virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-04 22:03:09 +02:00
Code Issues Releases Activity

avcodec/4xm: Check frame_4cc before allocation

Browse Source 
Fixes: Timeout
Fixes: 403402798/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5012819292782592

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2025-05-11 19:41:18 +02:00
parent 8168ebdcc5
commit 4a9d907b5e
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libavcodec/4xm.c
View File

@ -927,8 +927,11 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *picture,
frame_size = buf_size - 12; frame_size = buf_size - 12;
} }
if ((ret = ff_get_buffer(avctx, picture, 0)) < 0) if ( frame_4cc == AV_RL32("ifr2") || frame_4cc == AV_RL32("ifrm")
return ret; || frame_4cc == AV_RL32("pfrm") || frame_4cc == AV_RL32("pfr2")) {
if ((ret = ff_get_buffer(avctx, picture, 0)) < 0)
return ret;
}
if (frame_4cc == AV_RL32("ifr2")) { if (frame_4cc == AV_RL32("ifr2")) {
picture->pict_type = AV_PICTURE_TYPE_I; picture->pict_type = AV_PICTURE_TYPE_I;