gstreamer/tests/check/elements
Justin Chadwell 738f32d5d0 qtdemux: fix allocation explosion with stsd entries
Previously, the user input for stsd entries is trusted completely, and
so a maliciously crafted file could choose the length of the stsd
entries arbitrarily and cause qtdemux to try to allocate up to 2GB of
memory (half of a 32 bit max int).

This patch fixes this by sanity checking the stsd input against the
size of the entire stsd atom.

Part-of: <https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/merge_requests/670>
2020-07-15 12:10:45 +00:00
..
aacparse.c
ac3parse.c
alpha.c
alphacolor.c
amrparse.c
apev2mux.c
aspectratiocrop.c
audioamplify.c
audiochebband.c
audiocheblimit.c
audiodynamic.c
audioecho.c
audiofirfilter.c
audioiirfilter.c
audioinvert.c
audiopanorama.c
audiowsincband.c
audiowsinclimit.c
autodetect.c
avimux.c
avisubtitle.c
capssetter.c
deinterlace.c
deinterleave.c
dtmf.c
equalizer.c
flacparse.c
flvdemux.c
flvmux.c
gdkpixbufoverlay.c
gdkpixbufsink.c
icydemux.c
id3demux.c
id3v2mux.c
imagefreeze.c imagefreeze: Add test for new live mode 2020-06-29 12:07:14 +03:00
interleave.c
jpegdec.c
jpegenc.c
level.c
matroskademux.c
matroskamux.c
matroskaparse.c
mpegaudioparse.c
mpg123audiodec.c
mulawdec.c
mulawenc.c
multifile.c
packets.h
parser.c
parser.h
qtdemux.c qtdemux: fix allocation explosion with stsd entries 2020-07-15 12:10:45 +00:00
qtdemux.h
qtmux.c
rganalysis.c
rglimiter.c
rgvolume.c
rtp-payloading.c
rtpbin.c Fix usage of C99 2020-03-23 21:32:04 -04:00
rtpbin_buffer_list.c
rtpcollision.c
rtpfunnel.c
rtph261.c
rtph263.c
rtph264.c
rtph265.c
rtpjitterbuffer.c rtpjitterbuffer: don't use RTX packets in rate-calc and reset-logic 2020-04-16 17:06:31 +02:00
rtpjpeg.c rtpjpeg: Use gst_memory_map() instead of gst_buffer_map() 2020-04-03 17:01:24 +02:00
rtpmux.c
rtpopus.c rtpopuspay: make depay ! pay work 2020-04-03 09:04:32 +00:00
rtpptdemux.c
rtpred.c
rtprtx.c
rtpsession.c rtpsession: make tests more stable 2020-06-20 19:45:33 +00:00
rtpssrcdemux.c
rtpstorage.c documentation: fix a number of typos 2019-10-05 22:38:11 +00:00
rtptimerqueue.c
rtpulpfec.c
rtpvp9.c
shapewipe.c
souphttpsrc.c
spectrum.c
splitmuxsink.c tests: splitmuxsink: Add more timecode based split test 2020-04-20 21:39:54 +09:00
splitmuxsinktimecode.c tests: splitmuxsink: Add more timecode based split test 2020-04-20 21:39:54 +09:00
splitmuxsrc.c tests: Split splitmux test case 2020-04-03 17:08:51 +09:00
udpsink.c
udpsrc.c
videobox.c
videocrop.c
videofilter.c
videomixer.c
vp8dec.c vpxdec: Check that output width and height != 0 2020-06-02 23:59:20 +03:00
vp8enc.c vpxenc: Add new bit-per-pixel property to select a better "default" bitrate 2020-06-04 20:14:03 +00:00
vp9enc.c tests: vp9enc: enforce I420 format 2020-06-08 17:58:29 +02:00
wavpackdec.c
wavpackenc.c
wavpackparse.c
wavparse.c
y4menc.c