Closed Bug 1224081 Opened 9 years ago Closed 9 years ago

OpenH264: UBSan signed integer overflow in [WelsDec::ParseResidualBlockCabac]

Categories

(Core :: Audio/Video: GMP, defect)

Product:
Core
Component:
Audio/Video: GMP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1215757

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-intoverflow, testcase)

Attachments

(2 files)

call_stack.txt
2.36 KB, text/plain
Details
test_case.264
682 bytes, application/octet-stream
Details
Attached file call_stack.txt — 
codec/decoder/core/src/parse_mb_syn_cabac.cpp:944:78: runtime error: signed integer overflow: 35866 * 64000 cannot be represented in type 'int'
Attached file test_case.264 — 

    
    

    
  
Oops! this was already logged. Sorry.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
Group: media-core-security → core-security-release
Group: core-security-release
Component: OpenH264 → Audio/Video: GMP
Product: External Software Affecting Firefox → Core

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: