Omkhar Arasaratnam
2d0bdf26af
avformat/mov: validate APV access unit length before passing to decoder
...
libavformat/mov.c read the APV AU length field directly from the
sample without sanity-checking against the remaining sample size or
a documented maximum. The patch validates that au_size is bounded by
the remaining sample bytes and that the AU envelope (4 bytes plus
au_size) fits inside the declared sample size.
Validate the access unit length at the demuxer boundary so that the
decoder is not handed an attacker-controllable buffer size. Returns
AVERROR_INVALIDDATA on the bound failure with an explicit log line.
Found-by: Claude (Anthropic). Human-verified and reported by
Omkhar Arasaratnam <omkhar@linkedin.com >.
Signed-off-by: Omkhar Arasaratnam <omkhar@linkedin.com >
(cherry picked from commit 387ad6d102 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2026-06-14 04:59:02 +02:00
..
2026-02-03 15:12:44 -03:00
2025-06-23 17:19:18 +10:00
2025-06-23 17:19:18 +10:00
2025-08-08 03:04:42 -07:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-07-19 20:01:57 -03:00
2025-07-18 14:54:36 -03:00
2025-06-27 22:32:51 -03:00
2025-04-27 23:00:02 +02:00
2026-05-03 19:49:59 +02:00
2025-04-13 22:49:21 +02:00
2025-04-13 22:49:21 +02:00
2025-07-28 17:41:36 +02:00
2026-06-14 04:58:58 +02:00
2025-08-03 13:48:47 +02:00
2025-05-15 01:20:46 +02:00
2025-03-28 14:33:07 -03:00
2025-03-28 14:33:07 -03:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:57:06 +02:00
2025-06-04 11:17:07 +08:00
2025-11-19 02:04:57 +01:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:57:01 +02:00
2025-07-18 14:54:36 -03:00
2025-03-25 20:59:18 -03:00
2025-03-25 20:59:18 -03:00
2025-07-18 14:54:36 -03:00
2025-05-07 15:35:47 +02:00
2026-05-03 19:57:02 +02:00
2025-07-21 01:27:23 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2026-05-20 15:15:30 +00:00
2026-05-20 15:15:30 +00:00
2025-03-28 14:33:07 -03:00
2026-05-20 15:15:30 +00:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:56:52 +02:00
2026-05-03 19:56:57 +02:00
2026-05-03 19:56:57 +02:00
2025-10-15 20:31:21 -03:00
2025-06-15 12:22:23 -05:00
2025-08-05 03:27:53 +02:00
2025-04-16 13:09:02 +02:00
2025-07-31 19:54:58 +08:00
2026-05-03 19:49:52 +02:00
2025-04-25 23:22:20 +02:00
2026-06-14 04:58:59 +02:00
2025-08-03 13:48:47 +02:00
2025-06-07 15:59:06 +08:00
2025-06-07 20:00:12 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2025-06-23 17:19:18 +10:00
2025-07-22 09:47:18 -03:00
2025-08-03 13:48:47 +02:00
2026-04-28 21:52:30 +00:00
2026-04-28 21:52:30 +00:00
2026-06-14 04:59:01 +02:00
2026-05-20 15:15:30 +00:00
2025-08-03 13:48:47 +02:00
2025-08-22 00:28:33 +02:00
2026-05-03 19:50:04 +02:00
2025-06-04 11:17:07 +08:00
2026-05-03 19:57:02 +02:00
2026-02-27 12:27:15 -03:00
2026-05-03 19:57:01 +02:00
2025-06-24 20:15:20 -03:00
2026-05-03 19:50:04 +02:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:50:01 +02:00
2025-03-28 14:33:08 -03:00
2025-04-25 23:22:20 +02:00
2025-05-15 03:03:55 +02:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:50:02 +02:00
2026-05-03 19:50:02 +02:00
2025-08-04 18:03:29 +00:00
2025-08-03 13:48:47 +02:00
2025-04-25 23:22:20 +02:00
2025-08-03 13:48:47 +02:00
2025-08-08 01:06:11 +09:00
2026-03-05 23:07:58 -03:00
2025-03-22 03:35:28 +01:00
2025-08-04 19:51:59 +00:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:50:04 +02:00
2025-08-04 03:59:42 +00:00
2025-08-03 13:48:47 +02:00
2025-08-08 03:04:42 -07:00
2025-05-28 02:09:28 +02:00
2026-05-03 19:57:05 +02:00
2025-08-07 03:07:43 +02:00
2026-06-14 04:58:59 +02:00
2025-08-08 03:04:42 -07:00
2025-04-07 01:02:41 +02:00
2026-05-03 19:56:57 +02:00
2025-04-25 23:22:20 +02:00
2026-06-01 11:27:08 -03:00
2026-06-14 04:59:02 +02:00
2025-08-24 10:32:33 -03:00
2025-07-30 16:48:14 -03:00
2025-03-25 20:59:18 -03:00
2025-03-25 20:59:18 -03:00
2025-04-25 23:22:20 +02:00
2025-03-10 04:51:57 +01:00
2026-05-03 19:56:54 +02:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:50:02 +02:00
2025-03-28 14:33:08 -03:00
2025-03-28 14:33:07 -03:00
2025-08-03 13:48:47 +02:00
2026-06-14 04:59:01 +02:00
2025-08-08 03:04:42 -07:00
2025-07-28 17:41:38 +02:00
2025-07-07 01:52:46 +02:00
2025-07-11 17:49:57 +02:00
2025-08-03 13:48:47 +02:00
2025-03-28 15:23:28 +01:00
2025-05-30 22:07:10 +02:00
2025-08-03 13:48:47 +02:00
2025-03-28 14:33:07 -03:00
2026-05-21 09:36:09 -05:00
2025-05-19 07:24:05 +02:00
2025-05-19 07:24:05 +02:00
2026-05-27 20:39:02 -05:00
2025-07-25 21:10:13 +02:00
2025-03-28 14:33:07 -03:00
2025-07-25 21:10:16 +02:00
2026-05-03 19:57:05 +02:00
2025-03-22 03:35:28 +01:00
2025-06-04 11:17:07 +08:00
2025-04-25 23:22:20 +02:00
2025-08-03 13:48:47 +02:00
2025-07-04 17:07:53 +10:00
2025-03-04 02:07:01 +01:00
2025-03-04 02:07:01 +01:00
2025-06-23 17:19:18 +10:00
2025-04-25 23:22:20 +02:00
2026-05-03 19:56:55 +02:00
2026-05-03 19:57:03 +02:00
2025-03-04 15:34:38 +01:00
2025-06-23 17:19:18 +10:00
2025-07-03 23:05:27 +02:00
2026-05-12 16:10:13 +02:00
2025-05-22 22:10:46 +02:00
2026-05-03 19:57:01 +02:00
2026-05-03 19:57:03 +02:00
2026-05-03 19:57:04 +02:00
2025-05-22 22:11:37 +02:00
2026-05-03 19:56:58 +02:00
2025-11-19 02:05:02 +01:00
2025-07-07 16:33:48 +02:00
2025-07-07 16:14:02 +02:00
2026-06-14 04:59:00 +02:00
2025-02-26 12:32:22 -05:00
2025-11-19 02:04:59 +01:00
2026-06-14 04:59:00 +02:00
2026-05-03 19:50:08 +02:00
2025-02-26 12:32:22 -05:00
2026-05-03 19:57:03 +02:00
2025-07-07 01:45:10 +02:00
2026-05-03 19:56:59 +02:00
2025-06-17 11:27:28 -03:00
2026-05-03 19:50:01 +02:00
2025-11-19 02:05:00 +01:00
2025-06-11 19:19:50 +02:00
2025-03-28 14:33:07 -03:00
2026-05-03 19:50:09 +02:00
2025-08-03 13:48:47 +02:00
2026-06-14 04:59:01 +02:00
2025-08-03 13:48:47 +02:00
2025-06-04 11:17:07 +08:00
2025-07-30 01:18:03 +02:00
2025-03-10 04:51:57 +01:00
2025-04-25 23:22:20 +02:00
2025-06-26 17:35:46 +02:00
2025-08-19 17:56:49 +02:00
2025-08-03 13:48:47 +02:00
2025-07-11 17:49:57 +02:00
2025-08-09 00:38:17 +00:00
2025-08-03 13:48:47 +02:00
2026-06-14 04:59:00 +02:00
2025-11-19 00:58:21 +00:00
2025-03-22 03:35:28 +01:00
2025-08-04 18:03:29 +00:00
2025-08-09 00:38:17 +00:00
2026-05-20 15:15:30 +00:00
2026-06-14 04:58:59 +02:00
2025-07-25 21:10:16 +02:00
2025-07-28 17:41:37 +02:00
2025-05-12 11:07:35 +02:00
2026-06-14 04:58:58 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 21:24:38 +00:00
2025-08-03 21:24:38 +00:00
2026-02-10 09:32:56 +00:00
2026-05-03 19:50:07 +02:00
2025-08-03 13:48:47 +02:00
2026-05-03 19:57:05 +02:00
2026-05-03 19:50:01 +02:00