diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2024-03-20 03:51:05 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2024-03-25 21:41:26 +0100 |
| commit | c0f4abe2aa0117a10fb651f2c1c030d4cd516081 (patch) | |
| tree | 30d75a15180e61c593c114940d36497744236578 | |
| parent | b7cdaff7e23d547657ca9139dfae41e124e087b6 (diff) | |
| download | ffmpeg-c0f4abe2aa0117a10fb651f2c1c030d4cd516081.tar.gz | |
avformat/id3v2: read_uslt() check for the amount read
Fixes: timeout
Fixes: 66783/clusterfuzz-testcase-minimized-ffmpeg_dem_GENH_fuzzer-5356884892647424
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/id3v2.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/id3v2.c b/libavformat/id3v2.c index d83716dcf4..e0a7e3f3ea 100644 --- a/libavformat/id3v2.c +++ b/libavformat/id3v2.c @@ -370,7 +370,7 @@ static void read_uslt(AVFormatContext *s, AVIOContext *pb, int taglen, int encoding; int ok = 0; - if (taglen < 1) + if (taglen < 4) goto error; encoding = avio_r8(pb); |