Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-19 Thread Andreas Cadhalpun
On 19.12.2015 16:25, Michael Niedermayer wrote: > On Sat, Dec 19, 2015 at 02:25:42PM +0100, Andreas Cadhalpun wrote: >> nutdec.c |2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) >> d1813b6394c006a3f235e5e9a5fb8f5172933736 >> 0001-nutdec-reject-negative-value_len-in-read_sm_data.patch

Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-19 Thread Michael Niedermayer
On Sat, Dec 19, 2015 at 02:25:42PM +0100, Andreas Cadhalpun wrote: > On 19.12.2015 13:58, Michael Niedermayer wrote: > > On Sat, Dec 19, 2015 at 12:19:44PM +0100, Andreas Cadhalpun wrote: > >> On 19.12.2015 01:51, Michael Niedermayer wrote: > >>> On Fri, Dec 18, 2015 at 05:22:31PM +0100, Andreas Ca

Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-19 Thread Andreas Cadhalpun
On 19.12.2015 13:58, Michael Niedermayer wrote: > On Sat, Dec 19, 2015 at 12:19:44PM +0100, Andreas Cadhalpun wrote: >> On 19.12.2015 01:51, Michael Niedermayer wrote: >>> On Fri, Dec 18, 2015 at 05:22:31PM +0100, Andreas Cadhalpun wrote: If it is negative, it makes size larger than the size o

Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-19 Thread Michael Niedermayer
On Sat, Dec 19, 2015 at 12:19:44PM +0100, Andreas Cadhalpun wrote: > On 19.12.2015 01:51, Michael Niedermayer wrote: > > On Fri, Dec 18, 2015 at 05:22:31PM +0100, Andreas Cadhalpun wrote: > >> If it is negative, it makes size larger than the size of the packet > >> buffer, causing invalid writes in

Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-19 Thread Andreas Cadhalpun
On 19.12.2015 01:51, Michael Niedermayer wrote: > On Fri, Dec 18, 2015 at 05:22:31PM +0100, Andreas Cadhalpun wrote: >> If it is negative, it makes size larger than the size of the packet >> buffer, causing invalid writes in avio_read. >> >> Signed-off-by: Andreas Cadhalpun >> --- >> libavformat/

Re: [FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-18 Thread Michael Niedermayer
On Fri, Dec 18, 2015 at 05:22:31PM +0100, Andreas Cadhalpun wrote: > If it is negative, it makes size larger than the size of the packet > buffer, causing invalid writes in avio_read. > > Signed-off-by: Andreas Cadhalpun > --- > libavformat/nutdec.c | 5 + > 1 file changed, 5 insertions(+) >

[FFmpeg-devel] [PATCH] nutdec: reject negative sm_size

2015-12-18 Thread Andreas Cadhalpun
If it is negative, it makes size larger than the size of the packet buffer, causing invalid writes in avio_read. Signed-off-by: Andreas Cadhalpun --- libavformat/nutdec.c | 5 + 1 file changed, 5 insertions(+) diff --git a/libavformat/nutdec.c b/libavformat/nutdec.c index 286d1ee..47ae7a7 1