Re: [FFmpeg-devel] Is ffmpeg 2.8.11 vulnerable to clusterfuzz 4999324687663104?

2017-04-26 Thread Michael Niedermayer
On Tue, Apr 25, 2017 at 04:37:57PM -0700, Pal Azzo wrote: > Hi, > > I'm having trouble decoding this clusterfuzz report: > https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713 > > Was trying to figure out if 2.8.11 is vulnerable. It's not clear which > commit was the fix, but it looks like n

[FFmpeg-devel] Is ffmpeg 2.8.11 vulnerable to clusterfuzz 4999324687663104?

2017-04-25 Thread Pal Azzo
Hi, I'm having trouble decoding this clusterfuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713 Was trying to figure out if 2.8.11 is vulnerable. It's not clear which commit was the fix, but it looks like none of the commits in the regression range made it to the 2.8 branch. Wa