[vlc-devel] Security: Subtitle StripTags heap corruption, potentially exploitable. Patch included

Jean-Baptiste Kempf jb at videolan.org
Mon Jan 17 00:49:49 CET 2011


On Sun, Jan 16, 2011 at 10:58:17AM +0000, Harry Sintonen wrote :
> I ran into some corrupt mkv that'd crash vlc. Debugging revealed an issue 
> in StripTags() function: It can run past the input string termination  
> resulting in a heap corruption.
Applied, thanks a lot.

Best Regards,

Jean-Baptiste Kempf
+33 672 704 734

More information about the vlc-devel mailing list