gstreamer/gst
Sebastian Dröge 4cb1bcf142 vmncdec: Sanity-check width/height before using it
We will allocate a screen area of width*height*bpp bytes, however this
calculation can easily overflow if too high width or height are given
inside the stream. Nonetheless we would just assume that enough memory
was allocated, try to fill it and overwrite as much memory as wanted.

Also allocate the screen area filled with zeroes to ensure that we start
with full-black and not any random (or not so random) data.

https://scarybeastsecurity.blogspot.gr/2016/11/0day-poc-risky-design-decisions-in.html

Ideally we should just remove this plugin in favour of the one in
gst-libav, which generally seems to be of better code quality.

https://bugzilla.gnome.org/show_bug.cgi?id=774533
2016-11-16 20:41:39 +02:00
..
accurip Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
adpcmdec Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
adpcmenc Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
aiff Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
asfmux Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
audiobuffer Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
audiofxbad Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
audiomixer Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
audiovisualizers Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
autoconvert Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
bayer bayer: fix stride inconsistencies for odd widths 2016-11-01 19:35:47 +02:00
camerabin2 Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
cdxaparse Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
coloreffects Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
compositor Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
dataurisrc Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
dccp Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
debugutils Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
dvbsuboverlay dvbsuboverlay: map with READWRITE for overlay blend 2016-09-14 10:55:09 +02:00
dvdspu Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
faceoverlay Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
festival Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
fieldanalysis Explicitly define float constants as float 2016-10-27 23:06:26 +05:30
freeverb Explicitly define float constants as float 2016-10-27 23:06:26 +05:30
frei0r Fix some MSVC warnings about const-ness 2016-11-15 14:53:49 +02:00
games Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
gaudieffects Explicitly define float constants as float 2016-10-27 23:06:26 +05:30
gdp Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
geometrictransform Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
hdvparse Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
id3tag Fix some MSVC warnings about const-ness 2016-11-15 14:53:49 +02:00
inter Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
interlace Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
ivfparse Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
ivtc Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
jp2kdecimator Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
jpegformat Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
librfb Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
midi Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
mixmatrix Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
mpegdemux Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
mpegpsmux Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
mpegtsdemux mpegtsdemux: fix operator precedence in SAFE_FOURCC_ARGS 2016-11-12 10:53:02 +02:00
mpegtsmux mpegtsmux: fix buffer size mismatch in M2TS mode 2016-10-17 12:32:58 +01:00
mve Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
mxf Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
netsim bad: use new gst_element_class_add_static_pad_template() 2016-03-24 14:56:51 +02:00
nuvdemux Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
onvif rtponviftimestamp: Change default value of D-bit 2016-09-19 11:24:47 -04:00
overlay Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
patchdetect Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
pcapparse Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
pnm Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
rawparse rawparse: pass flow returns upstream 2016-10-29 11:31:28 +01:00
removesilence Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
rtjpeg Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
sdi Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
sdp Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
segmentclip meson: Add missing gstvideo dep to segmentclip 2016-10-18 13:01:04 +05:30
siren Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
smooth Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
speed Explicitly define float constants as float 2016-10-27 23:06:26 +05:30
stereo Explicitly define float constants as float 2016-10-27 23:06:26 +05:30
subenc Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
timecode hls, timecode: fix linking 2016-08-07 16:45:25 +01:00
tta Use the new API to post flow ERROR messages on the bus 2016-08-26 19:23:31 -03:00
vbidec Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
videofilters Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
videoframe_audiolevel Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
videomeasure Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
videoparsers plugins: Use explicit type conversion from enums 2016-10-27 23:06:26 +05:30
videosignal Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
vmnc vmncdec: Sanity-check width/height before using it 2016-11-16 20:41:39 +02:00
y4m Add support for Meson as alternative/parallel build system 2016-08-20 11:35:54 +01:00
yadif gst: Fix more mentions of interlaced-mode to say interlace-mode 2016-11-04 16:26:50 +02:00
Makefile.am build: build plugins and examples in parallel where possible, if make -jN is used 2010-03-30 01:17:15 +01:00
meson.build real: Remove empty directory 2016-11-16 16:33:41 +02:00