[Bug 736490] New: tsdemux: fix overflow of packet_length field of PESHeader

GStreamer (bugzilla.gnome.org) bugzilla at gnome.org
Thu Sep 11 09:57:09 PDT 2014


https://bugzilla.gnome.org/show_bug.cgi?id=736490
  GStreamer | gst-plugins-bad | 2.x

           Summary: tsdemux: fix overflow of packet_length field of
                    PESHeader
    Classification: Platform
           Product: GStreamer
           Version: 2.x
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: aurelien.zanelli at parrot.com
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


If packet_length of a PES packet is greater than 65529, packet_length field of
PESHeader structure, defined as a guin16, will overflow due to the fact that we
add 6 bytes to it since commit d0e8427b4e7735bf5abc5cff18a03483cee1d9b5

So I will propose a patch which use a guint32 to store packet_length instead of
a guint16.

You can reproduced the issue with the attached stream.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list