diff options
| author | Leo Izen <leo.izen@gmail.com> | 2023-12-22 21:50:44 -0500 |
|---|---|---|
| committer | Leo Izen <leo.izen@gmail.com> | 2023-12-27 10:10:09 -0500 |
| commit | fb54c89a0df3d63198678b17d64aef4dbb599109 (patch) | |
| tree | cd314c2f88d08e2e0356170647036c9a404db2b4 /libavformat/aea.c | |
| parent | 4fee63b241e0dd254436bf38df8b0635b2b666d8 (diff) | |
| download | ffmpeg-fb54c89a0df3d63198678b17d64aef4dbb599109.tar.gz | |
avcodec/jpegxl_parser: check ANS cluster alphabet size vs bundle size
The specification doesn't mention that clusters cannot have alphabet
sizes greater than 1 << bundle->log_alphabet_size, but the reference
implementation rejects these entropy streams as invalid, so we should
too. Refusing to do so can overflow a stack variable that should be
large enough otherwise.
Fixes #10738.
Found-by: Zeng Yunxiang and Li Zeyuan
Signed-off-by: Leo Izen <leo.izen@gmail.com>
Diffstat (limited to 'libavformat/aea.c')
0 files changed, 0 insertions, 0 deletions