Backport of "oggstream: fix invalid ogg_packet->packet accesses, address invalid writes CVE" into 1.24 (!8050) · Merge requests · GStreamer / gstreamer · GitLab

Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.

Backport Bot requested to merge gstreamer-backport-bot/gstreamer:mr-8038-backport-into-1.24-pub-oggstream-fix-invalid-accesses into 1.24 Dec 03, 2024

Backport of !8038 (merged) "oggstream: fix invalid ogg_packet->packet accesses, address invalid writes CVE".

Commits:

1d217db7 vorbis_parse: check writes to GstOggStream.vorbis_mode_sizes
4129a992 oggstream: review and fix per-format min_packet_size