From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 94C30434C0 for ; Mon, 13 Jun 2022 22:40:36 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 40D6168B3D2; Tue, 14 Jun 2022 01:40:33 +0300 (EEST) Received: from relay4-d.mail.gandi.net (relay4-d.mail.gandi.net [217.70.183.196]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 0B03568B3B1 for ; Tue, 14 Jun 2022 01:40:25 +0300 (EEST) Received: from localhost (213-47-68-29.cable.dynamic.surfer.at [213.47.68.29]) (Authenticated sender: michael@niedermayer.cc) by mail.gandi.net (Postfix) with ESMTPSA id 04F67E0003 for ; Mon, 13 Jun 2022 22:40:24 +0000 (UTC) Date: Tue, 14 Jun 2022 00:40:23 +0200 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20220613224023.GJ396728@pb2> References: <20220402220513.1709-1-michael@niedermayer.cc> MIME-Version: 1.0 In-Reply-To: <20220402220513.1709-1-michael@niedermayer.cc> Subject: Re: [FFmpeg-devel] [PATCH 1/2] avformat/ape: more bits in size for less overflows X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============7595978227262082621==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============7595978227262082621== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="sFNR5OHn/l1pSZHT" Content-Disposition: inline --sFNR5OHn/l1pSZHT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Apr 03, 2022 at 12:05:12AM +0200, Michael Niedermayer wrote: > Fixes: signed integer overflow: 2147483647 + 3 cannot be represented in t= ype 'int' > Fixes: 46184/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-4678= 059519770624 >=20 > Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/t= ree/master/projects/ffmpeg > Signed-off-by: Michael Niedermayer > --- > libavformat/ape.c | 9 +++++---- > 1 file changed, 5 insertions(+), 4 deletions(-) will apply patchset [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB If you drop bombs on a foreign country and kill a hundred thousand innocent people, expect your government to call the consequence "unprovoked inhuman terrorist attacks" and use it to justify dropping more bombs and killing more people. The technology changed, the idea is old. --sFNR5OHn/l1pSZHT Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEIAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCYqe81AAKCRBhHseHBAsP q5OhAKCF/hXHY6ZxpR59hn8xh0wcZ+mcvwCfdnp7yZ5ZGcixU+nBroZij/tA0W0= =OrSp -----END PGP SIGNATURE----- --sFNR5OHn/l1pSZHT-- --===============7595978227262082621== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============7595978227262082621==--