GStreamer streaming media framework "ugly" plugins
a4e2f84dd8
Backport upstream commit 9de204d7a0d7 to fix CVE-2026-53703
in the RealMedia demuxer (rmdemux). The patch adds length
validation checks to header parsing functions (parse__rmf,
parse_prop, parse_mdpr, parse_indx, parse_data, parse_cont,
parse_indx_data), changes their return types to gboolean to
allow callers to detect and skip invalid header packets, and
uses overflow-safe arithmetic for index size calculations.
Conflict resolution was needed because the RHEL codebase uses
int length parameters rather than the upstream gsize refactoring.
CVE: CVE-2026-53703
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-asfdemux-Error-out-on-files-with-more-than-32-stream.patch | ||
| 0002-rmdemux-Check-if-new-video-fragment-overflows-the-fr.patch | ||
| 0003-rmdemux-Avoid-integer-overflow-when-checking-if-enou.patch | ||
| 0004-rmdemux-Check-that-enough-data-is-available-before-p.patch | ||
| gating.yaml | ||
| gstreamer1-plugins-ugly-free.spec | ||
| sources | ||