Sebastian Dröge 72742dee30 mxfdemux: Check number of channels for AES3 audio ...

Only up to 8 channels are allowed and using a higher number would cause
integer overflows when copying the data, and lead to out of bound
writes.

Also check that each buffer is at least 4 bytes long to avoid another
overflow.

Fixes ZDI-CAN-21661, CVE-2023-40475

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2897

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5362>

2023-09-20 15:40:07 +00:00

..

gstmxfelement.c

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

gstmxfelements.h

…

meson.build

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

mxf.c

…

mxfaes-bwf.c

gst-plugins-bad: re-indent with GNU indent 2.2.12

2023-03-17 03:18:54 +00:00

mxfaes-bwf.h

…

mxfalaw.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfalaw.h

…

mxfcustom.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfcustom.h

mxfdemux: Add support for Canon XF-HEVC

2022-10-12 09:15:57 +00:00

mxfd10.c

mxfdemux: Check number of channels for AES3 audio

2023-09-20 15:40:07 +00:00

mxfd10.h

…

mxfdemux.c

gst-plugins-bad: re-indent with GNU indent 2.2.12

2023-03-17 03:18:54 +00:00

mxfdemux.h

…

mxfdms1.c

…

mxfdms1.h

…

mxfdv-dif.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfdv-dif.h

…

mxfessence.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfessence.h

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfffv1.c

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

mxfffv1.h

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

mxfjpeg2000.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfjpeg2000.h

…

mxfmetadata.c

plugins: Fix various trivial clang compiler warnings

2023-03-18 16:16:55 +02:00

mxfmetadata.h

mxfdemux: Handle sub-descriptor in generic descriptors

2023-02-10 10:02:25 +01:00

mxfmpeg.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfmpeg.h

…

mxfmux.c

…

mxfmux.h

…

mxfprores.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfprores.h

…

mxfquark.c

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

mxfquark.h

mxfdemux: Add support for FFV1 demuxing

2023-02-10 10:02:25 +01:00

mxftypes.c

mxf: Add convenience function for looking up primer tags

2023-02-10 06:25:29 +01:00

mxftypes.h

mxf: Add convenience function for looking up primer tags

2023-02-10 06:25:29 +01:00

mxful.c

mxfdemux: Handle sub-descriptor in generic descriptors

2023-02-10 10:02:25 +01:00

mxful.h

mxfdemux: Handle sub-descriptor in generic descriptors

2023-02-10 10:02:25 +01:00

mxfup.c

mxfdemux: Fix integer overflow causing out of bounds writes when handling invalid uncompressed video

2023-09-20 15:40:07 +00:00

mxfup.h

…

mxfvanc.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfvanc.h

…

mxfvc3.c

mxf: simplify essence track matching

2023-02-10 10:02:25 +01:00

mxfvc3.h

…