1
0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-10-24 02:09:03 +03:00
Files
ffmpeg/libavformat
Ted Meyer 1f217b4b7d avformat/mov: do not allocate out-of-range buffers
There's a possibility here with a well-crafted MP4 file containing only
the nested boxes in order: MOOV.TRAK.MDIA.MINF.STBL.SDTP where the
header size uses the 64 bit large size, and the ending stdp box has some
size value >= 0x100000014.

On a 32 bit build of ffmpeg, av_malloc's size parameter drops the high
order bits of `entries`, and and the allocation is now a controlled size
that is significantly smaller than `entries`. The following loop will
then write off the ended of allocated memory with data that follows the
box fourcc.

(cherry picked from commit 86f53f9ffb)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2026-03-15 00:49:56 +01:00
..
…
2025-08-03 13:48:47 +02:00
2024-08-28 16:27:54 +02:00
…
2025-09-08 20:59:31 +00:00
2025-04-13 22:49:21 +02:00
2024-09-24 15:37:15 +02:00
2025-04-13 22:49:21 +02:00
…
…
2024-03-31 00:08:43 +01:00
2025-08-03 13:48:47 +02:00
…
2024-03-26 06:36:43 +01:00
…
…
2025-08-03 13:48:47 +02:00
…
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
…
2026-02-19 17:18:11 +01:00
2026-03-03 01:04:37 +01:00
…
…
2024-06-19 10:12:50 -03:00
…
2022-03-16 14:05:26 +02:00
2025-08-03 13:48:47 +02:00
2024-03-26 06:36:43 +01:00
2025-08-03 13:48:47 +02:00
2025-06-23 17:19:18 +10:00
…
…
…
2026-02-25 02:55:43 +00:00
2025-08-03 13:48:47 +02:00
2024-06-04 11:46:27 +02:00
2026-02-25 02:55:43 +00:00
2024-07-21 16:41:23 +02:00
2026-02-18 08:20:10 +00:00
…
…
…
2023-05-31 09:03:58 -07:00
2025-08-03 13:48:47 +02:00
…
…
…
…
2025-08-03 13:48:47 +02:00
2024-04-17 18:31:06 +05:30
2024-05-01 02:57:12 +02:00
2025-08-03 13:48:47 +02:00
2024-04-06 12:59:56 +02:00
…
2025-08-04 03:59:42 +00:00
2025-08-03 13:48:47 +02:00
2026-02-23 20:20:20 +01:00
2024-03-31 00:08:43 +01:00
…
2025-11-09 13:44:18 +01:00
2024-03-31 00:08:43 +01:00
2025-10-25 19:22:48 +00:00
2025-03-28 15:23:28 +01:00
…
2026-02-09 14:01:14 +00:00
2024-03-31 00:08:43 +01:00
2026-02-23 20:20:20 +01:00
…
2025-08-03 13:48:47 +02:00
…
2024-11-03 10:53:15 +11:00
…
…
…
…
…
…
2025-06-23 17:19:18 +10:00
…
2024-03-15 12:51:15 +01:00
2024-03-15 12:51:15 +01:00
2022-03-26 00:42:00 +02:00
…
2026-02-08 02:25:14 +01:00
…
…
…
…
2025-08-03 13:48:47 +02:00
2024-03-31 00:08:43 +01:00
…
…
2025-09-19 09:59:26 +02:00
2025-08-03 13:48:47 +02:00
…
2024-07-21 17:02:11 +02:00
…
2026-03-08 02:29:20 +01:00
…
…
…
2024-03-26 06:36:43 +01:00
2025-08-03 13:48:47 +02:00
2026-02-25 02:55:43 +00:00
…
2025-08-03 13:48:47 +02:00
…
…
2024-03-26 06:36:43 +01:00
2024-03-31 00:08:43 +01:00