diff options
| author | CodeByMoriarty <czyrabriones4@gmail.com> | 2026-02-22 16:45:47 -0800 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2026-02-23 14:10:53 +0400 |
| commit | bb8ec295ab59451c19c0ae0c66882b4f84ff4ef7 (patch) | |
| tree | 6416978c1f5ce152ce5a0f3e3f0ca88aaefbba28 /src/mail/ngx_mail_auth_http_module.c | |
| parent | ec714d52bd4914d52a113234c16e1855d9ac7dcf (diff) | |
| download | nginx-bb8ec295ab59451c19c0ae0c66882b4f84ff4ef7.tar.gz nginx-bb8ec295ab59451c19c0ae0c66882b4f84ff4ef7.tar.bz2 | |
Mp4: validate sync sample values in stss atom.
Per ISO 14496-12 Section 8.6.2, sync sample numbers must be 1-based.
A zero-valued stss entry caused ngx_http_mp4_seek_key_frame() to
return a key_prefix exceeding the samples consumed in the forward
stts pass, which led the backward loop in ngx_http_mp4_crop_stts_data()
to walk past the beginning of the stts data buffer.
The fix validates each stss entry in ngx_http_mp4_seek_key_frame()
and returns an error if a zero sync sample is encountered. The
function signature is changed to return ngx_int_t so it can signal
errors to the caller.
Diffstat (limited to 'src/mail/ngx_mail_auth_http_module.c')
0 files changed, 0 insertions, 0 deletions
