New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

NorthBit-Metaphor.pdf for CVE-2015-3824 or 3864? #1

Open

9293746 opened this issue Jan 13, 2022 · 0 comments

9293746 commented Jan 13, 2022

Your quoted code doesn't seem to account for this patch: https://android.googlesource.com/platform/frameworks/av/+/463a6f807e187828442949d1924e143cf07778c6%5E%21/#F0

Your NorthBit-Metaphor.pdf says it's for CVE-2015-3864, but that's the CVE which was for the integer underflow caused by the faulty patch above. (https://blog.exodusintel.com/2015/08/13/stagefright-mission-accomplished/) Are you sure it's not supposed to say it's for CVE-2015-3824, the confusingly-similar CVE number that refers to the original bug before the faulty patch?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment