gstreamer/subprojects/gst-plugins-bad/gst/mxf
Sebastian Dröge 72742dee30 mxfdemux: Check number of channels for AES3 audio
Only up to 8 channels are allowed and using a higher number would cause
integer overflows when copying the data, and lead to out of bound
writes.

Also check that each buffer is at least 4 bytes long to avoid another
overflow.

Fixes ZDI-CAN-21661, CVE-2023-40475

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2897

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5362>
2023-09-20 15:40:07 +00:00
..
gstmxfelement.c mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
gstmxfelements.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
meson.build mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
mxf.c Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfaes-bwf.c gst-plugins-bad: re-indent with GNU indent 2.2.12 2023-03-17 03:18:54 +00:00
mxfaes-bwf.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfalaw.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfalaw.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfcustom.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfcustom.h mxfdemux: Add support for Canon XF-HEVC 2022-10-12 09:15:57 +00:00
mxfd10.c mxfdemux: Check number of channels for AES3 audio 2023-09-20 15:40:07 +00:00
mxfd10.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfdemux.c gst-plugins-bad: re-indent with GNU indent 2.2.12 2023-03-17 03:18:54 +00:00
mxfdemux.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfdms1.c Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfdms1.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfdv-dif.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfdv-dif.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfessence.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfessence.h mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfffv1.c mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
mxfffv1.h mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
mxfjpeg2000.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfjpeg2000.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfmetadata.c plugins: Fix various trivial clang compiler warnings 2023-03-18 16:16:55 +02:00
mxfmetadata.h mxfdemux: Handle sub-descriptor in generic descriptors 2023-02-10 10:02:25 +01:00
mxfmpeg.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfmpeg.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfmux.c mxfmux: Disable aggregator's default negotiation 2022-05-05 17:41:58 +00:00
mxfmux.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfprores.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfprores.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfquark.c mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
mxfquark.h mxfdemux: Add support for FFV1 demuxing 2023-02-10 10:02:25 +01:00
mxftypes.c mxf: Add convenience function for looking up primer tags 2023-02-10 06:25:29 +01:00
mxftypes.h mxf: Add convenience function for looking up primer tags 2023-02-10 06:25:29 +01:00
mxful.c mxfdemux: Handle sub-descriptor in generic descriptors 2023-02-10 10:02:25 +01:00
mxful.h mxfdemux: Handle sub-descriptor in generic descriptors 2023-02-10 10:02:25 +01:00
mxfup.c mxfdemux: Fix integer overflow causing out of bounds writes when handling invalid uncompressed video 2023-09-20 15:40:07 +00:00
mxfup.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfvanc.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfvanc.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
mxfvc3.c mxf: simplify essence track matching 2023-02-10 10:02:25 +01:00
mxfvc3.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00