From fe2afafc7607b99fc0cd785f5b8c9f1bb124512c Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 10 Feb 2026 20:47:25 +0100 Subject: [PATCH] avcodec/interplayacm: Check input for fill_block() Fixes: Timeout Fixes: 476763877/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_INTERPLAY_ACM_fuzzer-4515681843609600 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer (cherry picked from commit 2ab23ec7295f3e6f71695467d00dba504dc3843c) Signed-off-by: Michael Niedermayer --- libavcodec/interplayacm.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavcodec/interplayacm.c b/libavcodec/interplayacm.c index 3704d1a2f2..0253f425de 100644 --- a/libavcodec/interplayacm.c +++ b/libavcodec/interplayacm.c @@ -423,6 +423,9 @@ static int fill_block(InterplayACMContext *s) unsigned i, ind; int ret; + if (get_bits_left(gb) < s->cols * 5) + return AVERROR_INVALIDDATA; + for (i = 0; i < s->cols; i++) { ind = get_bits(gb, 5); ret = filler_list[ind](s, ind, i);