An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html
Go to file
Roman Arutyunyan 4712dee882 Mp4: fixed handling an empty run of chunks in stsc atom.
A specially crafted mp4 file with an empty run of chunks in the stsc atom
and a large value for samples per chunk for that run, combined with a
specially crafted request, allowed to store that large value in prev_samples
and later in trak->end_chunk_samples while in ngx_http_mp4_crop_stsc_data().
Later in ngx_http_mp4_update_stsz_atom() this could result in buffer
overread while calculating trak->end_chunk_samples_size.

Now the value of samples per chunk specified for an empty run is ignored.
2025-02-05 20:40:47 +04:00
auto Configure: MSVC compatibility with PCRE2 10.43. 2025-02-05 20:40:47 +04:00
conf MIME: added image/avif type. 2021-10-25 20:49:15 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2023-07-24 18:04:41 +03:00
docs Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
misc Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
src Mp4: fixed handling an empty run of chunks in stsc atom. 2025-02-05 20:40:47 +04:00
.hgtags release-1.26.2 tag 2024-08-12 18:28:31 +04:00
LICENSE Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
README Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00

Documentation is available at http://nginx.org