qtdemux: Make sure only an even number of bytes is processed when handling CEA608 data

An odd number of bytes would lead to out of bound reads and writes, and doesn't
make any sense as CEA608 comes in byte pairs.

Strip off any leftover bytes and assume everything before that is valid.

Thanks to Antonio Morales for finding and reporting the issue.

Fixes GHSL-2024-195
Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3841

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059>
This commit is contained in:
Sebastian Dröge 2024-09-26 09:20:28 +03:00 committed by GStreamer Marge Bot
parent 5a9e80c01b
commit 1d534ac209

View file

@ -6145,6 +6145,11 @@ convert_to_s334_1a (const guint8 * ccpair, guint8 ccpair_size, guint field,
guint8 *storage; guint8 *storage;
gsize i; gsize i;
/* Strip off any leftover odd bytes and assume everything before is valid */
if (ccpair_size % 2 != 0) {
ccpair_size -= 1;
}
/* We are converting from pairs to triplets */ /* We are converting from pairs to triplets */
*res = ccpair_size / 2 * 3; *res = ccpair_size / 2 * 3;
storage = g_malloc (*res); storage = g_malloc (*res);