gstreamer/subprojects/gst-plugins-bad/gst-libs/gst
Nicolas Dufresne fddda16622 h265parser: Fix possible overflow using max_sub_layers_minus1
This fixes a possible overflow that can be triggered by an invalid value of
max_sub_layers_minus1 being set in the bitstream. The bitstream uses 3 bits,
but the allowed range is 0 to 6 only.

Fixes ZDI-CAN-21768, CVE-2023-40476

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2895

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5366>
2023-09-20 11:19:06 +01:00
..
adaptivedemux adaptivedemux: Minor typo fix 2022-10-27 19:45:44 +00:00
audio badaudio: Add/fix annotations 2022-10-18 13:51:16 +03:00
basecamerabinsrc docs: fix unnecessary ampersand, < and > escaping in code blocks 2021-11-12 11:39:19 +00:00
codecparsers h265parser: Fix possible overflow using max_sub_layers_minus1 2023-09-20 11:19:06 +01:00
codecs h264decoder: Update latency dynamically 2023-09-19 09:55:47 +00:00
cuda cudamemory: Fix for semi planar YUV memory size decision 2023-04-28 18:52:48 +09:00
d3d11 d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool 2023-07-11 23:23:12 +00:00
insertbin meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
interfaces meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
isoff gst-plugins-bad: define G_LOG_DOMAIN for all libraries 2021-10-19 00:12:25 +00:00
mpegts mpegts: Handle when iconv doesn't support ISO 6937 2022-12-12 10:17:26 +00:00
opencv meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
play gstplay: fix critical log when enable playbin3 2023-05-18 13:18:05 +01:00
player meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
sctp meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
transcoder transcoder: Don't leak API bus and GMainLoop 2022-11-12 10:33:51 +01:00
uridownloader meson: Namespace the plugins_doc_dep/libraries variables 2022-09-01 21:17:35 +00:00
va vaallocator: Check return value from va_sync_surface 2023-02-22 00:19:45 +00:00
vulkan vkmemory: flush whole size 2023-03-30 19:08:09 +01:00
wayland waylandsink: Fix cropping for video with non-square aspect ratio 2023-09-20 01:32:29 +01:00
webrtc Revert "webrtc/nice: support consent-freshness RFC7675" 2023-05-17 07:53:16 +00:00
winrt gst-plugins-bad: define G_LOG_DOMAIN for all libraries 2021-10-19 00:12:25 +00:00
glib-compat-private.h Move files from gst-plugins-bad into the "subprojects/gst-plugins-bad/" subdir 2021-09-24 16:14:36 -03:00
meson.build cuda: Factor out a public GstCUDA library 2022-04-19 16:39:43 +00:00