gstreamer/gst/vmnc
Sebastian Dröge 4cb1bcf142 vmncdec: Sanity-check width/height before using it
We will allocate a screen area of width*height*bpp bytes, however this
calculation can easily overflow if too high width or height are given
inside the stream. Nonetheless we would just assume that enough memory
was allocated, try to fill it and overwrite as much memory as wanted.

Also allocate the screen area filled with zeroes to ensure that we start
with full-black and not any random (or not so random) data.

https://scarybeastsecurity.blogspot.gr/2016/11/0day-poc-risky-design-decisions-in.html

Ideally we should just remove this plugin in favour of the one in
gst-libav, which generally seems to be of better code quality.

https://bugzilla.gnome.org/show_bug.cgi?id=774533
2016-11-16 20:41:39 +02:00
..
Makefile.am Remove obsolete Android build cruft 2015-04-26 18:59:32 +01:00
meson.build Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
vmncdec.c vmncdec: Sanity-check width/height before using it 2016-11-16 20:41:39 +02:00
vmncdec.h vmcndec: Add missing header file 2013-12-06 21:11:32 -05:00