On Tue, Oct 20, 2020 at 07:54:23AM +1100, Peter Ross wrote: > On Mon, Oct 19, 2020 at 05:59:53PM +0200, Michael Niedermayer wrote: > > Fixes: Infinite loop > > Fixes: > > 26445/clusterfuzz-testcase-minimized-ffmpeg_dem_WTV_fuzzer-5125558331244544 > > > > Found-by: continuous fuzzing process > > https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg > > Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> > > --- > > libavformat/wtvdec.c | 5 +++++ > > 1 file changed, 5 insertions(+) > > > > diff --git a/libavformat/wtvdec.c b/libavformat/wtvdec.c > > index 83f510b92f..77908e6392 100644 > > --- a/libavformat/wtvdec.c > > +++ b/libavformat/wtvdec.c > > @@ -273,6 +273,11 @@ static AVIOContext * wtvfile_open2(AVFormatContext *s, > > const uint8_t *buf, int b > > "bad filename length, remaining directory entries > > ignored\n"); > > break; > > } > > + if (dir_length == 0) { > > + av_log(s, AV_LOG_ERROR, > > + "bad dir length, remaining directory entries > > ignored\n"); > > + break; > > + } > > if (48 + (int64_t)name_size > buf_end - buf) { > > av_log(s, AV_LOG_ERROR, "filename exceeds buffer size; > > remaining directory entries ignored\n"); > > break; > > -- > > looks good
will apply thx [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Freedom in capitalist society always remains about the same as it was in ancient Greek republics: Freedom for slave owners. -- Vladimir Lenin
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
