From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id B301543E0D for ; Mon, 15 Aug 2022 19:04:24 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 6596968B93A; Mon, 15 Aug 2022 22:04:21 +0300 (EEST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-oln040092072047.outbound.protection.outlook.com [40.92.72.47]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 8AD9D68B5FF for ; Mon, 15 Aug 2022 22:04:14 +0300 (EEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Wr3bPUOVamhaQd2mnwk5VEDwBoNeU9iTT08ndV2yxa5tSBX26imFwEizCmjq4Wy9YXUpfMuaXYkJI/o+YpBD1MbDG1trrG7PL7b69+1F2lCgEKoTrKG0hI2GQG+u9dlXqmZBgVTjrhFxc2id/tslhczjcIWQVGS7/a55+YYx5mcjLrxmCLcYzsdrrJqcf+MVp9gF5H0qfCWWjV38TdLADoWr4BjL6NliAYTT4CzWxG8NA7L9iopZCYQ2x1MRhvH+sNfNkEazZU4WlrSwFIBgwzhKvXtvhhjTQRKUUJJchUT+mj8VERSAr+ECXmkaoPLi+IBxYi131I8IkLSVwZBFVg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=r3dG+Q6FfYZnE658DrkBK1oL0JCAVQWafmMbg1+64pA=; b=CVMo7s2hXL9lb3QYYaC0+Ud7/0ztGrfsdwme6YB6dtE4lQQ9VuqE64v7q/MOHV9+pn07vnsU36xZKV5EPVbwJyBlP5h7MFaYXveTamFZ9Kh3T8LSVF5kMPUoxGzipVs45rOMiev8ZXcXO78hepKa9qv9/3bLnUQgvYVCBAv41WlDYZFIUbEwrJ61ziVbQTiAjTp1zV0RdTyAq9gxjm3ZLbqnBHCVJkC/HHSN8bsjdJw4g4taUt113IIlevowQJetvWFWhQAhAcb1dAx1KunEyWWhzrKwO2E9Z81uQvfhCZSH2LTXPo3mpDA6Vp2BZFNqM5zVj7318ofpv1a9yl3yAw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r3dG+Q6FfYZnE658DrkBK1oL0JCAVQWafmMbg1+64pA=; b=nQ9vbHNF1+4C+v760MAFMnQvRENN9OaS914YmDWLX1jSRvoq/lQTgdQNt/KLCvkDMkusNEXnBVdVu4K9DgBt8LBkuPVI5G9ug1LfxtvHI8eVsp8DHbHtd0fKXRe6wDXltfMYUFQFWSmJtXAykl9jpZK0K2C+dRQ84c0SXmRlOHovbwk74mpzg17qJJxa1brLtyh5oEcXMbCXO+lLd9gIK/sF5wsepwVFc3/BBW7hQho4cawwZTNAVKoFR3o0r45+kU6PxiRBQVUMEV3JAkQqEbIZ/y7DVmlr1LOpEZshWdDhj9FU8NQ6d5Iw9Gg2H/8b8QjFBWXLfbDa9e20LKJt9g== Received: from DB6PR0101MB2214.eurprd01.prod.exchangelabs.com (2603:10a6:4:42::27) by DB7PR01MB4998.eurprd01.prod.exchangelabs.com (2603:10a6:10:28::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5504.22; Mon, 15 Aug 2022 19:04:13 +0000 Received: from DB6PR0101MB2214.eurprd01.prod.exchangelabs.com ([fe80::210e:b627:bcc9:8c46]) by DB6PR0101MB2214.eurprd01.prod.exchangelabs.com ([fe80::210e:b627:bcc9:8c46%11]) with mapi id 15.20.5504.028; Mon, 15 Aug 2022 19:04:12 +0000 Message-ID: Date: Mon, 15 Aug 2022 21:04:09 +0200 Content-Language: en-US To: ffmpeg-devel@ffmpeg.org References: <20220815175927.8743-1-michael@niedermayer.cc> <20220815175927.8743-3-michael@niedermayer.cc> From: Andreas Rheinhardt In-Reply-To: <20220815175927.8743-3-michael@niedermayer.cc> X-TMN: [KsgBVKrjNaQJ42IH2/T9zy+tPSXYMPoC] X-ClientProxiedBy: ZR0P278CA0136.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:40::15) To DB6PR0101MB2214.eurprd01.prod.exchangelabs.com (2603:10a6:4:42::27) X-Microsoft-Original-Message-ID: MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 4d7a5b51-8e87-43e7-3eae-08da7ef0efe6 X-MS-TrafficTypeDiagnostic: DB7PR01MB4998:EE_ X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?YmlBVW9YVEZkY3lzVFFpUHNjanhxSFJwTzBlRkN2S1kyOVpzTm5YUTVvVDVm?= =?utf-8?B?cHNKam81VGlWd1RrdmJQdVd0VkhMelRPMVZOOUFzU1JVcElCVE8xVmlZcHhQ?= =?utf-8?B?Qk9HbkZaMmEyZDUwNU5zZEdkSGRYL3VhL25aUEgwVE1EcHoxdk12bk1BZ0la?= =?utf-8?B?dU5KRWdZWmVWdEdRb2dOQUhpQ1lHSWNlWnkzeWdqcmk4ak1FTVNOZUNHUzR2?= =?utf-8?B?L25Va2pHZnE5aFlrZ2VScUp6UWlNWFdva2N6K0VNOUU0blRJMytOM3lrTDhW?= =?utf-8?B?UFJ2cGRvRUthRHpxT25ySFBJb2VHbXlFMTVTNDg5bnNhbnRPcHE4TE5MVCtJ?= =?utf-8?B?UEppeTBLYmZaWjc0K3M2UjlKMHZsUXNGMEVrVXFJeGVZaWpJbFRqNWhSbG1I?= =?utf-8?B?OGlWL0RvLy8xUjc1blBMM1FsalBGNU85eWFkNEo2eEtuN2kwTXdpbjlSUjdy?= =?utf-8?B?RTB3aWpMVlBkbUVrUTRlNnd3YnVsczlTdjN5ZmFVcDVKeUY1TzZlWlJ0Z3JL?= =?utf-8?B?Zml4L3VJenZ1Qmc2YWdlQ1ZkSjBjUWxLYk93Um5JZVV6TTNnTW5pc05PcUVC?= =?utf-8?B?OWFXaWZ6SU9STVdkMndicVk1SDVLMmdhVnFiNW8xc2hVaVIzcUpmMkdUUG0y?= =?utf-8?B?ZmNZY3prS0Q0TUkxVzY4ZHoycmFPMnlIKzlGc2lFeW1jWldmeW45OC9MbzZE?= =?utf-8?B?a21YTHByWDNRVkljK0Z5MkNSNGZ1V3dKZ3lxb0ZDRVdjU1NLTXV2OXprM3Y2?= =?utf-8?B?WDVaVHRJYnEwditHS1Z3bkgxMUJ0V2dMeTczQ3hQZVJ5RkVMby95WEVRbmhh?= =?utf-8?B?NE1RWkdOeitqMTVPd3gvdzMwSHdDS1A3Z2h5aVJnVy80VVZkaUY0N2QxUDhF?= =?utf-8?B?bEY1Ujk0aG9Tb0oycXp2SlNxZm5mRzVqUkZad3luSE9DZTBOT3BVbjNVaHpK?= =?utf-8?B?TDE2dkZXTDkvUFR3d09ZekpraWdPdnozdWVPdldJcXdBZjJiWUV3a0JlSVNm?= =?utf-8?B?enV2K1BSdmo2dzcxeC9kZ2lMMlhyaWZwLzdwRXJmL0h1SUtrdHAvcTZ3djhz?= =?utf-8?B?RERYMnljQ2RZYU5EdEd1N051NmVnOEl3aFovWld6SUJKSkNyWlJDNmtPMlc5?= =?utf-8?B?TUtYdndwWUFKQlRaanBtNGJjeUt6SXIvVG9yQ2g1QS82V3FNK1VLOXJ1bUt3?= =?utf-8?B?MlpVWHhjODNoaWNlL09mL3FZY2cvTndMYjU1RFQ4ZHNIMFVWMEdINDZVQlc0?= =?utf-8?B?aXBUWGg1b2h3ZjRuOGRESEROTlhLVCtlQlVCdi85R1VFSkJBUTRQMGh2QUxV?= =?utf-8?B?TTY2MElha3pGL09kMTFkSmNRUVVlWi9NcWEyVjVYaTBZMDkzbzhDdGpkMEw5?= =?utf-8?B?enhJQTVTSHpBUHE2M0EzeTdveVRrRUt6UDFOVlpVbGpLY2x3a0x2alhBY1dL?= =?utf-8?B?TnowYm9aTE5RV0ZhTXpNaTMyQkJiOFpUVTV1SmU5YlBwaVRtQTVXeVJEZ2Ey?= =?utf-8?B?b0Z1RGpGMDcybERqdllYdmhMcHRmRFppeFhnOFIxcnR5T05CYk9PSXNpU01Y?= =?utf-8?B?WCtIbkMxZEY5d0s0NVUwcjJ3UUlET08yb2ozdVpBYVI3bmlVNnpHb0kxaE1q?= =?utf-8?B?R2dSRVdYZStOTzhnQ2ZETHRFNGU3bEw2Mk85bjVFbFdnZ0w1NmZCaTl1RTBy?= =?utf-8?B?bGVyYkltZ2N5alRzYVl6Q0tGMlUyY0pFSS9NdUVQYVJVQUJremNoMGZSYUxs?= =?utf-8?Q?NJ5E/MS1+DCLM6hHJM=3D?= X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4d7a5b51-8e87-43e7-3eae-08da7ef0efe6 X-MS-Exchange-CrossTenant-AuthSource: DB6PR0101MB2214.eurprd01.prod.exchangelabs.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Aug 2022 19:04:12.4690 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR01MB4998 Subject: Re: [FFmpeg-devel] [PATCH 3/4] avcodec/h263dec: Sanity check against minimal I/P frame size X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: Michael Niedermayer: > Fixes: Timeout > Fixes: 49718/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-4874987894341632 > > Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg > Signed-off-by: Michael Niedermayer > --- > libavcodec/h263dec.c | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/libavcodec/h263dec.c b/libavcodec/h263dec.c > index 8db0eccd89..c03a55a4fd 100644 > --- a/libavcodec/h263dec.c > +++ b/libavcodec/h263dec.c > @@ -553,6 +553,8 @@ retry: > avctx->has_b_frames = !s->low_delay; > > if (CONFIG_MPEG4_DECODER && avctx->codec_id == AV_CODEC_ID_MPEG4) { > + if (s->pict_type != AV_PICTURE_TYPE_B && s->mb_num/2 > get_bits_count(&s->gb)) > + return AVERROR_INVALIDDATA; > if (ff_mpeg4_workaround_bugs(avctx) == 1) > goto retry; > if (s->studio_profile != (s->idsp.idct == NULL)) Is it possible that you wanted to use get_bits_left() here? - Andreas _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".