Fixes: Timeout (31sec -> 41ms)
Fixes: 18380/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5645210121404416
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
x = bytestream2_get_be32(&dgb);
}
+ if (ofsdst + (opcode - 1LL) * dstpitch > bytestream2_size_p(&pb))
+ return;
+
while (opcode) {
bytestream2_seek_p(&pb, ofsdst, SEEK_SET);
if (h && (j == (ncolumns - 1))) {
x = bytestream2_get_be32(&gb);
}
+ if (ofsdst + (opcode - 1LL) * dstpitch > bytestream2_size_p(&pb))
+ return;
+
while (opcode && bytestream2_get_bytes_left_p(&pb) > 1) {
bytestream2_seek_p(&pb, ofsdst, SEEK_SET);
if (h && (j == ncolumns - 1))