mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
avcodec/xsubdec: Check that RLE coded image and colors fit in the buffer
Fixes: Timeout Fixes: 1747/clusterfuzz-testcase-minimized-6035451213250560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
parent
cfd1ecdc0b
commit
2002436b0c
@ -91,6 +91,9 @@ static int decode_frame(AVCodecContext *avctx, void *data, int *data_size,
|
||||
// we just ignore it
|
||||
bytestream_get_le16(&buf);
|
||||
|
||||
if (buf_end - buf < h + 3*4)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
// allocate sub and set values
|
||||
sub->rects = av_mallocz(sizeof(*sub->rects));
|
||||
if (!sub->rects)
|
||||
|
Loading…
Reference in New Issue
Block a user