diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-05-13 19:54:42 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2020-06-08 20:45:56 +0200 |
| commit | b7e5c8f67d82550daacce58fae97e1fe3d3fb9aa (patch) | |
| tree | f5742abad0880054fd40d2ec036836ba3d24acad /libavcodec/mediacodec_sw_buffer.h | |
| parent | 8e21379da110ca78f41ff2fe074fd771a1bcd1d0 (diff) | |
| download | ffmpeg-b7e5c8f67d82550daacce58fae97e1fe3d3fb9aa.tar.gz | |
avcodec/hcadec: Check or bound indexes
This causes indexes into scale_conversion_table to wrap around, alternatively they
could be clipped, the table be enlarged or we can error out. I have not found a document that specifies
what is the correct way to handle this
Fixes: out of array access
Fixes: 21727/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCA_fuzzer-5752477891952640.fuzz
Fixes: 22438/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCA_fuzzer-5640717790871552
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mediacodec_sw_buffer.h')
0 files changed, 0 insertions, 0 deletions