gstreamer/tests/check
Justin Chadwell 738f32d5d0 qtdemux: fix allocation explosion with stsd entries
Previously, the user input for stsd entries is trusted completely, and
so a maliciously crafted file could choose the length of the stsd
entries arbitrarily and cause qtdemux to try to allocate up to 2GB of
memory (half of a 32 bit max int).

This patch fixes this by sanity checking the stsd input against the
size of the entire stsd atom.

Part-of: <https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/merge_requests/670>
2020-07-15 12:10:45 +00:00
..
elements qtdemux: fix allocation explosion with stsd entries 2020-07-15 12:10:45 +00:00
generic Remove autotools build system 2019-10-14 11:04:18 +01:00
pipelines Remove autotools build system 2019-10-14 11:04:18 +01:00
gst-plugins-good.supp valgrind: suppress Cond error coming from gnutls 2019-08-08 14:39:17 +00:00
meson.build tests: don't pull in all -bad plugin, only allow the one we need 2020-06-09 15:23:40 +01:00