On Fri, Aug 02, 2019 at 10:46:04PM +1000, Peter Ross wrote: > On Thu, Aug 01, 2019 at 11:44:39PM +0200, Michael Niedermayer wrote: > > Fixes: Timeout (100sec -> 5sec) > > Fixes: > > 15073/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VP7_fuzzer-5649257362620416 > > > > Untested as none of the vp7 samples i found executes this codepath > > see attached. its all i can find :(
iam not sure iam making a mistake but these 2 files dont seem to execute
it
Tested with: AB is always 0 0 abort() is not reached
./ffmpeg -i vp7digimona_frame32.avi -f null -
--- a/libavcodec/vp8.c
+++ b/libavcodec/vp8.c
@@ -506,7 +506,7 @@ static int vp7_fade_frame(VP8Context *s, VP56RangeCoder *c)
int alpha = (int8_t) vp8_rac_get_uint(c, 8);
int beta = (int8_t) vp8_rac_get_uint(c, 8);
int ret;
-
+av_log(0,0, "AB %d %d\n", alpha, beta);
if (c->end <= c->buffer && c->bits >= 0)
return AVERROR_INVALIDDATA;
@@ -514,7 +514,7 @@ static int vp7_fade_frame(VP8Context *s, VP56RangeCoder *c)
int width = s->mb_width * 16;
int height = s->mb_height * 16;
AVFrame *src, *dst;
-
+abort();
if (!s->framep[VP56_FRAME_PREVIOUS] ||
!s->framep[VP56_FRAME_GOLDEN]) {
av_log(s->avctx, AV_LOG_WARNING, "Discarding interframe without a
prior keyframe!\n");
[...]
--
Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
Does the universe only have a finite lifespan? No, its going to go on
forever, its just that you wont like living in it. -- Hiranya Peiri
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
