[Bug 759547] New: dashdemux: insufficient validation of UTCtiming element

GStreamer (GNOME Bugzilla) bugzilla at gnome.org
Wed Dec 16 05:57:44 PST 2015


https://bugzilla.gnome.org/show_bug.cgi?id=759547

            Bug ID: 759547
           Summary: dashdemux: insufficient validation of UTCtiming
                    element
    Classification: Platform
           Product: GStreamer
           Version: git master
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: florin.apostol at oregan.net
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

gst_mpdparser_parse_utctiming_node does not validate the parsed values
completely. The following scenarios are incorrectly accepted:
- elements with no schemeIdUri property should be rejected
- elements with unrecognized UTCTiming scheme should be rejected
- elements with empty values should be rejected

The last one triggers a division by 0 in gst_dash_demux_poll_clock_drift:
clock_drift->selected_url = clock_drift->selected_url % g_strv_length (urls);
because it urls is a valid pointer to an empty array.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list