POC:  ./MP4Box -dash 1000 POC5
LINK :https://drive.google.com/file/d/1NLI9NcY1k3XCYP61lfSvgMg4u1luvPYi/view?usp=share_link

```
[H263Dmx] garbage before first frame!
[Dasher] No template assigned, using $File$_dash$FS$$Number$
=================================================================
==2451487==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60e000000dfd at pc 0x7f34308e4397 bp 0x7ffd0fb1c690 sp 0x7ffd0fb1be38
READ of size 3 at 0x60e000000dfd thread T0
#0 0x7f34308e4396 in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827
#1 0x7f342e027817 in h263dmx_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2f5b817)
#2 0x7f342dc0a97c in gf_filter_process_task (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b3e97c)
#3 0x7f342dbc600a in gf_fs_thread_proc (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2afa00a)
#4 0x7f342dbd392e in gf_fs_run (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b0792e)
#5 0x7f342d4440ce in gf_dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x23780ce)
#6 0x561a9f343338 in do_dash /root/gpac2/gpac/applications/mp4box/mp4box.c:4807
#7 0x561a9f343338 in mp4box_main /root/gpac2/gpac/applications/mp4box/mp4box.c:6184
#8 0x7f342a898d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
#9 0x7f342a898e3f in __libc_start_main_impl ../csu/libc-start.c:392
#10 0x561a9f319cb4 in _start (/root/gpac2/gpac/bin/gcc/MP4Box+0xabcb4)

0x60e000000dfd is located 5 bytes to the right of 152-byte region [0x60e000000d60,0x60e000000df8)
allocated by thread T0 here:
#0 0x7f343095e867 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
#1 0x7f342db29c99 in gf_filter_pck_new_shared_internal (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2a5dc99)
#2 0x7f342db29ffa in gf_filter_pck_new_ref (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2a5dffa)
#3 0x7f342dcb8c89 in dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2becc89)
#4 0x7f342dc0a97c in gf_filter_process_task (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b3e97c)
#5 0x7f342dbc600a in gf_fs_thread_proc (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2afa00a)
#6 0x7f342dbd392e in gf_fs_run (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b0792e)
#7 0x7f342d4440ce in gf_dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x23780ce)
#8 0x561a9f343338 in do_dash /root/gpac2/gpac/applications/mp4box/mp4box.c:4807
#9 0x561a9f343338 in mp4box_main /root/gpac2/gpac/applications/mp4box/mp4box.c:6184
#10 0x7f342a898d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: heap-buffer-overflow ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy
Shadow bytes around the buggy address:
0x0c1c7fff8160: 00 00 00 00 00 00 00 00 00 00 07 fa fa fa fa fa
0x0c1c7fff8170: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff8180: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
0x0c1c7fff8190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff81a0: 00 00 00 00 fa fa fa fa fa fa fa fa 00 00 00 00
=>0x0c1c7fff81b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00[fa]
0x0c1c7fff81c0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
0x0c1c7fff81d0: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
0x0c1c7fff81e0: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff81f0: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa
0x0c1c7fff8200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable:           00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone:       fa
Freed heap region:       fd
Stack left redzone:      f1
Stack mid redzone:       f2
Stack right redzone:     f3
Stack after return:      f5
Stack use after scope:   f8
Global redzone:          f9
Global init order:       f6
Poisoned by user:        f7
Container overflow:      fc
Array cookie:            ac
Intra object redzone:    bb
ASan internal:           fe
Left alloca redzone:     ca
Right alloca redzone:    cb
Shadow gap:              cc
==2451487==ABORTING
```
heap-buffer-overflow on h263dmx_process()
This is a GitHub Issue
repo:gpac
owner:gpac
Title : heap-buffer-overflow on h263dmx_process()
Issue date:

--- start body ---
POC:  ./MP4Box -dash 1000 POC5
LINK :https://drive.google.com/file/d/1NLI9NcY1k3XCYP61lfSvgMg4u1luvPYi/view?usp=share_link

```
[H263Dmx] garbage before first frame!
[Dasher] No template assigned, using $File$_dash$FS$$Number$
=================================================================
==2451487==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60e000000dfd at pc 0x7f34308e4397 bp 0x7ffd0fb1c690 sp 0x7ffd0fb1be38
READ of size 3 at 0x60e000000dfd thread T0
#0 0x7f34308e4396 in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827
#1 0x7f342e027817 in h263dmx_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2f5b817)
#2 0x7f342dc0a97c in gf_filter_process_task (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b3e97c)
#3 0x7f342dbc600a in gf_fs_thread_proc (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2afa00a)
#4 0x7f342dbd392e in gf_fs_run (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b0792e)
#5 0x7f342d4440ce in gf_dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x23780ce)
#6 0x561a9f343338 in do_dash /root/gpac2/gpac/applications/mp4box/mp4box.c:4807
#7 0x561a9f343338 in mp4box_main /root/gpac2/gpac/applications/mp4box/mp4box.c:6184
#8 0x7f342a898d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
#9 0x7f342a898e3f in __libc_start_main_impl ../csu/libc-start.c:392
#10 0x561a9f319cb4 in _start (/root/gpac2/gpac/bin/gcc/MP4Box+0xabcb4)

0x60e000000dfd is located 5 bytes to the right of 152-byte region [0x60e000000d60,0x60e000000df8)
allocated by thread T0 here:
#0 0x7f343095e867 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
#1 0x7f342db29c99 in gf_filter_pck_new_shared_internal (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2a5dc99)
#2 0x7f342db29ffa in gf_filter_pck_new_ref (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2a5dffa)
#3 0x7f342dcb8c89 in dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2becc89)
#4 0x7f342dc0a97c in gf_filter_process_task (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b3e97c)
#5 0x7f342dbc600a in gf_fs_thread_proc (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2afa00a)
#6 0x7f342dbd392e in gf_fs_run (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x2b0792e)
#7 0x7f342d4440ce in gf_dasher_process (/root/gpac2/gpac/bin/gcc/libgpac.so.12+0x23780ce)
#8 0x561a9f343338 in do_dash /root/gpac2/gpac/applications/mp4box/mp4box.c:4807
#9 0x561a9f343338 in mp4box_main /root/gpac2/gpac/applications/mp4box/mp4box.c:6184
#10 0x7f342a898d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: heap-buffer-overflow ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy
Shadow bytes around the buggy address:
0x0c1c7fff8160: 00 00 00 00 00 00 00 00 00 00 07 fa fa fa fa fa
0x0c1c7fff8170: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff8180: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
0x0c1c7fff8190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff81a0: 00 00 00 00 fa fa fa fa fa fa fa fa 00 00 00 00
=>0x0c1c7fff81b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00[fa]
0x0c1c7fff81c0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
0x0c1c7fff81d0: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
0x0c1c7fff81e0: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
0x0c1c7fff81f0: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa
0x0c1c7fff8200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable:           00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone:       fa
Freed heap region:       fd
Stack left redzone:      f1
Stack mid redzone:       f2
Stack right redzone:     f3
Stack after return:      f5
Stack use after scope:   f8
Global redzone:          f9
Global init order:       f6
Poisoned by user:        f7
Container overflow:      fc
Array cookie:            ac
Intra object redzone:    bb
ASan internal:           fe
Left alloca redzone:     ca
Right alloca redzone:    cb
Shadow gap:              cc
==2451487==ABORTING
```
--- end body ---
