From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ffmpeg-devel-bounces@ffmpeg.org>
Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100])
	by master.gitmailbox.com (Postfix) with ESMTPS id F3E4D4C5EC
	for <ffmpegdev@gitmailbox.com>; Thu, 23 Jan 2025 21:27:59 +0000 (UTC)
Received: from [127.0.1.1] (localhost [127.0.0.1])
	by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 008F568B7B4;
	Thu, 23 Jan 2025 23:27:55 +0200 (EET)
Received: from relay8-d.mail.gandi.net (relay8-d.mail.gandi.net
 [217.70.183.201])
 by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 1ED1968AE9D
 for <ffmpeg-devel@ffmpeg.org>; Thu, 23 Jan 2025 23:27:49 +0200 (EET)
Received: by mail.gandi.net (Postfix) with ESMTPSA id 4224B1BF203
 for <ffmpeg-devel@ffmpeg.org>; Thu, 23 Jan 2025 21:27:48 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc;
 s=gm1; t=1737667668;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 in-reply-to:in-reply-to:references:references;
 bh=PJpeBQ6PCX36M2aVq+pq+5R840fKKFautEjOmUUTVZ4=;
 b=HuY/AelB/OQDNi0LB+cQBgxRHeBEGP/X2hJCdjm2icqmp7bmhl2Ci8KuGs4Bq9AJJEUups
 S66JVrajEruqKHmc9S37Z6aNAcYApmWvBX0t4OVL8Y1/CjCIegwtqxnQdM7sghbyd8RAT/
 pzm7eiwQNqtBiTlq9B2REFlibZju3399AttXrkpftoEDI+g9TXybHt8mIjdCy2UHacnUdC
 T3JQR+VzcU/Ky6Fb42cmbm143TW8rmqFC4fA1dB/X8GS/gVx1fW6nIZUsoa/owzqW5S/w2
 pZxhObmrtEmjeRs27dccLhhuLNc6F9ArWigxnzM5T2OKAOIAaV+dqrdqNLviRg==
Date: Thu, 23 Jan 2025 22:27:47 +0100
From: Michael Niedermayer <michael@niedermayer.cc>
To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Message-ID: <20250123212747.GB4991@pb2>
References: <20250122203609.1796499-1-michael@niedermayer.cc>
 <20250122203609.1796499-2-michael@niedermayer.cc>
MIME-Version: 1.0
In-Reply-To: <20250122203609.1796499-2-michael@niedermayer.cc>
X-GND-Sasl: michael@niedermayer.cc
Subject: Re: [FFmpeg-devel] [PATCH 2/2] avformat/hls: Be more picky on
 extensions
X-BeenThere: ffmpeg-devel@ffmpeg.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: FFmpeg development discussions and patches <ffmpeg-devel.ffmpeg.org>
List-Unsubscribe: <https://ffmpeg.org/mailman/options/ffmpeg-devel>,
 <mailto:ffmpeg-devel-request@ffmpeg.org?subject=unsubscribe>
List-Archive: <https://ffmpeg.org/pipermail/ffmpeg-devel>
List-Post: <mailto:ffmpeg-devel@ffmpeg.org>
List-Help: <mailto:ffmpeg-devel-request@ffmpeg.org?subject=help>
List-Subscribe: <https://ffmpeg.org/mailman/listinfo/ffmpeg-devel>,
 <mailto:ffmpeg-devel-request@ffmpeg.org?subject=subscribe>
Reply-To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Content-Type: multipart/mixed; boundary="===============8843572168705080119=="
Errors-To: ffmpeg-devel-bounces@ffmpeg.org
Sender: "ffmpeg-devel" <ffmpeg-devel-bounces@ffmpeg.org>
Archived-At: <https://master.gitmailbox.com/ffmpegdev/20250123212747.GB4991@pb2/>
List-Archive: <https://master.gitmailbox.com/ffmpegdev/>
List-Post: <mailto:ffmpegdev@gitmailbox.com>


--===============8843572168705080119==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="4sGwlsaAvlfpdCPF"
Content-Disposition: inline


--4sGwlsaAvlfpdCPF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jan 22, 2025 at 09:36:09PM +0100, Michael Niedermayer wrote:
> This blocks disallowed extensions from probing
> It also requires all available segments to have matching extensions to th=
e format
> mpegts is treated independent of the extension
>=20
> It is recommended to set the whitelists correctly
> instead of depending on extensions, but this should help a bit,
> and this is easier to backport
>=20
> Fixes: CVE-2023-6602 II. HLS Force TTY Demuxer
> Fixes: CVE-2023-6602 IV. HLS XBIN Demuxer DoS Amplification
>=20
> The other parts of CVE-2023-6602 have been fixed by prior commits
>=20
> Found-by: Harvey Phillips of Amazon Element55 (element55)
> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
> ---
>  doc/demuxers.texi |  7 +++++++
>  libavformat/hls.c | 50 +++++++++++++++++++++++++++++++++++++++++++++++
>  2 files changed, 57 insertions(+)

I intend to apply this patchset soon so it receives some testing before 7.1=
=2E1


[...]
--=20
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

When the tyrant has disposed of foreign enemies by conquest or treaty, and
there is nothing more to fear from them, then he is always stirring up
some war or other, in order that the people may require a leader. -- Plato

--4sGwlsaAvlfpdCPF
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCZ5K0UAAKCRBhHseHBAsP
qwoGAJ0dPkSqWMmWICnX1S1PL5/QrE5aPwCfQsL2g7d6r08SCUsjwOdCNw8cKII=
=puqW
-----END PGP SIGNATURE-----

--4sGwlsaAvlfpdCPF--

--===============8843572168705080119==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

--===============8843572168705080119==--