]> code.ossystems Code Review - openembedded-core.git/commit
gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869
authorYue Tao <Yue.Tao@windriver.com>
Fri, 29 Aug 2014 06:46:19 +0000 (14:46 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 23 Oct 2014 15:11:50 +0000 (16:11 +0100)
commit9d0fe8f47e360ad09d4a20144da96576dd4bf82f
tree80c92533cfbe96c3402f39ecc5462693f05cc6cb
parent187470bf4e1d0d87d84aae251e663c3eb490ff9c
gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869

The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2
allows remote attackers to have an unspecified impact via crafted H.264
data, related to an SPS and slice mismatch and an out-of-bounds array
access.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0869

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Conflicts:
meta/recipes-multimedia/gstreamer/gst-ffmpeg_0.10.13.bb
meta/recipes-multimedia/gstreamer/gst-ffmpeg-0.10.13/0001-h264-skip-error-concealment-when-SPS-and-slices-are-.patch [new file with mode: 0644]
meta/recipes-multimedia/gstreamer/gst-ffmpeg_0.10.13.bb