1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-13 21:28:01 +02:00
FFmpeg/libavformat
Michael Niedermayer 0bee216ad4 avformat/asfdec_o: Check size vs. offset in detect_unknown_subobject()
Fixes: signed integer overflow: 2314885530818453566 + 7503032301549264928 cannot be represented in type 'long'
Fixes: 26639/clusterfuzz-testcase-minimized-ffmpeg_dem_ASF_O_fuzzer-6024222100684800

Alternatively this could be ignored but then the end condition of the loop
would be hard to reach as avio_tell() is int64_t

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2021-01-20 21:26:46 +01:00
..
2020-10-03 21:50:59 +02:00
2019-12-12 19:25:33 +01:00
2020-11-04 23:30:53 +01:00
2020-10-25 23:44:26 +10:00
2020-11-09 14:58:38 +10:00
2019-12-12 19:25:33 +01:00
2020-10-06 00:01:35 +08:00
2020-10-06 00:01:27 +08:00
2020-11-11 17:05:24 +01:00
2019-12-12 19:25:33 +01:00
2019-12-12 19:25:33 +01:00
2020-12-24 15:25:00 +01:00
2020-03-17 16:05:49 +01:00
2019-12-12 19:25:33 +01:00
2020-03-17 16:04:42 +01:00
2020-10-24 19:11:12 +02:00
2020-11-04 23:30:53 +01:00
2020-03-17 16:08:13 +01:00
2021-01-16 08:53:27 +08:00
2020-12-12 00:13:58 +01:00
2020-10-07 22:16:09 +02:00
2020-09-24 13:38:28 +02:00
2020-12-21 01:27:33 -05:00
2020-10-25 09:49:26 +01:00
2020-09-18 11:30:03 +02:00
2020-06-18 21:31:13 +02:00
2019-10-08 13:47:16 +08:00
2020-09-03 18:11:00 +02:00
2020-11-22 17:45:17 +01:00
2020-09-03 18:03:18 +02:00
2020-10-24 19:11:12 +02:00
2020-03-17 22:46:36 +01:00
2020-10-25 09:49:31 +01:00
2020-06-06 00:25:00 +02:00
2018-02-11 20:03:33 +01:00
2018-02-11 20:03:33 +01:00
2020-02-16 12:54:57 +01:00
2018-05-21 19:43:04 -03:00
2018-05-21 19:43:04 -03:00
2019-03-20 18:38:48 +01:00
2020-09-13 16:05:01 +02:00
2020-06-13 00:43:09 +02:00
2021-01-16 08:51:31 +08:00
2020-02-20 14:41:26 +01:00
2020-03-12 18:47:39 +01:00
2020-12-05 00:08:33 +01:00
2020-07-26 16:47:01 +02:00
2020-10-21 17:21:41 +02:00