Re: [CVE-2017-15186]: ffmpeg: Double free when ffmpeg parsing an craft AVI file to MKV file using ffvhuff decoder

[Salvatore Bonaccorso <carnil () debian org>]

Hi

On Fri, Oct 20, 2017 at 02:52:21PM +0200, Ludovic Courtès wrote:
> Hi,
>
> 连一汉 <lianyihan () 360 cn> skribis:
>
> > FFmpeg trigger double-free when it parsing an craft AVI file to MKV file using ffvhuff decoder.
>
> [...]
>
> > This was fixed with the following commit:
> > https://www.ffmpeg.org/download.html#releases
>
> Looks like this is not the URL you intended to share, is it?

The fix for this issue appears to be:

https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/df62b70de8aaa285168e72fe8f6e740843ca91fa

Regards,
Salvatore