]> git.sesse.net Git - ffmpeg/commit
projects / ffmpeg / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bcc7d14) | patch
avformat/mov: Extend data_size check in mov_read_udta_string()
authorMichael Niedermayer <michael@niedermayer.cc>
Sat, 12 Dec 2020 23:08:46 +0000 (00:08 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Mon, 1 Mar 2021 19:19:15 +0000 (20:19 +0100)
commit74c4c539538e36d8df02de2484b045010d292f2c
tree3dadef34ab6547435a92927e397afee845e217a0tree | snapshot
parentbcc7d14453ea2bafa6569a07002943808f2a396acommit | diff
avformat/mov: Extend data_size check in mov_read_udta_string()

Fixes: signed integer overflow: -2147483634 - 16 cannot be represented in type 'int'
Fixes: 28322/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5711888402612224
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/mov.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.