On Sat, Oct 31, 2020 at 03:16:23PM +0100, Andreas Rheinhardt wrote: > If avio_read() could read anything, it returns the number of bytes read, > even if it could not read as much as the caller desired. > apng_read_header() only checked the return value of its avio_read() calls > for being negative and this meant that it was possible for an incomplete > header to not be detected. The return value of the last successfull call > has been returned instead. This commit changes this. > > Fixes: OOM > Fixes: > 26608/clusterfuzz-testcase-minimized-ffmpeg_dem_APNG_fuzzer-4839491644424192 > > Signed-off-by: Andreas Rheinhardt <andreas.rheinha...@gmail.com> > --- > libavformat/apngdec.c | 8 ++++---- > 1 file changed, 4 insertions(+), 4 deletions(-)
I would have left the fix for the OOM and the 9 byte read seperate but the patch LGTM, please apply thx [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB The educated differ from the uneducated as much as the living from the dead. -- Aristotle
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
