[TIKA-3084] Migrate mp4 parsing to sannies' fork

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.24.1
• Assignee: Tim Allison
• Reporter: Tim Allison
• Created: 06/Apr/20 16:52
• Updated: 13/Apr/20 16:21
• Resolved: 13/Apr/20 15:00

Description

Our MP4 parser relies on googlecode's mp4parser. This hasn't been updated in a while (March 2017). We can fairly seamlessly move to Sannies' fork, which was last updated in Sept 2019.

I looked into this migration a while ago, and sannies had fixed several problems in the older parser, but it had introduced some new catastrophic vulnerabilities. Let's take a look now, and see where we are.