[gstreamer-bugs] [Bug 553295] [riff] fuzzed AVI file causes segfault

[GStreamer (bugzilla.gnome.org)]

If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=553295

  GStreamer | don't know | Ver: 0.10.19

Tim-Philipp Müller changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |t.i.m at zen.co.uk
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |FIXED
            Summary|fuzzed mpeg causes segfault |[riff] fuzzed AVI file
                   |in gstreamer                |causes segfault
   Target Milestone|HEAD                        |0.10.23




------- Comment #1 from Tim-Philipp Müller  2009-02-11 17:00 UTC -------
Thanks for the bug report. This is fixed in -base git master now:

commit 1fedfec22018267efe34a2f42890543631ef2a24
Author: Tim-Philipp Müller <tim.muller at collabora.co.uk>
Date:   Wed Feb 11 16:39:55 2009 +0000

    riff: error out on nonsensical chunk sizes instead of aborting

    When encountering a nonsensical chunk size such as (guint)-1, error out
cleanly instead of
    continuing and trying to g_memdup() 4GB of data that doesn't exist, which
will either abort
    in g_malloc() or crash.

    Fixes #553295, crash with fuzzed AVI file.


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=553295.