[gstreamer-bugs] [Bug 590622] New: [bytereader] buffer size checks subject to wrap-around overflow

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=590622

  GStreamer | gstreamer (core) | Ver: git
           Summary: [bytereader] buffer size checks subject to wrap-around
                    overflow
           Product: GStreamer
           Version: git
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: blocker
          Priority: Normal
         Component: gstreamer (core)
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: manauw at skynet.be
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


GstByteReader functions check whether there is enough data for requested item,
typically with a fragment as follows:

if (reader->byte + size > reader->size)
  return FALSE;

However, if size and/or current byte position are sufficiently large,
wrap-around might make it seems sufficient data is still available, while not
really so.


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=590622.