From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 7036A4CD6B for ; Wed, 14 May 2025 09:17:46 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 24D0968C044; Wed, 14 May 2025 12:17:43 +0300 (EEST) Received: from mail-lj1-f179.google.com (mail-lj1-f179.google.com [209.85.208.179]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id A0F9E68BF9F for ; Wed, 14 May 2025 12:17:36 +0300 (EEST) Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-326bb1d3e34so58203291fa.3 for ; Wed, 14 May 2025 02:17:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1747214255; x=1747819055; darn=ffmpeg.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=2AwZqXUo537VQ+qOB1xUMlfwbVG1Tw5kgKm0om3LtT4=; b=XS+v2brzBWqqLi0ecimEqlvZaAOvZ5bRjrkdGFWjSRbBMcJ1PEDQGJuZfmWsGKTKMC 29eg2o4NwChWUilHDHosAFVkyqYQyXNQQKrrgECGapNt56wbWF63YniDLi/t0Dcp4wTF ojR2QuE8AqEziFI28ulPGwG7rWt0woxDxffLp/atWL8Kz89o8I+vtyz4oXHdJEzIyBBP 62qluOjreRMKymag9QrJv5mefKWQH6G31fgvfSa3yd7jmkg2Ul2gkQsLxsZPezYShrGD a6GizuTCPQeDwHVxrydw7HXN53OtIvA9dEVE41kD7Mmtndam+sydRIa0Azckt1ZwAgsO aajg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747214255; x=1747819055; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=2AwZqXUo537VQ+qOB1xUMlfwbVG1Tw5kgKm0om3LtT4=; b=p8W8nO4fbyYV+b+b1RN8HZbj1QI47+SxEc+QMMj+GwyMyVdAco3HRDhqY1CEmAUppA Aput9Wu9U2o99d519fIWe987MaizAjQBkjr0SDhL8748l1Z2gUBwDxk1XN4D8DzoC1KB P50eq4WvNJh/6azzgj8hD84+34nIi2pcyH5Ey61X0HVsEIGB09XabSL7y8M+0Jx2XaPi xsdLhYUNBwKDsQLFi0cHdNXonDiCjCVaKUZcQsyFKQ5aXQhvsIV2+/+pqUfhf2l0gP9b SoD3FKLKHT+kMtqrs56H9RNUb8hpE/0X2S3AgcEA3AufgNai9fRu3KD3FyC4Qbf2O3W6 S/Zw== X-Gm-Message-State: AOJu0YzwUYDHsIRjuv6gszzngvmIf4D8qUocch80An8hdezyEMloRdyn /1vEZIXvhcwjEY2X5faIG5fQtP+s1Lx9SVhfIAImQd0CDq2HiLSHXh0+XT2ZNuwb66JOd5ozqqT 8ZdOUgHp3rJINWRBNPga8pfCEOkmR3ryXHYE= X-Gm-Gg: ASbGnctjpZs/h35NINFrRn65bniZmwZHQLPPRccpAGVpzIr5OypNlnUv/sjrOwiNTwp tfu47neM3OFv/ZX4tUb1KAXF4tVEIDuwbDVWGU7wkJ9hl3/maoxXRoKfk7RJzIvaFJ3nD3odzyH m2xb5VspgZGURyKkp4BYP89F206rqboSnn5Q== X-Google-Smtp-Source: AGHT+IErHnolf9aW2688tht+ESycF2GRYspoa8STTSla/EdYiS+CuowbWHghhja4ILEadrJDhyR3A6IuXJLGEVHgB/k= X-Received: by 2002:a05:651c:2104:b0:30c:c8d:ba3c with SMTP id 38308e7fff4ca-327ed11b40cmr10888181fa.17.1747214255217; Wed, 14 May 2025 02:17:35 -0700 (PDT) MIME-Version: 1.0 References: <20250411074808.33274-1-xiaohuanshu@gmail.com> <20250416065612.95947-1-xiaohuanshu@gmail.com> In-Reply-To: <20250416065612.95947-1-xiaohuanshu@gmail.com> From: jing yan Date: Wed, 14 May 2025 17:17:23 +0800 X-Gm-Features: AX0GCFtmu7HhGGfYo7QppC0vIVUpeLiWobTEvH1G3z50dtDpHjSPszTDgT6xiM4 Message-ID: To: ffmpeg-devel@ffmpeg.org X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [FFmpeg-devel] [PATCH v3] libavformat/dashdec: Fix buffer overflow in segment URL resolution X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: SGksIGp1c3QgYSBnZW50bGUgcGluZyBvbiB0aGlzIHBhdGNoLgoKTGV0IG1lIGtub3cgaWYgYW55 dGhpbmcgZWxzZSBpcyBuZWVkZWQuCgoKVGhhbmtzIQoKPHhpYW9odWFuc2h1QGdtYWlsLmNvbT4g 5LqOMjAyNeW5tDTmnIgxNuaXpeWRqOS4iSAxNDo1NuWGmemBk++8mgoKPiBGcm9tOiB4aWFvaHVh bnNodSA8eGlhb2h1YW5zaHVAZ21haWwuY29tPgo+Cj4gUHJvYmxlbToKPiBUaGUgbWF4X3VybF9z aXplIGNhbGN1bGF0aW9uIGZvciBEQVNIIHNlZ21lbnQgVVJMcyBvbmx5IGNvbnNpZGVyZWQgdGhl Cj4gYmFzZSBVUkwKPiBsZW5ndGgsIGxlYWRpbmcgdG8gYnVmZmVyIG92ZXJmbG93IHdoZW4gdGhl IHNlZ21lbnQncyBzb3VyY2VVUkwgZXhjZWVkZWQKPiB0aGUKPiBwcmUtYWxsb2NhdGVkIGJ1ZmZl ci4gVGhpcyB0cmlnZ2VyZWQgdGhlIGxvZyBlcnJvcjoKPiAiREFTSCByZXF1ZXN0IGZvciB1cmwg J2ludmFsaWQ6dHJ1bmNhdGVkJyIuCj4KPiBSZXByb2R1Y2U6Cj4gMS4gQSB0ZXN0IHNhbXBsZSAi bG9uZy1zb3VyY2V1cmwtc2FtcGxlLm1wZCIgKGRlbGliZXJhdGVseSBkZXNpZ25lZCB3aXRoIGEK PiBsb25nCj4gICAgc291cmNlVVJMKSB3YXMgdXBsb2FkZWQgdG8gVmlkZW9MQU4ncyByZXBvc2l0 b3J5Lgo+IDIuIFJlcHJvZHVjZSB3aXRoIHNob3J0IGJhc2UgcGF0aDoKPiAgICBmZm1wZWcgLWkg L3RtcC9zaG9ydF9wYXRoL2xvbmctc291cmNldXJsLXNhbXBsZS5tcGQKPiAgICAtPiBUcmlnZ2Vy cyAiaW52YWxpZDp0cnVuY2F0ZWQiIGVycm9yCj4gMy4gV2l0aCBhcnRpZmljaWFsbHkgbGVuZ3Ro ZW5lZCBiYXNlIHBhdGggKGUuZy4gL2FhYS8uLi9iYmIvLi4vLi4uKToKPiAgICBmZm1wZWcgLWkK PiAvbG9uZy8uLi9wYXRoLy4uL3dpdGgvLi4vbWFueS8uLi9zZWdtZW50cy9sb25nLXNvdXJjZXVy bC1zYW1wbGUubXBkCj4gICAgLT4gVVJMIHJlc29sdmVzIGNvcnJlY3RseSAodGhvdWdoIEhUVFAg ZmV0Y2ggZmFpbHMgZHVlIHRvIGZha2UgVVJMKQo+Cj4gRml4Ogo+IFJlY2FsY3VsYXRlIG1heF91 cmxfc2l6ZSBieSBjb25zaWRlcmluZyBib3RoIGJhc2UgVVJMIGFuZCBzb3VyY2VVUkwKPiBsZW5n dGhzLAo+IGVuc3VyaW5nIHN1ZmZpY2llbnQgYnVmZmVyIGFsbG9jYXRpb24gZHVyaW5nIFVSTCBj b25jYXRlbmF0aW9uLgo+Cj4gVjI6Cj4gMS4gbm8gbmVlZCB0byBkZXRlcm1pbmUgd2hldGhlciBp bml0aWFsaXphdGlvbl92YWwgaXMgbnVsbC4KPiAyLiBmaXggdGhlIGluY29ycmVjdCB2YXJpYWJs ZSBuYW1lLgo+Cj4gVjM6Cj4gMS4gY2hhbmdlIGBtYXhfdXJsX3NpemVgIHNjb3BlIGludG8gYElu aXRpYWxpemF0aW9uYCBhbmQgYE1lZGlhYCBibG9ja3MuCj4KPiBTaWduZWQtb2ZmLWJ5OiB4aWFv aHVhbnNodSA8eGlhb2h1YW5zaHVAZ21haWwuY29tPgo+IC0tLQo+ICBsaWJhdmZvcm1hdC9kYXNo ZGVjLmMgfCAxMiArKysrKysrKysrKy0KPiAgMSBmaWxlIGNoYW5nZWQsIDExIGluc2VydGlvbnMo KyksIDEgZGVsZXRpb24oLSkKPgo+IGRpZmYgLS1naXQgYS9saWJhdmZvcm1hdC9kYXNoZGVjLmMg Yi9saWJhdmZvcm1hdC9kYXNoZGVjLmMKPiBpbmRleCBjM2YzZDdmM2Y4Li4zMWE4NGJkMTg0IDEw MDY0NAo+IC0tLSBhL2xpYmF2Zm9ybWF0L2Rhc2hkZWMuYwo+ICsrKyBiL2xpYmF2Zm9ybWF0L2Rh c2hkZWMuYwo+IEBAIC02MDYsNyArNjA2LDYgQEAgc3RhdGljIGludAo+IHBhcnNlX21hbmlmZXN0 X3NlZ21lbnR1cmxub2RlKEFWRm9ybWF0Q29udGV4dCAqcywgc3RydWN0IHJlcHJlc2VudGF0aQo+ ICAgICAgY2hhciAqaW5pdGlhbGl6YXRpb25fdmFsID0gTlVMTDsKPiAgICAgIGNoYXIgKm1lZGlh X3ZhbCA9IE5VTEw7Cj4gICAgICBjaGFyICpyYW5nZV92YWwgPSBOVUxMOwo+IC0gICAgaW50IG1h eF91cmxfc2l6ZSA9IGMgPyBjLT5tYXhfdXJsX3NpemU6IE1BWF9VUkxfU0laRTsKPiAgICAgIGlu dCBlcnI7Cj4KPiAgICAgIGlmICghYXZfc3RyY2FzZWNtcChmcmFnbWVudHVybF9ub2RlLT5uYW1l LCAiSW5pdGlhbGl6YXRpb24iKSkgewo+IEBAIC02MjAsNiArNjE5LDEyIEBAIHN0YXRpYyBpbnQK PiBwYXJzZV9tYW5pZmVzdF9zZWdtZW50dXJsbm9kZShBVkZvcm1hdENvbnRleHQgKnMsIHN0cnVj dCByZXByZXNlbnRhdGkKPiAgICAgICAgICAgICAgICAgIHhtbEZyZWUoaW5pdGlhbGl6YXRpb25f dmFsKTsKPiAgICAgICAgICAgICAgICAgIHJldHVybiBBVkVSUk9SKEVOT01FTSk7Cj4gICAgICAg ICAgICAgIH0KPiArICAgICAgICAgICAgaW50IG1heF91cmxfc2l6ZSA9IEZGTUFYKAo+ICsgICAg ICAgICAgICAgICAgYyA/IGMtPm1heF91cmxfc2l6ZSA6IDAsCj4gKyAgICAgICAgICAgICAgICBh bGlnbmVkKHN0cmxlbihpbml0aWFsaXphdGlvbl92YWwpICsKPiArICAgICAgICAgICAgICAgICAg ICAgICAgKHJlcF9pZF92YWwgPyBzdHJsZW4ocmVwX2lkX3ZhbCkgOiAwKSArCj4gKyAgICAgICAg ICAgICAgICAgICAgICAgIChyZXBfYmFuZHdpZHRoX3ZhbCA/IHN0cmxlbihyZXBfYmFuZHdpZHRo X3ZhbCkgOgo+IDApKSk7Cj4gKyAgICAgICAgICAgIG1heF91cmxfc2l6ZSA9IG1heF91cmxfc2l6 ZSA/IG1heF91cmxfc2l6ZSA6IE1BWF9VUkxfU0laRTsKPiAgICAgICAgICAgICAgcmVwLT5pbml0 X3NlY3Rpb24tPnVybCA9IGdldF9jb250ZW50X3VybChiYXNldXJsX25vZGVzLCA0LAo+ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1heF91cmxf c2l6ZSwKPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICByZXBfaWRfdmFsLAo+IEBAIC02NDEsNiArNjQ2LDExIEBAIHN0YXRpYyBpbnQKPiBwYXJz ZV9tYW5pZmVzdF9zZWdtZW50dXJsbm9kZShBVkZvcm1hdENvbnRleHQgKnMsIHN0cnVjdCByZXBy ZXNlbnRhdGkKPiAgICAgICAgICAgICAgICAgIHhtbEZyZWUobWVkaWFfdmFsKTsKPiAgICAgICAg ICAgICAgICAgIHJldHVybiBBVkVSUk9SKEVOT01FTSk7Cj4gICAgICAgICAgICAgIH0KPiArICAg ICAgICAgICAgaW50IG1heF91cmxfc2l6ZSA9IEZGTUFYKAo+ICsgICAgICAgICAgICAgICAgYyA/ IGMtPm1heF91cmxfc2l6ZSA6IDAsCj4gKyAgICAgICAgICAgICAgICBhbGlnbmVkKHN0cmxlbiht ZWRpYV92YWwpICsgKHJlcF9pZF92YWwgPwo+IHN0cmxlbihyZXBfaWRfdmFsKSA6IDApICsKPiAr ICAgICAgICAgICAgICAgICAgICAgICAgKHJlcF9iYW5kd2lkdGhfdmFsID8gc3RybGVuKHJlcF9i YW5kd2lkdGhfdmFsKSA6Cj4gMCkpKTsKPiArICAgICAgICAgICAgbWF4X3VybF9zaXplID0gbWF4 X3VybF9zaXplID8gbWF4X3VybF9zaXplIDogTUFYX1VSTF9TSVpFOwo+ICAgICAgICAgICAgICBz ZWctPnVybCA9IGdldF9jb250ZW50X3VybChiYXNldXJsX25vZGVzLCA0LAo+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtYXhfdXJsX3NpemUsCj4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHJlcF9pZF92YWwsCj4gLS0KPiAyLjM5LjUgKEFw cGxlIEdpdC0xNTQpCj4KPgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpmZm1wZWctZGV2ZWwgbWFpbGluZyBsaXN0CmZmbXBlZy1kZXZlbEBmZm1wZWcub3Jn Cmh0dHBzOi8vZmZtcGVnLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZmbXBlZy1kZXZlbAoKVG8gdW5z dWJzY3JpYmUsIHZpc2l0IGxpbmsgYWJvdmUsIG9yIGVtYWlsCmZmbXBlZy1kZXZlbC1yZXF1ZXN0 QGZmbXBlZy5vcmcgd2l0aCBzdWJqZWN0ICJ1bnN1YnNjcmliZSIuCg==