diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2019-09-10 00:04:08 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2019-09-10 17:21:54 +0200 |
| commit | 10ea6c3116f95fc7f79d268ee2b839eea477337c (patch) | |
| tree | 0985ab8b99e32cf80ba7f0f6a4edd8d35e2909d2 | |
| parent | b794df43f3a521985f27d40974316db40b64cc88 (diff) | |
| download | ffmpeg-10ea6c3116f95fc7f79d268ee2b839eea477337c.tar.gz | |
avcodec/pnm_parser: Use memchr() in pnm_parse()
Fixes: Timeout (45sec -> 0.5sec)
Fixes: 16942/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PPM_fuzzer-5085393073995776
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/pnm_parser.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/libavcodec/pnm_parser.c b/libavcodec/pnm_parser.c index 94777d2cca..d19dbfe98c 100644 --- a/libavcodec/pnm_parser.c +++ b/libavcodec/pnm_parser.c @@ -95,8 +95,11 @@ retry: sync = bs; c = *bs++; if (c == '#') { - while (c != '\n' && bs < end) - c = *bs++; + uint8_t *match = memchr(bs, '\n', end-bs); + if (match) + bs = match + 1; + else + break; } else if (c == 'P') { next = bs - pnmctx.bytestream_start + skip - 1; pnmpc->ascii_scan = 0; |