Re: [libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-12-06 Thread Justin Ruggles
On 11/27/2012 06:24 AM, Janne Grunau wrote: > Avoids a 2G memory allocation and parsing of random data in > mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. > --- > > err, now the correct patch. git send-email only works after > git commit --amend as intended. > > libavformat

Re: [libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-12-06 Thread Janne Grunau
On 2012-11-27 12:24:51 +0100, Janne Grunau wrote: > Avoids a 2G memory allocation and parsing of random data in > mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. > --- > > err, now the correct patch. git send-email only works after > git commit --amend as intended. > > libav

[libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-11-27 Thread Janne Grunau
Avoids a 2G memory allocation and parsing of random data in mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. --- err, now the correct patch. git send-email only works after git commit --amend as intended. libavformat/mov.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion

[libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-11-26 Thread Janne Grunau
On 2012-11-26 22:37:38 +0100, Janne Grunau wrote: > On 2012-11-26 22:25:03 +0100, Luca Barbato wrote: > > On 11/26/12 10:22 PM, Janne Grunau wrote: > > > Avoids a 2G memory allocation and parsing of random data in > > > mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. > > > ---

Re: [libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-11-26 Thread Janne Grunau
On 2012-11-26 22:25:03 +0100, Luca Barbato wrote: > On 11/26/12 10:22 PM, Janne Grunau wrote: > > Avoids a 2G memory allocation and parsing of random data in > > mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. > > --- > > libavformat/mov.c | 4 +++- > > 1 file changed, 3 inser

Re: [libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-11-26 Thread Luca Barbato
On 11/26/12 10:22 PM, Janne Grunau wrote: > Avoids a 2G memory allocation and parsing of random data in > mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. > --- > libavformat/mov.c | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-) Seems ok. __

[libav-devel] [PATCH 1/1] mov: validate number of DataReferenceBox entries against box size

2012-11-26 Thread Janne Grunau
Avoids a 2G memory allocation and parsing of random data in mov_read_dref(). The fuzzed sample sample.mp4_s224424 triggers this. --- libavformat/mov.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libavformat/mov.c b/libavformat/mov.c index a80bf5b..83d8dd7 100644 --- a/li