Nicholas Carlini
3e8bec7871
pmt_cb() passes mp4_descr + mp4_descr_count as the output base but MAX_MP4_DESCR_COUNT (16) as the capacity, not the remaining capacity. init_MP4DescrParseContext() resets d->descr_count to 0 on every call, so the bounds check at parse_MP4ESDescrTag compares a fresh 0 against 16 regardless of the shifted base. A PMT with two IOD descriptors of 16 ESDescrs each will crash. The first fills the buffer mp4_descr[0..15], and then the second writes mp4_descr[16..31] -- 1152 bytes past the end of the stack. This change passes the remaining capacity instead of always passing 16. The writeback in mp4_read_iods is incremented so the caller's running count is preserved. Fixes: stack-buffer-overflow Found-by: Nicholas Carlini <nicholas@carlini.com>
FFmpeg README
FFmpeg is a collection of libraries and tools to process multimedia content such as audio, video, subtitles and related metadata.
Libraries
libavcodecprovides implementation of a wider range of codecs.libavformatimplements streaming protocols, container formats and basic I/O access.libavutilincludes hashers, decompressors and miscellaneous utility functions.libavfilterprovides means to alter decoded audio and video through a directed graph of connected filters.libavdeviceprovides an abstraction to access capture and playback devices.libswresampleimplements audio mixing and resampling routines.libswscaleimplements color conversion and scaling routines.
Tools
- ffmpeg is a command line toolbox to manipulate, convert and stream multimedia content.
- ffplay is a minimalistic multimedia player.
- ffprobe is a simple analysis tool to inspect multimedia content.
- Additional small tools such as
aviocat,ismindexandqt-faststart.
Documentation
The offline documentation is available in the doc/ directory.
The online documentation is available in the main website and in the wiki.
Examples
Coding examples are available in the doc/examples directory.
License
FFmpeg codebase is mainly LGPL-licensed with optional components licensed under GPL. Please refer to the LICENSE file for detailed information.
Contributing
Patches should be submitted to the ffmpeg-devel mailing list using
git format-patch or git send-email. Github pull requests should be
avoided because they are not part of our review process and will be ignored.