[FFmpeg-devel] [PATCH] Vorbisdec check the result of a potentially very large malloc.

Alex Converse alex.converse
Mon Aug 2 22:08:26 CEST 2010


res_setup->ptns_to_read ranges [0, 2^24)
vc->audio_channels ranges [1, 255]

Do any platforms we support have sizeof(uint_fast8_t) > 1 and size_t <= 4?

If so we also need to look for an integer overflow.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vorbis-malloc.diff
Type: text/x-patch
Size: 687 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20100802/fa9422e9/attachment.bin>



More information about the ffmpeg-devel mailing list