aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/videodsp.c
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2020-08-20 01:05:35 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2021-10-09 22:02:19 +0200
commite4b4cf4ba7ba9f66ffcc224fff40e4db6939fc8d (patch)
tree5270c290af422c81fa5cea501595bade93b0ad7b /libavcodec/videodsp.c
parent735255edb0c308b9e4e5a34c8332ee5d9719782d (diff)
downloadffmpeg-e4b4cf4ba7ba9f66ffcc224fff40e4db6939fc8d.tar.gz
avcodec/tiff: Restrict tag order based on specification
"The entries in an IFD must be sorted in ascending order by Tag. Note that this is not the order in which the fields are described in this document." This way various dimensions, sample and bit sizes cannot be changed at arbitrary times which reduces the potential for bugs. The tag reading code also on various places assumes that numerically previous tags have already been parsed, so this needs to be enforced one way or another. If this commit causes problems with real world files which are not easy to fix then some other form of checks are needed to ensure the various dependencies in the tag reading are not violated. Fixes: out of array access Fixes: 24825/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-6326925027704832 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit ad29f9e47cb848e11ee1d358d2bae15cd35ef04b) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/videodsp.c')
0 files changed, 0 insertions, 0 deletions