mirror of
https://github.com/nginx/nginx.git
synced 2026-10-21 03:21:08 +00:00
The official NGINX Open Source repository.
https://nginx.org/
content-cachehttphttp2http3httpsload-balancermail-proxy-servernginxquicreverse-proxysecuritytcp-proxy-servertlsudp-proxy-serverweb-server
7362d01658
While cropping an stsc atom in ngx_http_mp4_crop_stsc_data(), a 32-bit integer overflow could happen, which could result in incorrect seeking and a very large value stored in "samples". This resulted in a large invalid value of trak->end_chunk_samples. This value is further used to calculate the value of trak->end_chunk_samples_size in ngx_http_mp4_update_stsz_atom(). While doing this, a large invalid value of trak->end_chunk_samples could result in reading memory before stsz atom start. This could potentially result in a segfault. |
||
|---|---|---|
| auto | ||
| conf | ||
| contrib | ||
| docs | ||
| misc | ||
| src | ||
| .hgtags | ||