Try to mitigate asan failures. - Githubissues

strukturag / libde265

Open h.265 video codec implementation.

Other

1.7k stars 457 forks source link

Try to mitigate asan failures. #365

Open coldtobi opened 1 year ago

coldtobi commented 1 year ago

See #345 for my analysis and details…

(This PR is just for discussion.)

(The CVE references are obtained from the Debian security tracker, which links the issues.)

This makes the following POCs stop failing:

poc3 (#337)
poc7-1 (#341) CVE-2022-43239 (note: does NOT fix poc7-2)
poc8-2, poc8-3, poc8-4 (#342) CVE-2022-43244 (note: does NOT fix poc8-1)
poc11-1, poc11-2 (#345) CVE-2022-43249
poc12 (#346)
poc13 (#347) CVE-2022-43252
poc16 (#350)