[FFmpeg-devel] [PATCHv3] On2 VP7 decoder

Michael Niedermayer michaelni at gmx.at
Fri Mar 28 03:14:16 CET 2014


On Thu, Mar 27, 2014 at 12:16:36PM +0100, Vittorio Giovara wrote:
> On Thu, Mar 27, 2014 at 5:01 AM, Michael Niedermayer <michaelni at gmx.at> wrote:
> > On Wed, Mar 26, 2014 at 04:37:43AM +0100, Vittorio Giovara wrote:
> >>
> >> Furthermore it introduces at least a possible NULL pointer
> >> dereferences in vp7_decode_frame_header() when prev_frame is NULL.
> >
> > fixed
> >
> 
> You're welcome, it would be just nice if these kind of security
> reports were bi-derectional.

Iam not sure i understand your suggestion (or complaint if its meant
as one)

Iam not keeping a secret list of security issues in libav.
Actually iam not a user of libav at all, so i dont notice in general
when theres an issue in libav.
I did very rarely test it for sake of an argument or for some
statistics only ...

So really the only place i could find an issue is in ffmpeg and
if i do, it goes either as bugfix patch to the ML, as bugfix commit to
git master, as ticket to trac or on my todo list for doing one of the
previous once i have time

All cases here end in public

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The greatest way to live with honor in this world is to be what we pretend
to be. -- Socrates
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20140328/db5d1230/attachment.asc>


More information about the ffmpeg-devel mailing list