]> git.sesse.net Git - ffmpeg/commitdiff
avcodec/rasc: Check frame before clearing
authorMichael Niedermayer <michael@niedermayer.cc>
Thu, 3 Dec 2020 22:41:10 +0000 (23:41 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Fri, 8 Jan 2021 17:08:56 +0000 (18:08 +0100)
Fixes: null pointer dereference
Fixes: 27737/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RASC_fuzzer-5769028685266944
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/rasc.c

index cdf20a6db9a55d7804687f28af4084a152f13e1b..706940bf5f4c1f69a55e87c332f3972f82ff6d14 100644 (file)
@@ -70,6 +70,9 @@ static void clear_plane(AVCodecContext *avctx, AVFrame *frame)
     RASCContext *s = avctx->priv_data;
     uint8_t *dst = frame->data[0];
 
+    if (!dst)
+        return;
+
     for (int y = 0; y < avctx->height; y++) {
         memset(dst, 0, avctx->width * s->bpp);
         dst += frame->linesize[0];