On Sat, Dec 15, 2018 at 09:31:21AM +0100, Paul B Mahol wrote: > On 12/15/18, Michael Niedermayer <mich...@niedermayer.cc> wrote: > > Fixes: OOM > > Fixes: > > 10307/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RASC_fuzzer-5393974559244288 > > > > Found-by: continuous fuzzing process > > https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg > > Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> > > --- > > libavcodec/rasc.c | 2 +- > > 1 file changed, 1 insertion(+), 1 deletion(-) > > > > diff --git a/libavcodec/rasc.c b/libavcodec/rasc.c > > index 67351dfd19..1b607ac31e 100644 > > --- a/libavcodec/rasc.c > > +++ b/libavcodec/rasc.c > > @@ -215,7 +215,7 @@ static int decode_move(AVCodecContext *avctx, > > bytestream2_skip(gb, 8); > > compression = bytestream2_get_le32(gb); > > > > - if (nb_moves > INT32_MAX / 16) > > + if (nb_moves > INT32_MAX / 16 || nb_moves > avctx->width * > > avctx->height) > > return AVERROR_INVALIDDATA; > > > > uncompressed_size = 16 * nb_moves; > > -- > > 2.19.2 > > > > _______________________________________________ > > ffmpeg-devel mailing list > > ffmpeg-devel@ffmpeg.org > > http://ffmpeg.org/mailman/listinfo/ffmpeg-devel > > > > OK
will apply thx [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB If you drop bombs on a foreign country and kill a hundred thousand innocent people, expect your government to call the consequence "unprovoked inhuman terrorist attacks" and use it to justify dropping more bombs and killing more people. The technology changed, the idea is old.
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel
