You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-15 14:13:16 +02:00
avcodec/pictordec: Check plane value before doing value/mask computations
Fixes integer overflow Fixes: 675/clusterfuzz-testcase-6722971232108544 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -77,10 +77,10 @@ static void picmemset(PicContext *s, AVFrame *frame, int value, int run,
|
|||||||
if (*y < 0) {
|
if (*y < 0) {
|
||||||
*y = s->height - 1;
|
*y = s->height - 1;
|
||||||
*plane += 1;
|
*plane += 1;
|
||||||
value <<= bits_per_plane;
|
|
||||||
mask <<= bits_per_plane;
|
|
||||||
if (*plane >= s->nb_planes)
|
if (*plane >= s->nb_planes)
|
||||||
return;
|
return;
|
||||||
|
value <<= bits_per_plane;
|
||||||
|
mask <<= bits_per_plane;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user