Re: [libav-devel] [PATCH] mov: Check the entries value when parsing dref boxes

2016-03-09 Thread Vittorio Giovara
On Wed, Mar 9, 2016 at 9:42 PM, Luca Barbato wrote: > On 08/03/16 12:05, Luca Barbato wrote: >> And properly reset the entries count when resetting the entries. >> >> CC: libav-sta...@libav.org >> >> Bug-Id: 929 >> --- >> > > CVE-2016-3062 ok i think -- Vittorio

Re: [libav-devel] [PATCH] mov: Check the entries value when parsing dref boxes

2016-03-09 Thread Luca Barbato
On 08/03/16 12:05, Luca Barbato wrote: > And properly reset the entries count when resetting the entries. > > CC: libav-sta...@libav.org > > Bug-Id: 929 > --- > CVE-2016-3062 ___ libav-devel mailing list libav-devel@libav.org

[libav-devel] [PATCH] mov: Check the entries value when parsing dref boxes

2016-03-08 Thread Luca Barbato
And properly reset the entries count when resetting the entries. CC: libav-sta...@libav.org Bug-Id: 929 --- There is a similar problem for other blocks, if you are ok I'd add some sc->${count} = 0 for all of them. And probably some block parsers should also have a av_free().