gstreamer/gst-libs/gst
Sebastian Dröge ffa4d84e54 h2645parser: Catch overflows in AVC/HEVC NAL unit length calculations
Offset and size are stored as 32 bit guint and might overflow when
adding the nal_length_size, so let's avoid that.

For the size this would happen if the AVC/HEVC NAL unit size happens to
be stored in 4 bytes and is 4294967292 or higher, which is likely
corrupted data anyway.

For the offset this is something for the caller of these functions to
take care of but is unlikely to happen as it would require parsing on a
>4GB buffer.

Allowing these overflows causes all kinds of follow-up bugs in the
h2645parse elements, ranging from infinite loops and memory leaks to
potential memory corruptions.

Part-of: <https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/2103>
2021-03-24 09:22:48 +00:00
..
adaptivedemux gst: don't use volatile to mean atomic 2021-03-22 14:34:36 +11:00
audio gst: don't use volatile to mean atomic 2021-03-22 14:34:36 +11:00
basecamerabinsrc basecamerabinsrc: silence g-ir-scanner warnings 2020-07-29 15:08:48 +00:00
codecparsers h2645parser: Catch overflows in AVC/HEVC NAL unit length calculations 2021-03-24 09:22:48 +00:00
codecs codecs: AV1decoder: Add the AV1 decoder base class. 2021-02-23 13:50:51 +08:00
d3d11 gst: don't use volatile to mean atomic 2021-03-22 14:34:36 +11:00
insertbin Meson: Use pkg-config generator 2020-10-23 11:14:18 -04:00
interfaces Meson: Use pkg-config generator 2020-10-23 11:14:18 -04:00
isoff Remove autotools build system 2019-10-14 13:54:27 +01:00
mpegts mpegts: Add support for SIT sections 2020-12-14 16:37:29 +01:00
opencv meson: allow the user to disable opencv 2020-08-26 18:19:22 +00:00
play player: Rewrite as GstPlay wrapper 2021-03-09 18:03:48 +00:00
player player: Rewrite as GstPlay wrapper 2021-03-09 18:03:48 +00:00
sctp gst: don't use volatile to mean atomic 2021-03-22 14:34:36 +11:00
transcoder transcoder: Add state-changed signal 2021-03-10 17:13:57 +00:00
uridownloader remove various useless linefeed in logs 2019-12-11 10:51:29 +01:00
vulkan gst: don't use volatile to mean atomic 2021-03-22 14:34:36 +11:00
wayland gst-libs/gst/wayland: Install "unstable" wayland header 2020-12-03 14:54:47 +00:00
webrtc webrtc: expose transport property on sender and receiver 2021-01-13 19:22:42 +00:00
gettext.h Fix FSF address 2012-11-04 00:09:59 +00:00
glib-compat-private.h Update GLib dependency to 2.40.0 2015-10-02 22:24:19 +03:00
gst-i18n-plugin.h Fix FSF address 2012-11-04 00:09:59 +00:00
meson.build play: Introducing the new playback library 2021-03-09 18:03:48 +00:00