[FFmpeg-trac] #2982(avcodec:open): mlp: invalid write with max_alloc

[FFmpeg]

#2982: mlp: invalid write with max_alloc
------------------------------------+-----------------------------------
             Reporter:  ami_stuff   |                    Owner:
                 Type:  defect      |                   Status:  open
             Priority:  important   |                Component:  avcodec
              Version:  git-master  |               Resolution:
             Keywords:  mlp         |               Blocked By:
             Blocking:              |  Reproduced by developer:  1
Analyzed by developer:  0           |
------------------------------------+-----------------------------------
Changes (by cehoyos):

 * status:  new => open
 * reproduced:  0 => 1
 * component:  undetermined => avcodec
 * priority:  normal => important
 * version:  unspecified => git-master
 * keywords:   => mlp


Comment:

 next in ff_combine_frame() is a large negative number (because of
 {{{mp->bytes_left -= mp->pc.index;}}} in mlp_parser.c), making
 {{{pc->buffer[pc->last_index + next]}}} an invalid memory access.

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/2982#comment:1>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker