[Bug 787061] New: qtdemux: segmentation fauit with protected DASH streams

[GStreamer (GNOME Bugzilla)]

https://bugzilla.gnome.org/show_bug.cgi?id=787061

            Bug ID: 787061
           Summary: qtdemux: segmentation fauit with protected DASH
                    streams
    Classification: Platform
           Product: GStreamer
           Version: 1.12.2
                OS: Linux
            Status: NEW
          Severity: major
          Priority: Normal
         Component: gst-plugins-good
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: juergen.sachs at metz-ce.de
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Created attachment 358824
  --> https://bugzilla.gnome.org/attachment.cgi?id=358824&action=edit
detailed gdb backtrace

When decoding a protected DASH stream, the qtdemux raises a segmentation fault.
This can be reproduced by
  gst-launch-1.0
http://freenettvcon10-i.akamaihd.net/dash/live/499767/freenet10/dash.mpd
The stream is the DASH source of a freenet.TV internet connect service "Insight
(connect". Obviously this content is protected. Gstreamer should not crash
event we no not have any protection handling plugin.

The crash occures in qtdemux when the audio init segment is parsed:
=====
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 2062]
0xb0469428 in __gst_slow_read32_le (data=0x78657278 <Address 0x78657278 out of
bounds>)
    at
/home/metz/Projekte/G_SX7/DCP_SYS/Install/Core/.tmp/include/gstreamer-1.0/gst/gstutils.h:255
255      return _GST_READ_UINT32_LE (data);
(gdb) bt
#0  0xb0469428 in __gst_slow_read32_le (data=0x78657278 <Address 0x78657278 out
of bounds>)
    at
/home/metz/Projekte/G_SX7/DCP_SYS/Install/Core/.tmp/include/gstreamer-1.0/gst/gstutils.h:255
#1  0xb04a0a58 in qtdemux_parse_trak (qtdemux=0xb030e308, trak=0xb4103248)
    at
/home/metz/Projekte/G_SX7/DCP_SYS/Media/GST-1.0/gst-plugins-good/gst/isomp4/qtdemux.c:11140
=====
More detailed log attached
More information about the bug will follow

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.