[iso file] Read Box type data (0x64617461) at position 32034 has size 0 but is not at root/file level, skipping
==18913== Invalid read of size 8
==18913== at 0xF69508: ilst_item_Read (box_code_apple.c:119)
==18913== by 0x818970: gf_isom_box_read (box_funcs.c:1528)
==18913== by 0x818970: gf_isom_box_parse_ex (box_funcs.c:208)
==18913== by 0xF68BEA: ilst_Read (box_code_apple.c:47)
==18913== by 0x818970: gf_isom_box_read (box_funcs.c:1528)
==18913== by 0x818970: gf_isom_box_parse_ex (box_funcs.c:208)
==18913== by 0x819EEB: gf_isom_box_array_read_ex (box_funcs.c:1419)
==18913== by 0xFE4AC8: meta_Read (box_code_meta.c:128)
==18913== by 0x818970: gf_isom_box_read (box_funcs.c:1528)
==18913== by 0x818970: gf_isom_box_parse_ex (box_funcs.c:208)
==18913== by 0x819EEB: gf_isom_box_array_read_ex (box_funcs.c:1419)
==18913== by 0xFB433D: udta_Read (box_code_base.c:7998)
==18913== by 0x818970: gf_isom_box_read (box_funcs.c:1528)
==18913== by 0x818970: gf_isom_box_parse_ex (box_funcs.c:208)
==18913== by 0x819EEB: gf_isom_box_array_read_ex (box_funcs.c:1419)
==18913== by 0xF8F40C: moov_Read (box_code_base.c:3751)
==18913== Address 0x8 is not stack'd, malloc'd or (recently) free'd
Segmentation fault
ASAN says:
[iso file] Read Box type data (0x64617461) at position 32034 has size 0 but is not at root/file level, skipping
/home/dungnguyen/gueb-testing/gpac-head/src/isomedia/box_code_apple.c:119:26: runtime error: member access within null pointer of type 'struct GF_Box'
Thanks,
Manh Dung
The text was updated successfully, but these errors were encountered:
Hi,
Our fuzzer found a crash on MP4Box (the latest commit
987169bon master) due to a null pointer dereference bug on function ilst_item_Read (box_code_apple.c:119).PoC: https://github.com/strongcourage/PoCs/blob/master/gpac_987169b/PoC_npd_ilst_item_Read
Command: MP4Box -info $PoC
ASAN says:
Thanks,
Manh Dung
The text was updated successfully, but these errors were encountered: