[vlc-devel] [PATCH] M3u & pls demux: Check the size of each file line to prevent flooding the playlist.
magsoft at videolan.org
Wed Apr 24 13:09:44 CEST 2013
The exploit attached to the ticket #7361 shows that it is possible to
freeze VLC with a corrupted playlist file containing very long lines.
VLC indeed outputs to the logs a message giving the name of the media,
which is extremely long. This is not a security issue but as logging is
a costly operation, outputting this message takes a lot of time and
The attached patch proposes to set a maximum line length for the M3U and
PLS playlist format. It therefore prevent the playlist from being
flooded using these demux.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 2384 bytes
Desc: not available
More information about the vlc-devel