diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2025-05-08 23:10:52 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2025-05-09 22:27:04 +0200 |
| commit | ce1fd73d637a34551161fd8054ce3d410631982c (patch) | |
| tree | 2efe62f3b6ed8e7c0d055b617f3fd5338dd1e61c | |
| parent | 43926e026dd80918e1387801077c58cf02b6c99d (diff) | |
| download | ffmpeg-ce1fd73d637a34551161fd8054ce3d410631982c.tar.gz | |
avformat/iff: Check nb_channels == 0 in MHDR
Fixes: division by 0
Fixes: 395163171/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-542604339373670
Reviewed-by: Peter Ross <pross@xvid.org>
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/iff.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/libavformat/iff.c b/libavformat/iff.c index 7142a06e98..9402be48c9 100644 --- a/libavformat/iff.c +++ b/libavformat/iff.c @@ -510,6 +510,8 @@ static int iff_read_header(AVFormatContext *s) sta->codecpar->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_MONO; else if (sta->codecpar->ch_layout.nb_channels == 2) sta->codecpar->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_STEREO; + else if (sta->codecpar->ch_layout.nb_channels == 0) + return AVERROR_INVALIDDATA; break; case ID_ABIT: |