[Ffmpeg-devel] [PATCH] Fixes dv.c out of bounds memory access

[Roman Shaposhnick]

On Thu, Apr 20, 2006 at 09:14:10AM +0200, Guillaume Poirier wrote:
> Hi,
> 
> Chsherrick at aol.com wrote:
> > We had a corrupt file that caused dv.c (in libavcodec) to reference out of  
> > bounds memory.  Our corrupt file was sending 16 byte packets, and  
> > dv_frame_profile() looked a bit beyond that without checking the size  first.
> 
> Can you upload a sample in order for us to reproduce your problem on
> our machines?

  Thanks for asking. I'd be happy to incorporate the original patch into the
  DV changes I'm working on right now (albeit very, very slowly,
  because of the LinuxTAG excitement) but I need a testcase.

Thanks,
Roman.