1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2026-06-14 08:44:40 +02:00
Files
FFmpeg/libavformat
Omkhar Arasaratnam 2d0bdf26af avformat/mov: validate APV access unit length before passing to decoder
libavformat/mov.c read the APV AU length field directly from the
sample without sanity-checking against the remaining sample size or
a documented maximum. The patch validates that au_size is bounded by
the remaining sample bytes and that the AU envelope (4 bytes plus
au_size) fits inside the declared sample size.

Validate the access unit length at the demuxer boundary so that the
decoder is not handed an attacker-controllable buffer size. Returns
AVERROR_INVALIDDATA on the bound failure with an explicit log line.

Found-by: Claude (Anthropic). Human-verified and reported by
Omkhar Arasaratnam <omkhar@linkedin.com>.
Signed-off-by: Omkhar Arasaratnam <omkhar@linkedin.com>
(cherry picked from commit 387ad6d102)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2026-06-14 04:59:02 +02:00
..
2025-08-08 03:04:42 -07:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-06-27 22:32:51 -03:00
2025-04-13 22:49:21 +02:00
2025-04-13 22:49:21 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-06-23 17:19:18 +10:00
2025-08-03 13:48:47 +02:00
2026-06-14 04:59:01 +02:00
2026-05-03 19:50:04 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-04 03:59:42 +00:00
2025-08-03 13:48:47 +02:00
2025-08-08 03:04:42 -07:00
2025-08-08 03:04:42 -07:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-03-28 15:23:28 +01:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:57:05 +02:00
2025-08-03 13:48:47 +02:00
2025-07-04 17:07:53 +10:00
2025-06-23 17:19:18 +10:00
2025-07-07 01:45:10 +02:00
2026-05-03 19:50:01 +02:00
2025-06-11 19:19:50 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-06-26 17:35:46 +02:00
2025-08-03 13:48:47 +02:00
2026-06-14 04:59:00 +02:00
2025-11-19 00:58:21 +00:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00