CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-10-21 19:41:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
The official NGINX Open Source repository. https://nginx.org/
8260 commits 23 branches 600 tags 113 MiB
Find a file
Roman Arutyunyan 4712dee882 Mp4: fixed handling an empty run of chunks in stsc atom. 
A specially crafted mp4 file with an empty run of chunks in the stsc atom
and a large value for samples per chunk for that run, combined with a
specially crafted request, allowed to store that large value in prev_samples
and later in trak->end_chunk_samples while in ngx_http_mp4_crop_stsc_data().
Later in ngx_http_mp4_update_stsz_atom() this could result in buffer
overread while calculating trak->end_chunk_samples_size.

Now the value of samples per chunk specified for an empty run is ignored.
2025-02-05 20:40:47 +04:00
auto Configure: MSVC compatibility with PCRE2 10.43. 2025-02-05 20:40:47 +04:00
conf MIME: added image/avif type. 2021-10-25 20:49:15 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2023-07-24 18:04:41 +03:00
docs Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
misc Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
src Mp4: fixed handling an empty run of chunks in stsc atom. 2025-02-05 20:40:47 +04:00
.hgtags release-1.26.2 tag 2024-08-12 18:28:31 +04:00
LICENSE Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00
README Moved LICENSE and README to root. 2025-02-05 20:40:47 +04:00

README 

Documentation is available at http://nginx.org