Re: Buffer overflow in mplex
Hannes Domani <[email protected]> Mon, 28 Nov 2011 19:20:15 +0000 (GMT)
| Newsgroups | gmane.comp.video.mjpeg.devel |
|---|---|
| Message-ID | <[email protected]> |
---1259462514-1185284838-1322508015=:78769 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Servus=0A> There is a tracker entry in the bug tracker about a mplex proble= m:=0A> https://sourceforge.net/tracker/?func=3Ddetail&aid=3D3437981&group_i= d=3D5776&atid=3D105776=0A=0A>=0A> Can anybody spend some time and check tha= t. I'm a bit confused. ;)=0A> And unsure about how to solve that problem.= =0A=0AI've attached a simple patch to fix the overflow.=0ABut it looks to m= e like ParseWorkaroundOpt() is unfinished/unused, or else flag_table[] woul= d have some real data.=0A=0APfiat di=0Ada Hauns=0A ---1259462514-1185284838-1322508015=:78769 Content-Type: application/octet-stream; name="overflow.patch" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="overflow.patch" LS0tIG1wbGV4L21haW4uY3BwCTIwMTAtMDMtMTMgMTQ6MDU6MDcgKzAxMDAK KysrIG1wbGV4L21haW4uY3BwCTIwMTEtMTEtMjggMjA6MTI6MTcgKzAxMDAK QEAgLTYwNSw3ICs2MDUsNyBAQAogICAgICAgICAgICAgc3RkOjpzdHJpbmcg bWVzc2FnZSggIklsbGVnYWwgd29yay1hcm91bmQgb3B0aW9uOiBub3Qgb25l IG9mICIgKTsKICAgICAgICAgICAgIGZsYWcgPSAwOwogICAgICAgICAgICAg Y2hhciBzZXBbXSA9ICIsIjsKLSAgICAgICAgICAgIGRvCisgICAgICAgICAg ICB3aGlsZSggZmxhZ190YWJsZVtmbGFnXS5sb25nbmFtZSAhPSAwICkKICAg ICAgICAgICAgIHsKICAgICAgICAgICAgICAgICBtZXNzYWdlICs9IGZsYWdf dGFibGVbZmxhZ10ubG9uZ25hbWU7CiAgICAgICAgICAgICAgICAgbWVzc2Fn ZSArPSBzZXA7CkBAIC02MTQsNyArNjE0LDYgQEAKICAgICAgICAgICAgICAg ICBpZiggZmxhZ190YWJsZVtmbGFnXS5sb25nbmFtZSAhPSAwICkKICAgICAg ICAgICAgICAgICAgICAgbWVzc2FnZSArPSBzZXA7CiAgICAgICAgICAgICB9 Ci0gICAgICAgICAgICB3aGlsZSggZmxhZ190YWJsZVtmbGFnXS5sb25nbmFt ZSAhPSAwICk7CiAgICAgICAgICAgICBtanBlZ19lcnJvciggbWVzc2FnZS5j X3N0cigpICk7CiAgICAgICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgICAg IH0K ---1259462514-1185284838-1322508015=:78769 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d ---1259462514-1185284838-1322508015=:78769 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Mjpeg-developer mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mjpeg-developer ---1259462514-1185284838-1322508015=:78769--