Re: [FFmpeg-devel] [PATCH] avformat/demux: Fix segfault due to avcodec_open2 failure (v2)

From: Michael Niedermayer <michael@niedermayer.cc>
To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Subject: Re: [FFmpeg-devel] [PATCH] avformat/demux: Fix segfault due to avcodec_open2 failure (v2)
Date: Wed, 11 Jun 2025 17:51:06 +0200
Message-ID: <20250611155106.GY29660@pb2> (raw)
In-Reply-To: <CAJgjuow+1GumirVhceE_ckr=Wk6nKZUO00zDKr019V7LHeJy0w@mail.gmail.com>

[-- Attachment #1.1: Type: text/plain, Size: 1103 bytes --]

Hi Pavel

On Tue, Jun 10, 2025 at 05:36:14PM -0600, Pavel Koshevoy wrote:
> On Tue, Jun 10, 2025 at 4:11 PM Michael Niedermayer <michael@niedermayer.cc>
> wrote:
> 
> > Hi Pavel
> >
> > On Tue, Jun 10, 2025 at 11:27:37AM -0600, Pavel Koshevoy wrote:
> > > On Tue, Jun 10, 2025 at 9:29 AM Michael Niedermayer <
> > michael@niedermayer.cc>
> > [...]
> >
> > > I have never had any intention of introducing a
> > > security vulnerability.
> >
> > do you agree that the patch should be reverted ?
> > (and also the 2 backports of it)
> >
> 
> No, since I already provided a fix

To clarify, iam not against your fix, (if its reviewed)
my concern is that this fix is not sufficent to add support
for changing codec_id and codec_type at random points mid stream

[...]

> >
> > PS: The researcher also wants a CVE# for this issue.
> >
> 
> IDK what this means.

More eyes looking at this

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The worst form of inequality is to try to make unequal things equal.
-- Aristotle

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".