virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-04 22:03:09 +02:00
Code Issues Releases Activity

avcodec/cri: Check bytestream2_get_buffer() for end

Browse Source 
Fixes: use of uninintialized memory
Fixes: 423673969/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CRI_fuzzer-5910856640823296

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2025-08-03 14:34:59 +02:00
committed by michaelni
parent d9bf3c141b
commit ea3851bebf
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
libavcodec/cri.c
View File

@ -220,7 +220,8 @@ static int cri_decode_frame(AVCodecContext *avctx, AVFrame *p,
break; break;
case 102:; case 102:;
int read_len = FFMIN(length, sizeof(codec_name) - 1); int read_len = FFMIN(length, sizeof(codec_name) - 1);
bytestream2_get_buffer(gb, codec_name, read_len)) if (read_len != bytestream2_get_buffer(gb, codec_name, read_len))
return AVERROR_INVALIDDATA;
length -= read_len; length -= read_len;
if (strncmp(codec_name, "cintel_craw", read_len)) if (strncmp(codec_name, "cintel_craw", read_len))
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;