gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869
authorYue Tao <Yue.Tao@windriver.com>
Fri, 29 Aug 2014 06:46:19 +0000 (14:46 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 18 Oct 2014 14:14:05 +0000 (16:14 +0200)
commitef9ca08b0a0d202edecc31e2b86ebf0e177bfc7d
tree71000b9389887c477b983a57b2d97744e4d22b13
parent90b716897f72a7a5e285e432542fd90099cdf548
gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869

The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2
allows remote attackers to have an unspecified impact via crafted H.264
data, related to an SPS and slice mismatch and an out-of-bounds array
access.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0869

(From OE-Core rev: 464123172c92d92fa08e2125c04653590ad654c7)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-skip-error-concealment-when-SPS-and-slices-are-.patch [new file with mode: 0644]
meta/recipes-multimedia/gstreamer/gst-ffmpeg_0.10.13.bb