Files
ffmpeg/libavformat
depthfirst-dev[bot] 8fd073176d avformat/rtmpproto: validate compressed SWF header length
Reject truncated compressed SWF input before attempting to read the
8-byte header in rtmp_calc_swfhash().

Compressed SWF data identified by the "CWS" signature must be at least
8 bytes long to contain the fixed header. Bail out early when the input
is shorter to avoid operating on malformed data.

*Vulnerability reported by Zhenpeng (Leo) Lin at depthfirst*
*Patch validated by Zheng Yu at depthfirst*

Fixes: DFVULN-612
(cherry picked from commit 52b78cd3fe)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2026-05-05 15:21:19 +02:00
..
2022-03-15 09:42:29 -03:00
2022-05-10 07:37:38 +02:00
2022-03-15 09:42:29 -03:00
2022-03-15 09:42:29 -03:00
2022-03-15 09:42:30 -03:00
2022-03-15 09:42:30 -03:00
2022-03-27 11:58:54 +02:00
2025-08-04 16:35:30 +02:00
2025-08-04 16:35:34 +02:00
2022-02-24 12:56:49 +01:00
2022-06-13 22:42:55 +02:00
2023-10-30 00:39:01 +01:00
2022-06-09 20:46:10 +02:00
2022-03-15 09:42:31 -03:00
2022-05-10 07:37:38 +02:00
2022-03-15 09:42:31 -03:00
2025-12-03 20:26:49 +01:00
2022-02-24 12:56:49 +01:00
2022-03-15 09:42:31 -03:00
2026-05-05 15:21:07 +02:00
2022-03-15 09:42:31 -03:00
2025-08-04 16:35:43 +02:00
2025-12-03 20:26:49 +01:00
2022-06-09 13:03:55 +03:00
2022-03-16 14:05:26 +02:00
2022-03-15 09:42:32 -03:00
2022-07-09 20:16:39 +02:00
2025-08-04 16:35:57 +02:00
2022-03-16 14:05:26 +02:00
2022-03-15 09:42:32 -03:00
2022-03-15 09:42:33 -03:00
2025-12-03 20:26:49 +01:00
2022-03-15 09:42:33 -03:00
2022-03-15 09:42:33 -03:00
2022-03-15 09:42:33 -03:00
2025-12-03 20:26:49 +01:00
2024-07-22 16:21:49 +02:00
2026-05-05 15:21:04 +02:00
2022-05-10 07:37:38 +02:00
2022-03-15 09:42:33 -03:00
2022-07-03 15:16:31 +02:00
2022-03-15 09:42:33 -03:00
2025-08-04 16:35:57 +02:00
2022-02-24 12:56:49 +01:00
2022-07-09 19:03:28 +02:00
2022-03-15 09:42:33 -03:00
2022-05-06 15:57:45 +02:00
2024-06-13 11:22:05 +02:00
2022-07-03 15:16:31 +02:00
2022-05-10 07:37:38 +02:00
2024-07-22 16:22:15 +02:00
2022-05-10 07:37:38 +02:00
2025-12-03 20:26:49 +01:00
2022-03-15 09:42:35 -03:00
2022-03-15 09:42:35 -03:00
2022-03-15 09:42:35 -03:00
2022-03-15 09:42:35 -03:00
2024-07-22 16:24:27 +02:00
2022-09-24 22:58:21 +02:00
2022-03-15 09:42:35 -03:00
2022-03-15 09:42:35 -03:00
2022-03-15 09:42:36 -03:00
2022-03-15 09:42:36 -03:00
2025-12-03 20:26:49 +01:00
2022-03-15 09:42:36 -03:00
2022-03-15 09:42:36 -03:00
2022-03-26 00:42:00 +02:00
2026-05-05 15:21:01 +02:00
2024-06-13 19:46:08 +02:00
2022-03-15 09:42:37 -03:00
2022-05-10 07:37:38 +02:00
2022-03-15 09:42:37 -03:00
2024-07-22 16:26:15 +02:00
2022-03-15 09:42:37 -03:00
2022-03-15 09:42:37 -03:00
2022-03-15 09:42:37 -03:00
2022-03-15 09:42:38 -03:00
2023-10-30 00:39:13 +01:00
2023-10-30 00:39:11 +01:00
2024-07-22 16:26:48 +02:00
2022-02-12 08:41:55 +08:00
2022-02-24 12:56:49 +01:00
2022-03-15 09:42:38 -03:00
2022-03-16 14:05:26 +02:00
2022-07-13 00:27:37 +02:00
2022-03-15 09:42:38 -03:00
2022-05-10 07:37:38 +02:00
2022-03-15 09:42:38 -03:00
2022-03-15 09:42:38 -03:00
2024-07-22 16:27:37 +02:00
2022-03-15 09:42:39 -03:00