[Bug 759547] New: dashdemux: insufficient validation of UTCtiming element
GStreamer (GNOME Bugzilla)
bugzilla at gnome.org
Wed Dec 16 05:57:44 PST 2015
https://bugzilla.gnome.org/show_bug.cgi?id=759547
Bug ID: 759547
Summary: dashdemux: insufficient validation of UTCtiming
element
Classification: Platform
Product: GStreamer
Version: git master
OS: Linux
Status: NEW
Severity: normal
Priority: Normal
Component: gst-plugins-bad
Assignee: gstreamer-bugs at lists.freedesktop.org
Reporter: florin.apostol at oregan.net
QA Contact: gstreamer-bugs at lists.freedesktop.org
GNOME version: ---
gst_mpdparser_parse_utctiming_node does not validate the parsed values
completely. The following scenarios are incorrectly accepted:
- elements with no schemeIdUri property should be rejected
- elements with unrecognized UTCTiming scheme should be rejected
- elements with empty values should be rejected
The last one triggers a division by 0 in gst_dash_demux_poll_clock_drift:
clock_drift->selected_url = clock_drift->selected_url % g_strv_length (urls);
because it urls is a valid pointer to an empty array.
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
More information about the gstreamer-bugs
mailing list