From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 7A09E4655B for ; Fri, 16 Feb 2024 21:41:59 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 46C5868D2C4; Fri, 16 Feb 2024 23:41:57 +0200 (EET) Received: from mail-wm1-f43.google.com (mail-wm1-f43.google.com [209.85.128.43]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id BE3DD68CE23 for ; Fri, 16 Feb 2024 23:41:50 +0200 (EET) Received: by mail-wm1-f43.google.com with SMTP id 5b1f17b1804b1-410acf9e776so2505e9.1 for ; Fri, 16 Feb 2024 13:41:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1708119709; x=1708724509; darn=ffmpeg.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=ANBbiJO02zqAaEnQzrU/tMF3Z8gJjRl9VOLYUGZ6WpU=; b=b+W1nuvk4DRXPqWru2Uj47Qaj8VIs/84sNxmuRv919bna6H437fLFNx27wnYlMUlF3 OONy25c399AW9RvzkO5BYkTpGDjt+MMZQshVa46pQVFho3BpKfwgh7yXD+5jJ7GlRE8j GkkohklKkuaLWHwttZbdsgGTqHSYT+Pl8KAVI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1708119709; x=1708724509; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=ANBbiJO02zqAaEnQzrU/tMF3Z8gJjRl9VOLYUGZ6WpU=; b=v7x8YDteV/uUwjWn8ou1o5rBzQCFoSStggEbL7Bboc2ckMHFHST2hx+bXHy53ZlSG6 i0suAhtzVYztpNN1ptKbyBHpyWwKkpMTelNX+sfRiuXX+JdN4heg9lpt2xEA3bimtxBd UcM+I3pnEJt8lRKSFRPclXeJoc4rFZpXSIY+8dcbjxUj1XJBBkifOpzYeQv6C5/Pq2qC cfkZheMGx6yStBdvJBfSSJd+nYKFKA0Ns94k2dx2M0TOdDYP0xY/onuLxcepqYZwyPpB dJhQNAUsIxyGlSqopgRLtAofxSUamemaWb98zKgRDh7iUEZNY1dJxJthEVxkqwGyCImf NWng== X-Gm-Message-State: AOJu0YyHc/i5dlQQ/35Oq8oUZGxPiDVFVnDOXrCxg5dG9riQkf4FymKu f+e1aDku5ebuNlY0TKCMAIJDEp78OumaEApp9WjoJ0TOX27c4cZdpk8O1HMhs407NRoDRwli/GE 1gsPIirQ6enQ7TstZXajQYucFGKitbKRYWAnWeXVUgYzCT4hYug== X-Google-Smtp-Source: AGHT+IE94cwQYBXP+prA8YrWRmBQj5M99scvNxpZ/D9TQMQ+QMw9XR1uxuoKZ+ZSCmSje8maRL3nn9zZHsJux1KvM1A= X-Received: by 2002:a05:600c:3493:b0:411:f6b6:faf5 with SMTP id a19-20020a05600c349300b00411f6b6faf5mr48681wmq.3.1708119709373; Fri, 16 Feb 2024 13:41:49 -0800 (PST) MIME-Version: 1.0 References: <20240205200736.GS6420@pb2> <20240215223534.GH6420@pb2> In-Reply-To: <20240215223534.GH6420@pb2> From: Dale Curtis Date: Fri, 16 Feb 2024 13:41:35 -0800 Message-ID: To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="00000000000083338d0611869c1f" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [FFmpeg-devel] [PATCH] [mov] Avoid OOM for invalid STCO / CO64 constructions. X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --00000000000083338d0611869c1f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Feb 15, 2024 at 2:35=E2=80=AFPM Michael Niedermayer wrote: > FFMIN/MAX can evaluate their arguments multiple times so avio_rb32() migh= t > be executed more than once > Thanks. Good catch. Fixed. --00000000000083338d0611869c1f Content-Type: application/octet-stream; name="stco-clamp-entries-v4.patch" Content-Disposition: attachment; filename="stco-clamp-entries-v4.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_lsp6cz2j0 RnJvbSBiOTRlNTQyNTgyZTM3NTAyNWM1OTg2MmNlZTU4ZWM0NWQzOWM5Y2Q2IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBEYWxlIEN1cnRpcyA8ZGFsZWN1cnRpc0BjaHJvbWl1bS5vcmc+ CkRhdGU6IEZyaSwgMiBGZWIgMjAyNCAyMDo0OTo0NCArMDAwMApTdWJqZWN0OiBbUEFUQ0hdIFtt b3ZdIEF2b2lkIE9PTSBmb3IgaW52YWxpZCBTVENPIC8gQ082NCBjb25zdHJ1Y3Rpb25zLgoKVGhl IGBlbnRyaWVzYCB2YWx1ZSBpcyByZWFkIGRpcmVjdGx5IGZyb20gdGhlIHN0cmVhbSBhbmQgdXNl ZCB0bwphbGxvY2F0ZSBtZW1vcnkuIFRoaXMgY2hhbmdlIGNsYW1wcyBgZW50cmllc2AgdG8gaG93 ZXZlciBtYW55IGFyZQpwb3NzaWJsZSBpbiB0aGUgcmVtYWluaW5nIGF0b20gb3IgZmlsZSBzaXpl ICh3aGljaGV2ZXIgaXMgc21hbGxlc3QpLgoKRml4ZXMgaHR0cHM6Ly9jcmJ1Zy5jb20vMTQyOTM1 NwoKU2lnbmVkLW9mZi1ieTogRGFsZSBDdXJ0aXMgPGRhbGVjdXJ0aXNAY2hyb21pdW0ub3JnPgot LS0KIGxpYmF2Zm9ybWF0L21vdi5jIHwgNyArKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNyBpbnNl cnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvbGliYXZmb3JtYXQvbW92LmMgYi9saWJhdmZvcm1hdC9t b3YuYwppbmRleCBhZjk1ZTFmNjYyLi5jNDVmNmMzZTZiIDEwMDY0NAotLS0gYS9saWJhdmZvcm1h dC9tb3YuYworKysgYi9saWJhdmZvcm1hdC9tb3YuYwpAQCAtMjIyOCw3ICsyMjI4LDEzIEBAIHN0 YXRpYyBpbnQgbW92X3JlYWRfc3RjbyhNT1ZDb250ZXh0ICpjLCBBVklPQ29udGV4dCAqcGIsIE1P VkF0b20gYXRvbSkKICAgICBhdmlvX3I4KHBiKTsgLyogdmVyc2lvbiAqLwogICAgIGF2aW9fcmIy NChwYik7IC8qIGZsYWdzICovCiAKKyAgICAvLyBDbGFtcCBhbGxvY2F0aW9uIHNpemUgZm9yIGBj aHVua19vZmZzZXRzYCAtLSBkb24ndCB0aHJvdyBhbiBlcnJvciBmb3IgYW4KKyAgICAvLyBpbnZh bGlkIGNvdW50IHNpbmNlIHRoZSBFT0YgcGF0aCBkb2Vzbid0IHRocm93IGVpdGhlci4KICAgICBl bnRyaWVzID0gYXZpb19yYjMyKHBiKTsKKyAgICBlbnRyaWVzID0KKyAgICAgICAgRkZNSU4oZW50 cmllcywKKyAgICAgICAgICAgICAgRkZNQVgoMCwgKGF0b20uc2l6ZSAtIDgpIC8KKyAgICAgICAg ICAgICAgICAgICAgICAgICAgIChhdG9tLnR5cGUgPT0gTUtUQUcoJ3MnLCAndCcsICdjJywgJ28n KSA/IDQgOiA4KSkpOwogCiAgICAgaWYgKCFlbnRyaWVzKQogICAgICAgICByZXR1cm4gMDsKQEAg LTIyMzcsNiArMjI0Myw3IEBAIHN0YXRpYyBpbnQgbW92X3JlYWRfc3RjbyhNT1ZDb250ZXh0ICpj LCBBVklPQ29udGV4dCAqcGIsIE1PVkF0b20gYXRvbSkKICAgICAgICAgYXZfbG9nKGMtPmZjLCBB Vl9MT0dfV0FSTklORywgIklnbm9yaW5nIGR1cGxpY2F0ZWQgU1RDTyBhdG9tXG4iKTsKICAgICAg ICAgcmV0dXJuIDA7CiAgICAgfQorCiAgICAgYXZfZnJlZShzYy0+Y2h1bmtfb2Zmc2V0cyk7CiAg ICAgc2MtPmNodW5rX2NvdW50ID0gMDsKICAgICBzYy0+Y2h1bmtfb2Zmc2V0cyA9IGF2X21hbGxv Y19hcnJheShlbnRyaWVzLCBzaXplb2YoKnNjLT5jaHVua19vZmZzZXRzKSk7Ci0tIAoyLjQ0LjAu cmMwLjI1OC5nNzMyMGU5NTg4Ni1nb29nCgo= --00000000000083338d0611869c1f Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --00000000000083338d0611869c1f--