Re: [FFmpeg-devel] [PATCH 1/2] avformat/options_table: Set the default maximum number of streams to 1000

2016-12-13 Thread Michael Niedermayer
On Tue, Dec 13, 2016 at 12:33:09AM +0100, Andreas Cadhalpun wrote: > On 10.12.2016 20:15, Michael Niedermayer wrote: > > Fixes CVE-2016-9561 > > I think the commit message should mention that the security relevance of > this is disputed, as running out of memory can happen with valid files. chang

Re: [FFmpeg-devel] [PATCH 1/2] avformat/options_table: Set the default maximum number of streams to 1000

2016-12-12 Thread Andreas Cadhalpun
On 10.12.2016 20:15, Michael Niedermayer wrote: > Fixes CVE-2016-9561 I think the commit message should mention that the security relevance of this is disputed, as running out of memory can happen with valid files. > Suggested-by: Andreas Cadhalpun > Signed-off-by: Michael Niedermayer > --- >

[FFmpeg-devel] [PATCH 1/2] avformat/options_table: Set the default maximum number of streams to 1000

2016-12-10 Thread Michael Niedermayer
Fixes CVE-2016-9561 Suggested-by: Andreas Cadhalpun Signed-off-by: Michael Niedermayer --- libavformat/options_table.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/options_table.h b/libavformat/options_table.h index d5448e503f..a537dda95e 100644 --- a/libavfor