mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-03-23 04:24:35 +02:00
avcodec/svq1dec: Check that there is data left after the header
Fixes: Timeout (21sec -> 255ms) Fixes: 20709/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SVQ1_fuzzer-5085075089915904 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 55e344ee5aa6f6e04e50bbac457e0ca53433ab75) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
parent
231a5e4528
commit
33440bd53b
@ -602,6 +602,8 @@ static int svq1_decode_frame_header(AVCodecContext *avctx, AVFrame *frame)
|
||||
if (skip_1stop_8data_bits(bitbuf) < 0)
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
if (get_bits_left(bitbuf) <= 0)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
s->width = width;
|
||||
s->height = height;
|
||||
|
Loading…
x
Reference in New Issue
Block a user