From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id D51EB47827 for ; Tue, 26 Sep 2023 07:48:01 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 62D7368C9EC; Tue, 26 Sep 2023 10:47:58 +0300 (EEST) Received: from mail-ua1-f50.google.com (mail-ua1-f50.google.com [209.85.222.50]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 29EC568C822 for ; Tue, 26 Sep 2023 10:47:52 +0300 (EEST) Received: by mail-ua1-f50.google.com with SMTP id a1e0cc1a2514c-7a52a1e2a59so3088564241.0 for ; Tue, 26 Sep 2023 00:47:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1695714470; x=1696319270; darn=ffmpeg.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=XxGew68CAdOAvkQqcyjUrsDkoktZZCZDqvigR+iwdkI=; b=VO8QWz91b2ppF+Jj2WHQvKiScyQdSm8Z6+zCGIhwgsWKk9oX0760e042zNWMN/w+hy ++iTiHmU3UZmlSHAyhFW0TkFP3TFW5FRLWEbwGrpFvQaUoRy1RvIjDicWLivkBMaNA9d jBq3mJMqA8A+MCQmbYzPp94DzgdEL201U5I6xRCp73Lpf9I4ZOzVvukervXn+Y6L97a1 2O3ebPVxvr8yafVZtYmixoisGxw/Y/44HA/M/N6bbY78CTICSVmpgB6JLGEIIaWanQA7 zgVfm/P0w7Mvb1PvbDUh5Wl7y6gtw/28k8GG9hRCL/S0EN7isUVb4sgGhMXAxbG4RKAx /0qw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1695714470; x=1696319270; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=XxGew68CAdOAvkQqcyjUrsDkoktZZCZDqvigR+iwdkI=; b=eRFAcFzjpQSPueBBr/lL4zyJgk+zDdlbES0JamKn3s6RQ939Pgr8oI90HkOGf9B3Xg Kt8iNsddyDXDsebyZ9+zcVYVb+6EuSzaJDRFFGKR4TBstUfmp0bzo9dRksF4XYe7zM4S VTjrAq85X5J5+9xPKDmkW6Vo/ssDtArnDnCm/Mjg4b4thLLE+LUVOtiRUItydliVrSGj PfGYR+f79CNg3oUvoD2svcmrezM3JKlnK+n95N+S4kkokyrETebXTbbK5XccxaVwgMqB v9maOqqEBdB59KTvIeGcigrfM11g6npC9ldpEZ7RuHMba3kwknR1gwvZcudNt1zEKzsg J5oQ== X-Gm-Message-State: AOJu0YzcSZR+ju9REo5q/ZIQ+pyeXgVYEiLNiLJdyHyOilCfsEM37ewD Ziqsuhgrljxui7hXbDHLq1H0wRmXbBHoKx4ocFRQ+1DlTh4= X-Google-Smtp-Source: AGHT+IHLScZbDOnRcoqyRrEuQhEzc0Jv+iZ9nR27sBC7zZpQPc9nq+6hwmFWimZn0iWi6pvlWbIXGra9rnaON1DisFM= X-Received: by 2002:a05:6102:11e6:b0:44d:5105:b143 with SMTP id e6-20020a05610211e600b0044d5105b143mr5647388vsg.27.1695714470284; Tue, 26 Sep 2023 00:47:50 -0700 (PDT) MIME-Version: 1.0 From: Paul B Mahol Date: Tue, 26 Sep 2023 09:47:34 +0200 Message-ID: To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="000000000000a4a12d06063e4a3f" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: [FFmpeg-devel] [PATCH] avcodec/vlc: fix heap use after free X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --000000000000a4a12d06063e4a3f Content-Type: text/plain; charset="UTF-8" Attached. --000000000000a4a12d06063e4a3f Content-Type: text/x-patch; charset="US-ASCII"; name="0001-avcodec-vlc-fix-heap-use-after-free.patch" Content-Disposition: attachment; filename="0001-avcodec-vlc-fix-heap-use-after-free.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_ln00l87y0 RnJvbSBkMGI2YjA4YjM4ZTVmNDMxNGYwNDYxMThiZmY3MGQxZTA4YjQ2YmJmIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIEIgTWFob2wgPG9uZW1kYUBnbWFpbC5jb20+CkRhdGU6 IFR1ZSwgMjYgU2VwIDIwMjMgMDk6Mzc6MTIgKzAyMDAKU3ViamVjdDogW1BBVENIXSBhdmNvZGVj L3ZsYzogZml4IGhlYXAgdXNlIGFmdGVyIGZyZWUKClNpZ25lZC1vZmYtYnk6IFBhdWwgQiBNYWhv bCA8b25lbWRhQGdtYWlsLmNvbT4KLS0tCiBsaWJhdmNvZGVjL3ZsYy5jIHwgMTkgKysrKysrKysr KysrLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDEyIGluc2VydGlvbnMoKyksIDcgZGVsZXRpb25z KC0pCgpkaWZmIC0tZ2l0IGEvbGliYXZjb2RlYy92bGMuYyBiL2xpYmF2Y29kZWMvdmxjLmMKaW5k ZXggM2I2NmM5NDM1NC4uMmI3NTM1YzJjZSAxMDA2NDQKLS0tIGEvbGliYXZjb2RlYy92bGMuYwor KysgYi9saWJhdmNvZGVjL3ZsYy5jCkBAIC0yMzcsOCArMjM3LDYgQEAgc3RhdGljIGludCB2bGNf Y29tbW9uX2VuZChWTEMgKnZsYywgaW50IG5iX2JpdHMsIGludCBuYl9jb2RlcywgVkxDY29kZSAq Y29kZXMsCiAgICAgICAgICAgICBhdl9sb2coTlVMTCwgQVZfTE9HX0VSUk9SLCAibmVlZGVkICVk IGhhZCAlZFxuIiwgdmxjLT50YWJsZV9zaXplLCB2bGMtPnRhYmxlX2FsbG9jYXRlZCk7CiAgICAg ICAgIGF2X2Fzc2VydDAocmV0ID49IDApOwogICAgIH0gZWxzZSB7Ci0gICAgICAgIGlmIChjb2Rl cyAhPSBsb2NhbGJ1ZikKLSAgICAgICAgICAgIGF2X2ZyZWUoY29kZXMpOwogICAgICAgICBpZiAo cmV0IDwgMCkgewogICAgICAgICAgICAgYXZfZnJlZXAoJnZsYy0+dGFibGUpOwogICAgICAgICAg ICAgcmV0dXJuIHJldDsKQEAgLTI5OSw4ICsyOTcsMTEgQEAgaW50IGZmX3ZsY19pbml0X3NwYXJz ZShWTEMgKnZsYywgaW50IG5iX2JpdHMsIGludCBuYl9jb2RlcywKICAgICBDT1BZKGxlbiAmJiBs ZW4gPD0gbmJfYml0cyk7CiAgICAgbmJfY29kZXMgPSBqOwogCi0gICAgcmV0dXJuIHZsY19jb21t b25fZW5kKHZsYywgbmJfYml0cywgbmJfY29kZXMsIGJ1ZiwKKyAgICByZXQgPSB2bGNfY29tbW9u X2VuZCh2bGMsIG5iX2JpdHMsIG5iX2NvZGVzLCBidWYsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgIGZsYWdzLCBsb2NhbGJ1Zik7CisgICAgaWYgKGJ1ZiAhPSBsb2NhbGJ1ZikKKyAgICAgICAg YXZfZnJlZShidWYpOworICAgIHJldHVybiByZXQ7CiB9CiAKIGludCBmZl92bGNfaW5pdF9mcm9t X2xlbmd0aHMoVkxDICp2bGMsIGludCBuYl9iaXRzLCBpbnQgbmJfY29kZXMsCkBAIC0zMzUsMTkg KzMzNiwyMSBAQCBpbnQgZmZfdmxjX2luaXRfZnJvbV9sZW5ndGhzKFZMQyAqdmxjLCBpbnQgbmJf Yml0cywgaW50IG5iX2NvZGVzLAogICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgIGlmIChs ZW4gPiBsZW5fbWF4IHx8IGNvZGUgJiAoKDFVIDw8ICgzMiAtIGxlbikpIC0gMSkpIHsKICAgICAg ICAgICAgIGF2X2xvZyhsb2djdHgsIEFWX0xPR19FUlJPUiwgIkludmFsaWQgVkxDIChsZW5ndGgg JXUpXG4iLCBsZW4pOworICAgICAgICAgICAgcmV0ID0gQVZFUlJPUl9JTlZBTElEREFUQTsKICAg ICAgICAgICAgIGdvdG8gZmFpbDsKICAgICAgICAgfQogICAgICAgICBjb2RlICs9IDFVIDw8ICgz MiAtIGxlbik7CiAgICAgICAgIGlmIChjb2RlID4gVUlOVDMyX01BWCArIDFVTEwpIHsKICAgICAg ICAgICAgIGF2X2xvZyhsb2djdHgsIEFWX0xPR19FUlJPUiwgIk92ZXJkZXRlcm1pbmVkIFZMQyB0 cmVlXG4iKTsKKyAgICAgICAgICAgIHJldCA9IEFWRVJST1JfSU5WQUxJRERBVEE7CiAgICAgICAg ICAgICBnb3RvIGZhaWw7CiAgICAgICAgIH0KICAgICB9Ci0gICAgcmV0dXJuIHZsY19jb21tb25f ZW5kKHZsYywgbmJfYml0cywgaiwgYnVmLCBmbGFncywgbG9jYWxidWYpOworICAgIHJldCA9IHZs Y19jb21tb25fZW5kKHZsYywgbmJfYml0cywgaiwgYnVmLCBmbGFncywgbG9jYWxidWYpOwogZmFp bDoKICAgICBpZiAoYnVmICE9IGxvY2FsYnVmKQogICAgICAgICBhdl9mcmVlKGJ1Zik7Ci0gICAg cmV0dXJuIEFWRVJST1JfSU5WQUxJRERBVEE7CisgICAgcmV0dXJuIHJldDsKIH0KIAogc3RhdGlj IHZvaWQgYWRkX2xldmVsKFZMQ19NVUxUSV9FTEVNICp0YWJsZSwgY29uc3QgaW50IG5iX2VsZW1z LApAQCAtNDYzLDIyICs0NjYsMjQgQEAgaW50IGZmX3ZsY19pbml0X211bHRpX2Zyb21fbGVuZ3Ro cyhWTEMgKnZsYywgVkxDX01VTFRJICptdWx0aSwgaW50IG5iX2JpdHMsIGludAogICAgICAgICAg ICAgY29udGludWU7CiAgICAgICAgIGlmIChsZW4gPiBsZW5fbWF4IHx8IGNvZGUgJiAoKDFVIDw8 ICgzMiAtIGxlbikpIC0gMSkpIHsKICAgICAgICAgICAgIGF2X2xvZyhsb2djdHgsIEFWX0xPR19F UlJPUiwgIkludmFsaWQgVkxDIChsZW5ndGggJXUpXG4iLCBsZW4pOworICAgICAgICAgICAgcmV0 ID0gQVZFUlJPUl9JTlZBTElEREFUQTsKICAgICAgICAgICAgIGdvdG8gZmFpbDsKICAgICAgICAg fQogICAgICAgICBjb2RlICs9IDFVIDw8ICgzMiAtIGxlbik7CiAgICAgICAgIGlmIChjb2RlID4g VUlOVDMyX01BWCArIDFVTEwpIHsKICAgICAgICAgICAgIGF2X2xvZyhsb2djdHgsIEFWX0xPR19F UlJPUiwgIk92ZXJkZXRlcm1pbmVkIFZMQyB0cmVlXG4iKTsKKyAgICAgICAgICAgIHJldCA9IEFW RVJST1JfSU5WQUxJRERBVEE7CiAgICAgICAgICAgICBnb3RvIGZhaWw7CiAgICAgICAgIH0KICAg ICB9CiAgICAgcmV0ID0gdmxjX2NvbW1vbl9lbmQodmxjLCBuYl9iaXRzLCBqLCBidWYsIGZsYWdz LCBsb2NhbGJ1Zik7CiAgICAgaWYgKHJldCA8IDApCiAgICAgICAgIGdvdG8gZmFpbDsKLSAgICBy ZXR1cm4gdmxjX211bHRpX2dlbihtdWx0aS0+dGFibGUsIHZsYywgbmJfZWxlbXMsIGosIG5iX2Jp dHMsIGJ1ZiwgbG9nY3R4KTsKKyAgICByZXQgPSB2bGNfbXVsdGlfZ2VuKG11bHRpLT50YWJsZSwg dmxjLCBuYl9lbGVtcywgaiwgbmJfYml0cywgYnVmLCBsb2djdHgpOwogZmFpbDoKICAgICBpZiAo YnVmICE9IGxvY2FsYnVmKQogICAgICAgICBhdl9mcmVlKGJ1Zik7Ci0gICAgcmV0dXJuIEFWRVJS T1JfSU5WQUxJRERBVEE7CisgICAgcmV0dXJuIHJldDsKIH0KIAogdm9pZCBmZl92bGNfZnJlZV9t dWx0aShWTENfTVVMVEkgKnZsYykKLS0gCjIuNDIuMAoK --000000000000a4a12d06063e4a3f Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --000000000000a4a12d06063e4a3f--