gstreamer/subprojects/gst-plugins-bad/gst/mxf
Sebastian Dröge 1edd1c38dc mxfdemux: Check number of channels for AES3 audio
Only up to 8 channels are allowed and using a higher number would cause
integer overflows when copying the data, and lead to out of bound
writes.

Also check that each buffer is at least 4 bytes long to avoid another
overflow.

Fixes ZDI-CAN-21661, CVE-2023-40475

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2897

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5365>
2023-09-20 15:14:27 +01:00
..
gstmxfelement.c mxfdemux: Add support for Canon XF-HEVC 2022-10-12 09:15:57 +00:00
gstmxfelements.h
meson.build mxfdemux: Add support for Canon XF-HEVC 2022-10-12 09:15:57 +00:00
mxf.c
mxfaes-bwf.c mxfdemux: Always calculate BlockAlign of raw audio 2022-08-12 19:26:08 +00:00
mxfaes-bwf.h
mxfalaw.c
mxfalaw.h
mxfcustom.c mxfdemux: Add support for Canon XF-HEVC 2022-10-12 09:15:57 +00:00
mxfcustom.h mxfdemux: Add support for Canon XF-HEVC 2022-10-12 09:15:57 +00:00
mxfd10.c mxfdemux: Check number of channels for AES3 audio 2023-09-20 15:14:27 +01:00
mxfd10.h
mxfdemux.c mxfdemux: Don't leak index table segments on failures 2022-10-12 09:15:57 +00:00
mxfdemux.h
mxfdms1.c
mxfdms1.h
mxfdv-dif.c
mxfdv-dif.h
mxfessence.c
mxfessence.h
mxfjpeg2000.c
mxfjpeg2000.h
mxfmetadata.c plugins: Fix various trivial clang compiler warnings 2023-03-18 19:52:40 +00:00
mxfmetadata.h
mxfmpeg.c
mxfmpeg.h
mxfmux.c mxfmux: Disable aggregator's default negotiation 2022-05-05 17:41:58 +00:00
mxfmux.h
mxfprores.c
mxfprores.h
mxfquark.c
mxfquark.h
mxftypes.c
mxftypes.h
mxful.c
mxful.h
mxfup.c mxfdemux: Fix integer overflow causing out of bounds writes when handling invalid uncompressed video 2023-09-20 15:14:27 +01:00
mxfup.h
mxfvanc.c mxfvanc: Handle empty VANC packets 2022-04-06 10:05:09 +00:00
mxfvanc.h
mxfvc3.c
mxfvc3.h