A rather serious issue in "Signature for MP4": the spec says that box size
is little-endian, but every .mp4 file I have tested are in fact
big-endian. For example, here's a hexdump of the beginning of
sample_100kbit.mp4, a sample file from Darwin Streaming Server 6.0.3:
00000000 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 01
|....ftypmp42....|
00000010 6d 70 34 32 6d 70 34 31 00 00 5a eb 6d 6f 6f 76
|mp42mp41..Z.moov|
00000020 00 00 00 6c 6d 76 68 64 00 00 00 00 be 44 3f 8d
|...lmvhd.....D?.|
--
Philip Jägenstedt
Core Developer
Opera Software
_______________________________________________
websec mailing list
websec@ietf.org
https://www.ietf.org/mailman/listinfo/websec
