]> code.ossystems Code Review - openembedded-core.git/commit
ffmpeg: fix CVE-2021-33815
authorTony Tascioglu <tony.tascioglu@windriver.com>
Tue, 27 Jul 2021 23:20:47 +0000 (16:20 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 28 Jul 2021 22:46:56 +0000 (23:46 +0100)
commite03fda4df5d2865d5ac516f45aa120e2caf7de47
treeb0c50a71ad6e2208a8a8e2addc7245a67f32b987
parent451a945efb21221cfeeb4e641c5aa8bf4ae18c89
ffmpeg: fix CVE-2021-33815

avcodec/exr: More strictly check dc_count

Fixes: out of array access
Fixes: exr/deneme
Found-by: Burak Çarıkçı <burakcarikci@crypttech.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
CVE: CVE-2021-33815
Upstream-Status: Backport [26d3c81bc5ef2f8c3f09d45eaeacfb4b1139a777]

Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/ffmpeg/ffmpeg/fix-CVE-2021-33815.patch [new file with mode: 0644]
meta/recipes-multimedia/ffmpeg/ffmpeg_4.4.bb