From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 9047A47514 for ; Fri, 13 Oct 2023 00:18:48 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 479FA68C856; Fri, 13 Oct 2023 03:18:46 +0300 (EEST) Received: from mail-qk1-f169.google.com (mail-qk1-f169.google.com [209.85.222.169]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 318EF68C69E for ; Fri, 13 Oct 2023 03:18:39 +0300 (EEST) Received: by mail-qk1-f169.google.com with SMTP id af79cd13be357-7740729ae12so102345285a.1 for ; Thu, 12 Oct 2023 17:18:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ob-encoder-com.20230601.gappssmtp.com; s=20230601; t=1697156317; x=1697761117; darn=ffmpeg.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=T9toq7IWahDsuarPCAzkATCpkXPCQSyjAl6VFGXB08M=; b=jm6/+JCFtQzFqm0UbDG3l2IgL7KVM8zCfm8yS8WErREYMG4xeYgOs6NjpJ/wNhxC4y ddKeu9o+82N/ndHfPr8VonWBYE6+0dHpb0MG9/9e3uyLbd+m/NdprBw0ETHjtCrP5RzZ O7acagXUefUI5qBAP+mnzWbX6RRPf42l6dArs6MGrjiSxatI0sF1b9OvdJnCF5gyo3uZ QKPh7XpTExQaEBBD1F3o7+JTPYXqKN5thqgFgeQrGA0dwpvT6Xo4nVxWW93H9T26jfVU 4CqEEMq+NuOQ1uD7+nR5LTuXKfE4vu35AtoV42sPkyux+RcXyRfw7pxtEHnS80/PZTYt MLcA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1697156317; x=1697761117; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=T9toq7IWahDsuarPCAzkATCpkXPCQSyjAl6VFGXB08M=; b=Fx8C4umQZzD5zW5TPCfRd8AVo3hnnczQBm200AgGLmj/0FAIa8WKu6dZsqzmoIIfkc XELNc5gGaL3P/TKdv53NB8y1NZ7W6knXAnyNPB8KPTsHOqhzBhzllZDNrwKgtJQUmSdV 5puBVvI2V3HdOAXqUl2hi3w//dNtMUPTwBCrq6s07I7GyfxQtBzU7tjvAXaSylIxa+my HF4s9PDLxINKZfY1Ovg5R0va1is8gejEyWnt5qOmdPx5GBAOqyL84OpseMUjz3joqLb/ oiI6C7/76M7u07sJtBdosxMjIdVkILoV1QCxaQUnVyOAFjkVhmWSSVJCwy3Keajq2N5o KZnA== X-Gm-Message-State: AOJu0YxILu30BOHltTDcAN8vZkavSGEPsx/3TrxJRM1xwcC6YJLiv0C8 mvsH3hrrEyAdFR96az8HgRlpYm49RMeHRX8CKMU/KPaJjwQF1aa5 X-Google-Smtp-Source: AGHT+IEwAXC6TD7H19ggRPoQe5Z6fkoavvLlZpzLtCcOAQEMiVUwwx0KRfnofyK79qwJObNBYC+1XfDvq+un/CuwmaQ= X-Received: by 2002:a0c:e38d:0:b0:651:679b:d35f with SMTP id a13-20020a0ce38d000000b00651679bd35fmr24283873qvl.43.1697156317031; Thu, 12 Oct 2023 17:18:37 -0700 (PDT) MIME-Version: 1.0 References: <20231012232759.5352-1-michael@niedermayer.cc> In-Reply-To: <20231012232759.5352-1-michael@niedermayer.cc> From: Kieran Kunhya Date: Fri, 13 Oct 2023 01:18:27 +0100 Message-ID: To: FFmpeg development discussions and patches X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [FFmpeg-devel] [PATCH 1/3] avcodec/evc_ps: Check chroma_format_idc X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On Fri, 13 Oct 2023 at 00:28, Michael Niedermayer wrote: > Fixes: out of array access > Fixes: > 62678/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-4858264984354816 > > Found-by: continuous fuzzing process > https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg > Signed-off-by > : > Michael Niedermayer > --- > libavcodec/evc_ps.c | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/libavcodec/evc_ps.c b/libavcodec/evc_ps.c > index c11b92d1c5..19895d404d 100644 > --- a/libavcodec/evc_ps.c > +++ b/libavcodec/evc_ps.c > @@ -179,6 +179,10 @@ int ff_evc_parse_sps(GetBitContext *gb, EVCParamSets > *ps) > // 2 - 4:2:2 > // 3 - 4:4:4 > sps->chroma_format_idc = get_ue_golomb_31(gb); > + if (sps->chroma_format_idc > 3) { > + ret = AVERROR_INVALIDDATA; > + goto fail; > + } > > sps->pic_width_in_luma_samples = get_ue_golomb_long(gb); > sps->pic_height_in_luma_samples = get_ue_golomb_long(gb); > -- > 2.17.1 > ok _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".