[FFmpeg-devel] [PATCH 1/3] avformat/dashdec: Check whitelist

Steven Liu lingjiujianke at gmail.com
Sat Jan 18 13:20:23 EET 2025


Michael Niedermayer <michael at niedermayer.cc> 于2025年1月18日周六 06:31写道:
>
> On Thu, Jan 16, 2025 at 04:39:49AM +0100, Michael Niedermayer wrote:
> > Fixes: CVE-2023-6602, V. DASH Playlist SSRF
> >
> > Found-by: Harvey Phillips of Amazon Element55 (element55)
> > Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> > ---
> >  libavformat/dashdec.c | 4 ++--
> >  1 file changed, 2 insertions(+), 2 deletions(-)
>
> will apply patch 1, ill wait a bit more for the others in case someone
> wants to test
Hi michael,

No problem, lgtm




Thanks


More information about the ffmpeg-devel mailing list