From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <ffmpeg-devel-bounces@ffmpeg.org> Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 401324D12F for <ffmpegdev@gitmailbox.com>; Wed, 16 Apr 2025 05:48:21 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 4D4B9687D9C; Wed, 16 Apr 2025 08:48:16 +0300 (EEST) Received: from mail-lf1-f47.google.com (mail-lf1-f47.google.com [209.85.167.47]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 3D477680267 for <ffmpeg-devel@ffmpeg.org>; Wed, 16 Apr 2025 08:48:10 +0300 (EEST) Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-549b116321aso7474944e87.3 for <ffmpeg-devel@ffmpeg.org>; Tue, 15 Apr 2025 22:48:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1744782488; x=1745387288; darn=ffmpeg.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=mg10YFTNok6R/b2MWxJVE1q5URI1em2Sw/PwxaAg+c8=; b=BhE3edd1nr8y8jdTwpoKzByXGwL7rpdeVCdK5vA9+SKMrqcmAz10TDsMIVkjqbXJui r0Ooasx6jJ7+onaetIBn3ZbQBjOb3im2MKLEUIC5lRHprMqxxn+9nfKpN8ykMosuczJY qA1t4TQQ4N0btHngls9IlyZi3ifnJJwDR2V49jOMDAJVF8HBzFqzA4IpC/8n1xkZj4Hh tS6Kkv8SvthgxTvzVkOH0vnfsMovk+uEsbPTzorSxaG10x/RpCOunVlUD98/gcs9+gNy FAv5eeq6z6y7VvrFBe36E6clbK/YTzOLeoaQU040ikYLiOtMJiXugacC4Qi41gnZxtLY n29Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744782488; x=1745387288; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=mg10YFTNok6R/b2MWxJVE1q5URI1em2Sw/PwxaAg+c8=; b=Imu+roJDKbiMRRACjOz9MNBZHuImhQWNZNYsiEzUNnbcBz1cGJHv3s5av3X0rnZHug 2TdMZx6LS4zmSu4vJ7YPsAgVx+IAggLrbtCewZnAhARaTxWfrlUGvHrO9k2iD6wJ9wyc lIBIuNN0DbDA/GjsrHlsWLqjoIfy3iDGP+sUpGY6vVWJmGtbDE1UDCxZioMgj5UBk0hh 9F9bagnaTL+OUrSLR9oflnJ7FPeu1FqK82J3EA0diRvMlfIFxtrPsRskkgmR78tyd2jl qt46TwUtlfI0i5DY/b36q3aWWP7F7vUbhUQOLh8xRiIHFYD2T26q7uRl8q2/57gb99YK uZIw== X-Gm-Message-State: AOJu0Yz7f43kjTzFpBlqfmeSfjdSwg5VTUXRrSXbTXtnPwgzLQ8274hq XCq0nRn+qtXMxLIQnN+90yB8iAPYAYfdaO6oOpKmu3yGpuOeC6KU8GIeiWOvMAV3sCHr+JFxEt9 Yc+TtI/kXsXSxfdsMcOYaxb78hIZJcb95+Hx5OA== X-Gm-Gg: ASbGncsb3znpPPWwM7Vkfz4mRpIoGxGVUNbYBDUnSsCu0zQZiVBYXkfZwVKzqGQ1QfE 6nOurChxRi9kGNmC1B7ZwEWDq/w70lqCMqPnMQjAgqCYaPBqkvPg9AMcl5xO61Z+QnARWJxh80E kJHKZ8gG9aVc8NpilZ8hMR1O5ytZaRuKShaU79d/xStBz5WOdrxvl8 X-Google-Smtp-Source: AGHT+IFCMPOIvbUZWsi758/swVkzTZ03JFXUOSsAy8H5AzcEjKx/TbBB/95C3ueRlKFHbnwK52smapr9iHslXNIwA3Y= X-Received: by 2002:a05:6512:401b:b0:549:91df:fa49 with SMTP id 2adb3069b0e04-54d64a7b5c5mr122764e87.5.1744782488404; Tue, 15 Apr 2025 22:48:08 -0700 (PDT) MIME-Version: 1.0 References: <20250411074808.33274-1-xiaohuanshu@gmail.com> <20250415233254.GX4991@pb2> In-Reply-To: <20250415233254.GX4991@pb2> From: jing yan <xiaohuanshu@gmail.com> Date: Wed, 16 Apr 2025 13:47:56 +0800 X-Gm-Features: ATxdqUF-Zg4edgW2h8Lchx5JViPNeTUdgXqaWk4C7EJluk0I9zhTBdVv6g0SJS0 Message-ID: <CAB2PkDeJRHdx2tViOkutH9xsPag8gkb9OBPpiyNEN2XpMHXCCQ@mail.gmail.com> To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org> X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [FFmpeg-devel] [PATCH] libavformat/dashdec: Fix buffer overflow in segment URL resolution X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches <ffmpeg-devel.ffmpeg.org> List-Unsubscribe: <https://ffmpeg.org/mailman/options/ffmpeg-devel>, <mailto:ffmpeg-devel-request@ffmpeg.org?subject=unsubscribe> List-Archive: <https://ffmpeg.org/pipermail/ffmpeg-devel> List-Post: <mailto:ffmpeg-devel@ffmpeg.org> List-Help: <mailto:ffmpeg-devel-request@ffmpeg.org?subject=help> List-Subscribe: <https://ffmpeg.org/mailman/listinfo/ffmpeg-devel>, <mailto:ffmpeg-devel-request@ffmpeg.org?subject=subscribe> Reply-To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" <ffmpeg-devel-bounces@ffmpeg.org> Archived-At: <https://master.gitmailbox.com/ffmpegdev/CAB2PkDeJRHdx2tViOkutH9xsPag8gkb9OBPpiyNEN2XpMHXCCQ@mail.gmail.com/> List-Archive: <https://master.gitmailbox.com/ffmpegdev/> List-Post: <mailto:ffmpegdev@gitmailbox.com> VGhhbmtzIGZvciB0aGUgcmV2aWV3IQp0aGF0IGNhbid0IGJlIG51bGwgYW5kIEkgZm91bmQgYW5v dGhlciBtaXN0YWtlLgpJIHdpbGwgZml4IHRoaXMgaXNzdWUgYW5kIHNlbmQgYSB2MiBwYXRjaCBz b29uLgoKTWljaGFlbCBOaWVkZXJtYXllciA8bWljaGFlbEBuaWVkZXJtYXllci5jYz4g5LqOMjAy NeW5tDTmnIgxNuaXpeWRqOS4iSAwNzozM+WGmemBk++8mgoKPiBIaQo+Cj4gT24gRnJpLCBBcHIg MTEsIDIwMjUgYXQgMDM6NDg6MDhQTSArMDgwMCwgeGlhb2h1YW5zaHVAZ21haWwuY29tIHdyb3Rl Ogo+ID4gRnJvbTogeGlhb2h1YW5zaHUgPHhpYW9odWFuc2h1QGdtYWlsLmNvbT4KPiA+Cj4gPiBQ cm9ibGVtOgo+ID4gVGhlIG1heF91cmxfc2l6ZSBjYWxjdWxhdGlvbiBmb3IgREFTSCBzZWdtZW50 IFVSTHMgb25seSBjb25zaWRlcmVkIHRoZQo+IGJhc2UgVVJMCj4gPiBsZW5ndGgsIGxlYWRpbmcg dG8gYnVmZmVyIG92ZXJmbG93IHdoZW4gdGhlIHNlZ21lbnQncyBzb3VyY2VVUkwgZXhjZWVkZWQK PiB0aGUKPiA+IHByZS1hbGxvY2F0ZWQgYnVmZmVyLiBUaGlzIHRyaWdnZXJlZCB0aGUgbG9nIGVy cm9yOgo+ID4gIkRBU0ggcmVxdWVzdCBmb3IgdXJsICdpbnZhbGlkOnRydW5jYXRlZCciLgo+ID4K PiA+IFJlcHJvZHVjZToKPiA+IDEuIEEgdGVzdCBzYW1wbGUgImxvbmctc291cmNldXJsLXNhbXBs ZS5tcGQiIChkZWxpYmVyYXRlbHkgZGVzaWduZWQgd2l0aAo+IGEgbG9uZwo+ID4gICAgc291cmNl VVJMKSB3YXMgdXBsb2FkZWQgdG8gVmlkZW9MQU4ncyByZXBvc2l0b3J5Lgo+ID4gMi4gUmVwcm9k dWNlIHdpdGggc2hvcnQgYmFzZSBwYXRoOgo+ID4gICAgZmZtcGVnIC1pIC90bXAvc2hvcnRfcGF0 aC9sb25nLXNvdXJjZXVybC1zYW1wbGUubXBkCj4gPiAgICAtPiBUcmlnZ2VycyAiaW52YWxpZDp0 cnVuY2F0ZWQiIGVycm9yCj4gPiAzLiBXaXRoIGFydGlmaWNpYWxseSBsZW5ndGhlbmVkIGJhc2Ug cGF0aCAoZS5nLiAvYWFhLy4uL2JiYi8uLi8uLi4pOgo+ID4gICAgZmZtcGVnIC1pCj4gL2xvbmcv Li4vcGF0aC8uLi93aXRoLy4uL21hbnkvLi4vc2VnbWVudHMvbG9uZy1zb3VyY2V1cmwtc2FtcGxl Lm1wZAo+ID4gICAgLT4gVVJMIHJlc29sdmVzIGNvcnJlY3RseSAodGhvdWdoIEhUVFAgZmV0Y2gg ZmFpbHMgZHVlIHRvIGZha2UgVVJMKQo+ID4KPiA+IEZpeDoKPiA+IFJlY2FsY3VsYXRlIG1heF91 cmxfc2l6ZSBieSBjb25zaWRlcmluZyBib3RoIGJhc2UgVVJMIGFuZCBzb3VyY2VVUkwKPiBsZW5n dGhzLAo+ID4gZW5zdXJpbmcgc3VmZmljaWVudCBidWZmZXIgYWxsb2NhdGlvbiBkdXJpbmcgVVJM IGNvbmNhdGVuYXRpb24uCj4gPgo+ID4gU2lnbmVkLW9mZi1ieTogeGlhb2h1YW5zaHUgPHhpYW9o dWFuc2h1QGdtYWlsLmNvbT4KPiA+IC0tLQo+ID4gIGxpYmF2Zm9ybWF0L2Rhc2hkZWMuYyB8IDE0 ICsrKysrKysrKysrKystCj4gPiAgMSBmaWxlIGNoYW5nZWQsIDEzIGluc2VydGlvbnMoKyksIDEg ZGVsZXRpb24oLSkKPiA+Cj4gPiBkaWZmIC0tZ2l0IGEvbGliYXZmb3JtYXQvZGFzaGRlYy5jIGIv bGliYXZmb3JtYXQvZGFzaGRlYy5jCj4gPiBpbmRleCBjM2YzZDdmM2Y4Li5mNjA0ZDM2M2M0IDEw MDY0NAo+ID4gLS0tIGEvbGliYXZmb3JtYXQvZGFzaGRlYy5jCj4gPiArKysgYi9saWJhdmZvcm1h dC9kYXNoZGVjLmMKPiA+IEBAIC02MDYsNyArNjA2LDcgQEAgc3RhdGljIGludAo+IHBhcnNlX21h bmlmZXN0X3NlZ21lbnR1cmxub2RlKEFWRm9ybWF0Q29udGV4dCAqcywgc3RydWN0IHJlcHJlc2Vu dGF0aQo+ID4gICAgICBjaGFyICppbml0aWFsaXphdGlvbl92YWwgPSBOVUxMOwo+ID4gICAgICBj aGFyICptZWRpYV92YWwgPSBOVUxMOwo+ID4gICAgICBjaGFyICpyYW5nZV92YWwgPSBOVUxMOwo+ ID4gLSAgICBpbnQgbWF4X3VybF9zaXplID0gYyA/IGMtPm1heF91cmxfc2l6ZTogTUFYX1VSTF9T SVpFOwo+ID4gKyAgICBpbnQgbWF4X3VybF9zaXplID0gMDsKPiA+ICAgICAgaW50IGVycjsKPiA+ Cj4gPiAgICAgIGlmICghYXZfc3RyY2FzZWNtcChmcmFnbWVudHVybF9ub2RlLT5uYW1lLCAiSW5p dGlhbGl6YXRpb24iKSkgewo+ID4gQEAgLTYyMCw2ICs2MjAsMTIgQEAgc3RhdGljIGludAo+IHBh cnNlX21hbmlmZXN0X3NlZ21lbnR1cmxub2RlKEFWRm9ybWF0Q29udGV4dCAqcywgc3RydWN0IHJl cHJlc2VudGF0aQo+ID4gICAgICAgICAgICAgICAgICB4bWxGcmVlKGluaXRpYWxpemF0aW9uX3Zh bCk7Cj4gPiAgICAgICAgICAgICAgICAgIHJldHVybiBBVkVSUk9SKEVOT01FTSk7Cj4gPiAgICAg ICAgICAgICAgfQo+ID4gKyAgICAgICAgICAgIG1heF91cmxfc2l6ZSA9IEZGTUFYKAo+Cj4gPiAr ICAgICAgICAgICAgICAgIGMgPyBjLT5tYXhfdXJsX3NpemUgOiAwLAo+Cj4gaG93IGNhbiBjIGJl IE5VTEwgaGVyZSA/Cj4KPgo+ID4gKyAgICAgICAgICAgICAgICBpbml0aWFsaXphdGlvbl92YWwg PyBhbGlnbmVkKHN0cmxlbihpbml0aWFsaXphdGlvbl92YWwpCj4gKwo+ID4gKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIChyZXBfaWRfdmFsID8KPiBzdHJsZW4o cmVwX2lkX3ZhbCkgOiAwKSArCj4gPiArICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgKHJlcF9iYW5kd2lkdGhfdmFsID8KPiBzdHJsZW4ocmVwX2JhbmR3aWR0aF92 YWwpIDogMCkpIDogMCk7Cj4gPiArICAgICAgICAgICAgbWF4X3VybF9zaXplID0gbWF4X3VybF9z aXplID8gbWF4X3VybF9zaXplIDogTUFYX1VSTF9TSVpFOwo+ID4gICAgICAgICAgICAgIHJlcC0+ aW5pdF9zZWN0aW9uLT51cmwgPSBnZXRfY29udGVudF91cmwoYmFzZXVybF9ub2RlcywgNCwKPiA+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1h eF91cmxfc2l6ZSwKPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHJlcF9pZF92YWwsCj4gPiBAQCAtNjQxLDYgKzY0NywxMiBAQCBzdGF0aWMg aW50Cj4gcGFyc2VfbWFuaWZlc3Rfc2VnbWVudHVybG5vZGUoQVZGb3JtYXRDb250ZXh0ICpzLCBz dHJ1Y3QgcmVwcmVzZW50YXRpCj4gPiAgICAgICAgICAgICAgICAgIHhtbEZyZWUobWVkaWFfdmFs KTsKPiA+ICAgICAgICAgICAgICAgICAgcmV0dXJuIEFWRVJST1IoRU5PTUVNKTsKPiA+ICAgICAg ICAgICAgICB9Cj4gPiArICAgICAgICAgICAgbWF4X3VybF9zaXplID0gRkZNQVgoCj4gPiArICAg ICAgICAgICAgICAgIGMgPyBjLT5tYXhfdXJsX3NpemUgOiAwLAo+Cj4gPiArICAgICAgICAgICAg ICAgIGluaXRpYWxpemF0aW9uX3ZhbCA/IGFsaWduZWQoc3RybGVuKGluaXRpYWxpemF0aW9uX3Zh bCkKPiArCj4KPiBob3cgY2FuIGluaXRpYWxpemF0aW9uX3ZhbCBiZSBub24gTlVMTCBoZXJlID8K Pgo+IHRoeAo+Cj4gWy4uLl0KPgo+IC0tCj4gTWljaGFlbCAgICAgR251UEcgZmluZ2VycHJpbnQ6 IDlGRjIxMjhCMTQ3RUY2NzMwQkFERjEzMzYxMUVDNzg3MDQwQjBGQUIKPgo+IEkgaGF2ZSBvZnRl biByZXBlbnRlZCBzcGVha2luZywgYnV0IG5ldmVyIG9mIGhvbGRpbmcgbXkgdG9uZ3VlLgo+IC0t IFhlbm9jcmF0ZXMKPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwo+IGZmbXBlZy1kZXZlbCBtYWlsaW5nIGxpc3QKPiBmZm1wZWctZGV2ZWxAZmZtcGVnLm9y Zwo+IGh0dHBzOi8vZmZtcGVnLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZmbXBlZy1kZXZlbAo+Cj4g VG8gdW5zdWJzY3JpYmUsIHZpc2l0IGxpbmsgYWJvdmUsIG9yIGVtYWlsCj4gZmZtcGVnLWRldmVs LXJlcXVlc3RAZmZtcGVnLm9yZyB3aXRoIHN1YmplY3QgInVuc3Vic2NyaWJlIi4KPgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpmZm1wZWctZGV2ZWwgbWFp bGluZyBsaXN0CmZmbXBlZy1kZXZlbEBmZm1wZWcub3JnCmh0dHBzOi8vZmZtcGVnLm9yZy9tYWls bWFuL2xpc3RpbmZvL2ZmbXBlZy1kZXZlbAoKVG8gdW5zdWJzY3JpYmUsIHZpc2l0IGxpbmsgYWJv dmUsIG9yIGVtYWlsCmZmbXBlZy1kZXZlbC1yZXF1ZXN0QGZmbXBlZy5vcmcgd2l0aCBzdWJqZWN0 ICJ1bnN1YnNjcmliZSIuCg==