projects / platform / upstream / gstreamer.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (from: 1edd1c3)
mxfdemux: Check number of channels for AES3 audio
authorSebastian Dröge <sebastian@centricular.com>
Thu, 10 Aug 2023 12:47:03 +0000 (15:47 +0300)
committerTim-Philipp Müller <tim@centricular.com>
Wed, 20 Sep 2023 14:14:27 +0000 (15:14 +0100)
Only up to 8 channels are allowed and using a higher number would cause
integer overflows when copying the data, and lead to out of bound
writes.

Also check that each buffer is at least 4 bytes long to avoid another
overflow.

Fixes ZDI-CAN-21661, CVE-2023-40475

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2897

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5365>


No differences found
Domain: Multimedia / Media Common;