ffmpeg/libavformat
Xi Wang b59ee5dcf1 rtmp: fix buffer overflows in ff_amf_tag_contents()
A negative `size' will bypass FFMIN().  In the subsequent memcpy() call,
`size' will be considered as a large positive value, leading to a buffer
overflow.

Change the type of `size' to unsigned int to avoid buffer overflow, and
simplify overflow checks accordingly.

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 4e692374f7962ea358c329de38c380103f8991b6)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2013-01-23 05:55:20 +01:00
..
2011-09-26 19:26:28 +02:00
2011-05-15 03:25:57 +02:00
2011-04-17 23:43:54 +02:00
2011-04-07 03:32:26 +02:00
2011-04-04 02:15:12 +02:00
2011-04-04 02:15:12 +02:00
2011-09-21 18:00:04 +02:00
2012-03-18 17:50:40 +01:00
2011-04-09 03:17:07 +02:00
2011-04-10 03:32:29 +02:00
2011-04-09 03:17:07 +02:00
2011-05-05 03:30:24 +02:00
2011-04-18 18:23:16 +02:00
2011-09-26 19:26:30 +02:00
2011-04-21 03:37:05 +02:00
2011-04-09 03:17:07 +02:00
2011-04-17 23:43:54 +02:00
2011-06-23 08:50:37 +02:00
2011-04-07 03:32:26 +02:00
2011-04-20 04:48:23 +02:00
2011-04-07 03:32:26 +02:00
2011-04-20 04:48:23 +02:00
2011-04-04 01:29:40 +02:00
2011-04-04 01:29:40 +02:00
2011-04-20 04:48:23 +02:00
2011-06-16 20:15:53 +02:00
2012-03-18 17:50:30 +01:00
2011-06-02 20:06:00 +01:00
2011-11-21 16:47:49 +01:00
2011-04-04 02:15:12 +02:00
2011-04-24 03:41:22 +02:00
2011-04-24 03:41:22 +02:00
2011-04-20 04:48:23 +02:00
2011-04-02 01:54:27 +02:00
2012-09-13 09:22:24 +02:00
2011-05-30 02:39:26 +02:00
2011-04-04 02:15:12 +02:00
2011-06-13 20:47:06 +02:00
2011-05-01 21:13:18 +02:00