Bug#657200: Endless loop in avformat_find_stream_info()

2012-01-24 Thread Matthieu Bedouet
I had a very similar issue with kfilemetadatareader (from kdelibs-bin) and mkv files. The backtrace looked the same. (kfilemetadatareader uses libstreamanalyzer that uses libavformat) Applying this patch to libavformat solved the problem: lavf: prevent infinite loops while flushing in avformat_fi

Bug#657200: Endless loop in avformat_find_stream_info()

2012-01-24 Thread Max Kellermann
Package: libavformat53 Version: 4:0.8-1 Severity: important When calling avformat_find_stream_info() on a broken mp3 file, libavformat enters an endless loop. This is a vulnerability that can be used as a remote DoS attack on radio players such as MPD, therefore severity important. Demo file: ht