mirror of
https://github.com/nginx/nginx.git
synced 2026-10-22 03:51:14 +00:00
The official NGINX Open Source repository.
https://nginx.org/
content-cachehttphttp2http3httpsload-balancermail-proxy-servernginxquicreverse-proxysecuritytcp-proxy-servertlsudp-proxy-serverweb-server
1ebe58a02e
Currently an error is triggered if any of the chunk runs in stsc are unordered. This however does not include the final chunk run, which ends with trak->chunks + 1. The previous chunk index can be larger leading to a 32-bit overflow. This could allow to skip the validity check "if (start_sample > n)". This could later lead to a large trak->start_chunk/trak->end_chunk, which would be caught later in ngx_http_mp4_update_stco_atom() or ngx_http_mp4_update_co64_atom(). While there are no implications of the validity check being avoided, the change still adds a check to ensure the final chunk run is ordered, to produce a meaningful error and avoid a potential integer overflow. |
||
|---|---|---|
| auto | ||
| conf | ||
| contrib | ||
| docs | ||
| misc | ||
| src | ||
| .hgtags | ||
| LICENSE | ||
| README | ||
Documentation is available at http://nginx.org