[FFmpeg-devel] [FFmpeg-cvslog] avformat/matroskadec: Check parents remaining length

[Michael Niedermayer]

On Sun, Feb 17, 2019 at 09:53:03AM +0000, Steve Lhomme wrote:
> ffmpeg | branch: master | Steve Lhomme <robux4 at ycbcr.xyz> | Wed Feb 13 13:20:45 2019 +0100| [9326117bf63b04a466d9e787224e56ba8cdbb215] | committer: Michael Niedermayer
> 
> avformat/matroskadec: Check parents remaining length
> 
> This was found through the Hacker One program on VLC but is not a security issue in libavformat
> Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> 
> > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9326117bf63b04a466d9e787224e56ba8cdbb215
> ---
> 
>  libavformat/matroskadec.c | 12 ++++++++++++
>  1 file changed, 12 insertions(+)

this detects an issue in ffmpeg generated mkv:

./ffmpeg -f lavfi -i color=black -pix_fmt yuv422p10le -bitexact -vframes 1 -c:v ffv1 -level 3 -y fff.mkv && ./ffmpeg -i fff.mkv -f null -

[matroska,webm @ 0x35e9040] Invalid length 0x17 > 0x9b0 in parent

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Everything should be made as simple as possible, but not simpler.
-- Albert Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20190509/7083424a/attachment.sig>