Bug#884232: ffmpeg: CVE-2017-17555

Salvatore Bonaccorso carnil at debian.org
Wed Dec 13 05:32:57 UTC 2017


Control: reassign -1 src:aubio 0.4.5-1

Hi Carl,

On Tue, Dec 12, 2017 at 11:20:42PM +0100, Carl Eugen Hoyos wrote:
> This is not a bug in FFmpeg:
> aubio initializes libswresample with 2 channels and then passes data
>     that contains just one channel.
> 
>     That cant really work or how could it ?
>     swresample has no knowledge about what is in the array except what it
>     is told
>     There are multiple ways to provide this information to swr
> 
> (Answer from Michael on ffmpeg-security)

Thanks for your's and MIchael's analysis/comment. So let's reassign
this to src:aubio since it would need to be fixed there.

Regards,
Salvatore



More information about the pkg-multimedia-maintainers mailing list