summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <[email protected]>2020-05-04 00:04:49 +0200
committerMichael Niedermayer <[email protected]>2020-07-01 13:33:45 +0200
commita24bbffebe8570d056f2b287fa8fc992820248e1 (patch)
tree6cae7b39da208a2a19c68bf88355b1eedeb4a54e
parent0fdaecd8f0ae6bc5e710e69caa129157e3744a65 (diff)
avcodec/dsddec: Check channels
Fixes: division by zero Fixes: 21677/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DSD_MSBF_fuzzer-5712547983654912 Fixes: 21751/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DSD_LSBF_fuzzer-5197097180856320 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 2570a8777e7095358b10f679d35641e114a2ab33) Signed-off-by: Michael Niedermayer <[email protected]>
-rw-r--r--libavcodec/dsddec.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/libavcodec/dsddec.c b/libavcodec/dsddec.c
index 2c5c357acc..a2e038419f 100644
--- a/libavcodec/dsddec.c
+++ b/libavcodec/dsddec.c
@@ -44,6 +44,9 @@ static av_cold int decode_init(AVCodecContext *avctx)
int i;
uint8_t silence;
+ if (!avctx->channels)
+ return AVERROR_INVALIDDATA;
+
ff_init_dsd_data();
s = av_malloc_array(sizeof(DSDContext), avctx->channels);