Created attachment 8594827 [details] testcase.264 Tested with https://github.com/cisco/openh264/commit/864ff21021
I just replicated this crash with the master branch, but I cannot replicate it with the v1.4-Firefox38 branch (gives a 'Feature not supported' message). So we need to fix this before the next version, but this shouldn't hold up the v1.4 rollout.
This problem has been fixed in commit dac1363
please kindly check if it works. thanks
Tracking for 38+ since this is sec-critical. Christoph, which platforms and versions are affected? Do you need extra QA help?
No Firefox versions are affected. This is a bug in code that was added since v1.4 of OpenH264 was made.
unmarking tracking as this applies to an unreleased version of the plugin.
This should now be fixed by the rollout of OpenH264 v1.4 - bug 1133784.
Closed this by mistake, this bug was found in post-1.4 code.
Fixed. Tested with https://github.com/cisco/openh264/commit/7d7a5c28bc
Marking as fixed per comment 10.