diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2023-06-08 10:26:34 -0400 |
|---|---|---|
| committer | Leo Izen <leo.izen@gmail.com> | 2023-06-11 21:11:21 -0400 |
| commit | 1ec4553e355039ce69abf8e49389fa43f1f55fc5 (patch) | |
| tree | 8d0fad64be509e0d4576f7107d5b84c340414751 /libavcodec/rawenc.c | |
| parent | 25c937c0e03895866d9f5bcc659ad6afc53e20f9 (diff) | |
| download | ffmpeg-1ec4553e355039ce69abf8e49389fa43f1f55fc5.tar.gz | |
avformat/jpegxl_probe: check length instead of blindly reading
Enable the checked bitreader to avoid overread.
Also add a few checks in loops and between blocks so we exit instead of continued
execution.
Alternatively we could add manual checks so that no overread can happen. This would be
slightly faster but a bit more work and a bit more fragile
Fixes: Out of array accesses
Fixes: 59640/clusterfuzz-testcase-minimized-ffmpeg_dem_JPEGXL_ANIM_fuzzer-6584117345779712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/rawenc.c')
0 files changed, 0 insertions, 0 deletions