avcodec/interplayacm: Check input for fill_block()
Fixes: Timeout
Fixes: 476763877/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_INTERPLAY_ACM_fuzzer-4515681843609600
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 2ab23ec729)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -423,6 +423,9 @@ static int fill_block(InterplayACMContext *s)
|
||||
unsigned i, ind;
|
||||
int ret;
|
||||
|
||||
if (get_bits_left(gb) < s->cols * 5)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
for (i = 0; i < s->cols; i++) {
|
||||
ind = get_bits(gb, 5);
|
||||
ret = filler_list[ind](s, ind, i);
|
||||
|
||||
Reference in New Issue
Block a user