mlt icon indicating copy to clipboard operation
mlt copied to clipboard

Melt is not robust to malformed input file

Open alcinos opened this issue 9 years ago • 0 comments

I've came accross several instances of melt xmi files that cause an outright segfault or cause a 100% usage of the cpu for infinite amount of time.

This can be a concern, especially if one tries to playback files that come from an untrusted source. It can also hint at some deficiency in the parsing process that may affects even regular users.

One such example can be found here : https://gist.github.com/alcinos/905f3134941dabd1c34009064563d502. It causes a segfault at parsing time due to a weird xml property. The crash happens for me on a call to strdup, but preliminary inspection with valgrind seems to show that memory corruption happen during the xml phase.

I have a few more samples like this, triggering different bugs, let me know if you want me to post them.

alcinos avatar Jan 05 '17 10:01 alcinos