On Thu, Dec 18, 2014 at 10:27 PM, Anton Khirnov <[email protected]> wrote:
> From: Michael Niedermayer <[email protected]>
>
> Fixes invalid memory access.
>
> CC: [email protected]
> Bug-ID: CVE-2014-8549
> Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
> Signed-off-by: Anton Khirnov <[email protected]>
imo, this is a new patch, you may assign it to yourself and add the
"based on" line.
> ---
> libavcodec/on2avc.c | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/libavcodec/on2avc.c b/libavcodec/on2avc.c
> index deaa2b4..c00339f 100644
> --- a/libavcodec/on2avc.c
> +++ b/libavcodec/on2avc.c
> @@ -918,6 +918,10 @@ static av_cold int on2avc_decode_init(AVCodecContext
> *avctx)
> av_log(avctx, AV_LOG_ERROR, "0x500 version should be mono\n");
> return AVERROR_INVALIDDATA;
> }
> + if (avctx->channels > 2) {
> + av_log(avctx, AV_LOG_ERROR, "Only 1 or 2 channels are supported.\n");
> + return AVERROR(EINVAL);
> + }
> if (avctx->channels == 2)
> av_log(avctx, AV_LOG_WARNING,
> "Stereo mode support is not good, patch is welcome\n");
in either cases, patch ok
--
Vittorio
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel
