Antonio Morales ae61a604c0 qtdemux: Fix integer overflow when allocating the samples table for fragmented MP4 ...

This can lead to out of bounds writes and NULL pointer dereferences.

Fixes GHSL-2024-094, GHSL-2024-237, GHSL-2024-241
Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059>

2024-12-03 21:01:41 +00:00

..

alpha

…

apetag

…

audiofx

…

audioparsers

flacparse: fix buffer overflow in gst_flac_parse_frame_is_valid

2024-05-27 23:31:44 +00:00

auparse

…

autodetect

…

avi

avisubtitle: Fix size checks and avoid overflows when checking sizes

2024-12-03 18:57:06 +00:00

cutter

…

debugutils

navigationtest: Fix plugin description

2024-11-19 17:24:51 +00:00

deinterlace

common: Use more efficient versions of GstCapsFeatures API where possible

2024-09-26 19:26:18 +03:00

dtmf

rtpdtmfsrc: minor logging clean-up

2024-06-19 07:32:49 +00:00

effectv

…

equalizer

…

flv

flvmux: Fix off-by-one in month/day-of-the-week array

2024-12-01 09:49:29 +00:00

flx

…

goom

…

goom2k1

…

icydemux

…

id3demux

…

imagefreeze

imagefreeze: Add support for JPEG / PNG

2024-10-18 06:53:04 +00:00

interleave

gst-plugins-good: use g_sort_array() instead of deprecated g_qsort_with_data()

2024-09-02 22:31:34 +00:00

isomp4

qtdemux: Fix integer overflow when allocating the samples table for fragmented MP4

2024-12-03 21:01:41 +00:00

law

…

level

level: Fix integer overflow when filling LevelMeta

2024-12-02 19:08:49 +00:00

matroska

matroskademux: Put a copy of the codec data into the A_MS/ACM caps

2024-12-03 20:02:52 +00:00

monoscope

video: Don't overshoot QoS earliest time by a factor of 2

2024-09-13 19:52:52 +00:00

multifile

splitmuxsrc: Convert part reader to a bin with a non-async bus

2024-11-25 15:55:50 +02:00

multipart

…

replaygain

…

rtp

rtph26xpay: silence some maybe-unitialized warnings

2024-11-18 12:10:58 +11:00

rtpmanager

rtpsource: include config.h header to avoid g_memdup2 link issue

2024-11-21 01:11:22 +00:00

rtsp

rtspsrc: Update version of tcp-timestamp property to 1.24.10

2024-11-29 11:12:04 +00:00

shapewipe

video: Don't overshoot QoS earliest time by a factor of 2

2024-09-13 19:52:52 +00:00

smpte

…

spectrum

…

udp

udpsrc: protect cancellable from unlock/unlock_stop race

2024-11-15 10:33:44 +00:00

videobox

…

videocrop

…

videofilter

…

videomixer

video: Don't overshoot QoS earliest time by a factor of 2

2024-09-13 19:52:52 +00:00

wavenc

…

wavparse

wavparse: Check size before reading ds64 chunk

2024-12-03 18:03:43 +00:00

xingmux

…

y4m

…

meson.build

…