git.videolan.org Git - ffmpeg.git/rss log

Les articles publiés sur le site

• avformat/mpegts : Add standard extension so hls can check in extension_picky mode

  16 janvier, par Michael Niedermayer

  avformat/mpegts: Add standard extension so hls can check in extension_picky mode
  
  Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
  

  • [DH] libavformat/mpegts.c

• avcodec/ac3dec : only export matrix encoding and downmix info side data when necessary

  16 janvier, par James Almer

  avcodec/ac3dec: only export matrix encoding and downmix info side data when necessary
  
  Don't export a matrix encoding side data when there's none signaled.
  And if downmixing was handled by the decoder itself, then the downmix info does
  not apply to the frame.
  
  Signed-off-by: James Almer <jamrial@gmail.com>
  

  • [DH] libavcodec/ac3dec.c

• avcodec/ac3dec : don't override existing downmix coefficient with default ones

  16 janvier, par James Almer

  avcodec/ac3dec: don't override existing downmix coefficient with default ones
  
  With this, if the eac3 dependent frame doesn't have coded downmix values when
  parsed by ff_eac3_parse_header(), it will inherit the coded ones from the core
  ac3 frame instead of ignoring them.
  
  Signed-off-by: James Almer <jamrial@gmail.com>
  

  • [DH] libavcodec/ac3dec.c

• avformat/hls : Be more picky on extensions

  16 janvier, par Michael Niedermayer

  avformat/hls: Be more picky on extensions
  
  This blocks disallowed extensions from probing
  It also requires all available segments to have matching extensions to the format
  mpegts is treated independent of the extension
  
  It is recommended to set the whitelists correctly
  instead of depending on extensions, but this should help a bit,
  and this is easier to backport
  
  Fixes: CVE-2023-6602 II. HLS Force TTY Demuxer
  Fixes: CVE-2023-6602 IV. HLS XBIN Demuxer DoS Amplification
  
  The other parts of CVE-2023-6602 have been fixed by prior commits
  
  Found-by: Harvey Phillips of Amazon Element55 (element55)
  Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
  

  • [DH] doc/demuxers.texi
  • [DH] libavformat/hls.c

• avformat/dashdec : Check whitelist

  15 janvier, par Michael Niedermayer

  avformat/dashdec: Check whitelist
  
  Fixes: CVE-2023-6602, V. DASH Playlist SSRF
  
  Found-by: Harvey Phillips of Amazon Element55 (element55)
  Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
  

  • [DH] libavformat/dashdec.c