diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2025-08-09 14:05:19 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2025-08-12 12:21:09 +0200 |
| commit | 0469d68acb52081ca8385b844b9650398242be0f (patch) | |
| tree | 554fa211a4a73013857d8e92d8f2607a5a489e07 | |
| parent | 069201c53561795bc18e55d1e2eb84dc03cf1ed3 (diff) | |
| download | ffmpeg-0469d68acb52081ca8385b844b9650398242be0f.tar.gz | |
avcodec/exr: Check for pixel type consistency in DWA
Fixes: out of array access
Fixes: BIGSLEEP-436511754/testcase.exr
Found-by: Google Big Sleep
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/exr.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/libavcodec/exr.c b/libavcodec/exr.c index dea612a42b..67f971ff35 100644 --- a/libavcodec/exr.c +++ b/libavcodec/exr.c @@ -2086,6 +2086,17 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *picture, if ((ret = decode_header(s, picture)) < 0) return ret; + if (s->compression == EXR_DWAA || + s->compression == EXR_DWAB) { + for (int i = 0; i<s->nb_channels; i++) { + EXRChannel *channel = &s->channels[i]; + if (channel->pixel_type != s->pixel_type) { + avpriv_request_sample(s->avctx, "mixed pixel type DWA"); + return AVERROR_PATCHWELCOME; + } + } + } + switch (s->pixel_type) { case EXR_HALF: if (s->channel_offsets[3] >= 0) { |