > + avpriv_request_sample(avctx, "Decoding more than 2 channels"); > + return AVERROR_PATCHWELCOME;
iirc this format supports only mono and stereo, no? -- Vittorio _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
