]> git.sesse.net Git - ffmpeg/commit
indeo4: Decode all or nothing of a band header.
authorMichael Niedermayer <michael@niedermayer.cc>
Thu, 17 May 2018 11:40:38 +0000 (13:40 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Fri, 25 May 2018 22:54:55 +0000 (00:54 +0200)
commit10c8521265da86118597336c5589e26de377a374
tree5eaa4136d376580da09cedab58c83e335649dfe1
parentf77eee67e25b13e32e899efb6fdf01719914353e
indeo4: Decode all or nothing of a band header.

This avoids inconsistent value combinations.
Alternatively it would be possible to add more checks and careful use of
temporary variables, but my try of this quickly seemed to become
a rather large change.
The disadvantage of this, is that the struct is copied back and forth.

Fixes: index 6 out of bounds for type 'const uint16_t [5][16]'
Fixes: 6557/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_INDEO4_fuzzer-4787296550256640
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/indeo4.c