This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

The following commit(s) were added to refs/heads/master by this push:
     new 0aa316ec2c tools/target_dec_fuzzer: reduce BMP max pixels to avoid RLE 
timeout
0aa316ec2c is described below

commit 0aa316ec2c345d98b9bd1790251567a9bfe911de
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Mon Jun 1 00:29:00 2026 +0200
Commit:     michaelni <[email protected]>
CommitDate: Fri Jun 5 11:46:17 2026 +0000

    tools/target_dec_fuzzer: reduce BMP max pixels to avoid RLE timeout
    
    a valid RLE bitmap can decompress to far more than its input size, an early 
end-of-picture code
    leaves the rest of the canvas blank, thus we cannot add a check in bmp 
decode
    
    Fixes: Timeout
    Fixes: 
510821718/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BMP_DEC_fuzzer-5011979420106752
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 tools/target_dec_fuzzer.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c
index dff354545a..723f7996d7 100644
--- a/tools/target_dec_fuzzer.c
+++ b/tools/target_dec_fuzzer.c
@@ -220,6 +220,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t 
size) {
     case AV_CODEC_ID_BETHSOFTVID: maxpixels  /= 8192;  break;
     case AV_CODEC_ID_BFI:         maxpixels  /= 8192;  break;
     case AV_CODEC_ID_BINKVIDEO:   maxpixels  /= 32;    break;
+    case AV_CODEC_ID_BMP:         maxpixels  /= 16;    break;
     case AV_CODEC_ID_BONK:        maxsamples /= 1<<20; break;
     case AV_CODEC_ID_CAVS:        maxpixels  /= 1024;  break;
     case AV_CODEC_ID_CDTOONS:     maxpixels  /= 1024;  break;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to