On Thu, Mar 21, 2024 at 01:53:12AM +0800, Zhao Zhili wrote: > > > > -----Original Message----- > > From: ffmpeg-devel On Behalf Of Michael Niedermayer > > Sent: 2024年3月20日 21:02 > > To: FFmpeg development discussions and patches > > Subject: Re: [FFmpeg-devel] [PATCH 3/3] Revert "avcodec/h264_mp4toannexb_bsf: fix missing PS before IDR frames" > > > > On Wed, Mar 20, 2024 at 02:41:05PM +0800, Zhao Zhili wrote: > > > > > > > > > > On Mar 20, 2024, at 10:19, Michael Niedermayer wrote: > > > > > > > > This reverts commit d3aa0cd16f5e952bc346b7c74b4dcba95151a63a. > > > > > > > > Fixes: out of array write > > > > Fixes: 64407/clusterfuzz-testcase-minimized-ffmpeg_BSF_H264_MP4TOANNEXB_fuzzer-4966763443650560 > > > > > > > > The bsf code performs 2 iterations, the first counts how much space is needed > > > > than allocates > > > > and the 2nd pass copies into teh allocated space > > > > > > > > The reverted code reallocates sps/pps in the first pass in a data dependant way that leaves > > > > the 2nd pass in a different state then the first > > > > > > Sorry for the break. How to access the fuzz report details? > > > > ossfuzz made this one public already > > https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64407 > > I can't open the "Detailed Report" link. Does it provide asan details? yes, posted them to you privately, i didnt realize that wasnt public while the testcase is thx [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Many things microsoft did are stupid, but not doing something just because microsoft did it is even more stupid. If everything ms did were stupid they would be bankrupt already.