Re: [libav-devel] [PATCH 1/2] rv10: verify slice offsets against buffer size

2012-01-23 Thread Janne Grunau
On 2012-01-24 07:20:10 +0800, Ronald S. Bultje wrote: > Hi, > > On Tue, Jan 24, 2012 at 5:00 AM, Janne Grunau wrote: > > Found by John Villamil in fuzzed rv20 in mkv files. > > --- > >  libavcodec/rv10.c |   10 -- > >  1 files changed, 8 insertions(+), 2 deletions(-) > [..] > > +        

Re: [libav-devel] [PATCH 1/2] rv10: verify slice offsets against buffer size

2012-01-23 Thread Ronald S. Bultje
Hi, On Tue, Jan 24, 2012 at 5:00 AM, Janne Grunau wrote: > Found by John Villamil in fuzzed rv20 in mkv files. > --- >  libavcodec/rv10.c |   10 -- >  1 files changed, 8 insertions(+), 2 deletions(-) [..] > +        if (offset > buf_size) > +            return AVERROR_INVALIDDATA; Shoul

[libav-devel] [PATCH 1/2] rv10: verify slice offsets against buffer size

2012-01-23 Thread Janne Grunau
Found by John Villamil in fuzzed rv20 in mkv files. --- libavcodec/rv10.c | 10 -- 1 files changed, 8 insertions(+), 2 deletions(-) diff --git a/libavcodec/rv10.c b/libavcodec/rv10.c index 1d78c92..0098ff5 100644 --- a/libavcodec/rv10.c +++ b/libavcodec/rv10.c @@ -647,8 +647,11 @@ stat