Closed
Bug 1215715
Opened 9 years ago
Closed 9 years ago
OpenH264: UBSan signed integer overflow in [WelsDec::BsGetUe]
Categories
(Core :: Audio/Video: GMP, defect)
Core
Audio/Video: GMP
Tracking
()
RESOLVED
FIXED
People
(Reporter: tsmith, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: csectype-intoverflow, sec-audit, testcase)
Attachments
(2 files)
codec/decoder/core/inc/dec_golomb.h:182:37: runtime error: signed integer overflow: -2147483648 - 1 cannot be represented in type 'int'
|
Reporter | |
Comment 1•9 years ago
|
||
I have removed this undefined-behavior warning in the commit 3ee8784 at master branch, and the newest version of openh264v1.5 branch and v1.5-Firefox39 branch. Please help to verify it.
|
|
Reporter | |
Comment 3•9 years ago
|
||
Verified with commit: 3ee8784c0
|
|
Reporter | |
Updated•9 years ago
|
Keywords: csectype-intoverflow
|
|
Reporter | |
Updated•9 years ago
|
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
|
||
Updated•9 years ago
|
Group: media-core-security → core-security-release
|
|
||
Updated•9 years ago
|
Group: core-security-release
|
Assignee | |
Updated•2 years ago
|
Component: OpenH264 → Audio/Video: GMP
Product: External Software Affecting Firefox → Core
You need to log in
before you can comment on or make changes to this bug.
Description
•