sannies / mp4parser

A Java API to read, write and create MP4 files
Apache License 2.0
2.74k stars 563 forks source link

Improve robustness #412

Open tballison opened 4 years ago

tballison commented 4 years ago

I regret that I forked this project so that I could make some quick improvements for robustness for the next release of Apache Tika. Fuzzing found some infinite loops and allocations of a huge amount of memory. I'm not thrilled with how I solved these, but you might look at:

https://github.com/tballison/mp4parser/commit/016267dfadf7a8375a8b35c7f8327b0353839345

for some of the issues. Many, many thanks for such a fantastic library!