1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-29 22:00:58 +02:00
FFmpeg/libavformat
Michael Niedermayer a4fec9a7ea rtmppkt: Check for packet size mismatches
When receiving fragmented packets, the first packet declares the size,
and the later ones normally are small follow-on packets that don't repeat
the size and the other header fields. But technically, the later fragments
also can have a full header, declaring a different size than the previous
packet.

If the follow-on packet declares a larger size than the initial one, we
could end up writing outside of the allocation.

This fixes out of bounds writes.

Found-by: Paul Cher <paulcher@icloud.com>
Reviewed-by: Paul Cher <paulcher@icloud.com>

CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
2016-12-15 15:45:59 +02:00
..
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2015-11-12 04:39:14 +01:00
2016-05-17 12:24:32 -04:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-09-30 16:54:33 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-09-30 16:54:33 +02:00
2016-05-04 18:16:21 +02:00
2016-11-17 19:19:55 +01:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-07-31 08:19:45 +02:00
2016-05-04 18:16:21 +02:00
2016-05-17 12:24:32 -04:00
2016-05-05 10:48:34 +02:00
2016-11-25 18:46:53 +01:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-06-20 15:45:51 -04:00
2016-09-30 16:54:33 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-12-07 14:35:06 -05:00
2016-09-30 16:54:33 +02:00
2016-09-30 16:54:33 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-12-03 09:15:01 +01:00
2016-05-04 18:16:21 +02:00
2016-09-30 16:54:33 +02:00
2016-11-24 11:22:13 +01:00
2016-05-04 18:16:21 +02:00
2016-11-25 18:46:53 +01:00
2016-11-25 18:46:53 +01:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-11 10:35:26 +03:00
2016-02-22 11:30:58 +01:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-04 18:16:21 +02:00
2016-05-03 15:45:10 +02:00
2016-11-25 18:46:53 +01:00
2016-09-30 16:54:33 +02:00
2016-02-22 11:30:58 +01:00
2016-05-04 18:16:21 +02:00
2016-11-23 10:36:13 -05:00
2016-08-17 12:16:42 +02:00
2016-05-04 18:16:21 +02:00