diff options
author | Michael Niedermayer <michael@niedermayer.cc> | 2019-08-09 01:23:46 +0200 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2019-09-04 20:26:35 +0200 |
commit | 3223f4229a2bb2d096e9f3fdea61053dda5f62e8 (patch) | |
tree | fb6f359b76d780a522d76f84f1ffb54c1de6a637 /libavcodec/mpegpicture.h | |
parent | 3520590810f7e4ec4ccc652e78852d803f433933 (diff) | |
download | ffmpeg-3223f4229a2bb2d096e9f3fdea61053dda5f62e8.tar.gz |
avcodec/tiff: Enforce increasing offsets
This may break some valid tiff files, it appears the specification does not require
the offsets to be increasing. They increase in the 2 test files i have though except
the last offset which is 0 (an end marker) and for which a special case is added to
avoid asking for a sample for that end marker.
See: [FFmpeg-devel] [PATCH 2/2] avcodec/tiff: Detect infinite retry loop
for an alternative implementation
Fixes: Timeout (Infinite -> Finite)
Fixes: 15706/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-5114674904825856
This variant was requested by paul on IRC
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1fedba3c350a9eb22a1748c9056206d63d4d2dd9)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mpegpicture.h')
0 files changed, 0 insertions, 0 deletions