diff options
Diffstat (limited to 'multimedia/mythtv/files/patch-CVE-2017-14767')
| -rw-r--r-- | multimedia/mythtv/files/patch-CVE-2017-14767 | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/multimedia/mythtv/files/patch-CVE-2017-14767 b/multimedia/mythtv/files/patch-CVE-2017-14767 new file mode 100644 index 000000000000..6a529ed7bffd --- /dev/null +++ b/multimedia/mythtv/files/patch-CVE-2017-14767 @@ -0,0 +1,28 @@ +From 53a6cdf89d694be1f075729f16e0a9e2dcbbcb78 Mon Sep 17 00:00:00 2001 +From: Michael Niedermayer <michael@niedermayer.cc> +Date: Wed, 23 Aug 2017 21:30:37 +0200 +Subject: [PATCH] avformat/rtpdec_h264: Fix heap-buffer-overflow + +Fixes: rtp_sdp/poc.sdp + +Found-by: Bingchang <l.bing.chang.bc@gmail.com> +Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> +(cherry picked from commit c42a1388a6d1bfd8001bf6a4241d8ca27e49326d) +Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> +--- + libavformat/rtpdec_h264.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git libavformat/rtpdec_h264.c libavformat/rtpdec_h264.c +index 8dd56a549e4..6f8148ab6d5 100644 +--- external/FFmpeg/libavformat/rtpdec_h264.c ++++ external/FFmpeg/libavformat/rtpdec_h264.c +@@ -166,7 +166,7 @@ static int sdp_parse_fmtp_config_h264(AVFormatContext *s, + parse_profile_level_id(s, h264_data, value); + } else if (!strcmp(attr, "sprop-parameter-sets")) { + int ret; +- if (value[strlen(value) - 1] == ',') { ++ if (*value == 0 || value[strlen(value) - 1] == ',') { + av_log(s, AV_LOG_WARNING, "Missing PPS in sprop-parameter-sets, ignoring\n"); + return 0; + } |