diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-10-23 00:24:01 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-02-02 14:18:21 +0100 |
| commit | 57c535996ebdb8d8c8c2eeda3a517661e2473d89 (patch) | |
| tree | 4a0dbd1ee0ae9baeb62824a167d43776f61ca8bc /libavformat/rmsipr.c | |
| parent | 1121985dbdd899dce53bf91289a379968041519d (diff) | |
| download | ffmpeg-57c535996ebdb8d8c8c2eeda3a517661e2473d89.tar.gz | |
avcodec/hevc_cabac: Limit value in coeff_abs_level_remaining_decode() tighter
The max depth is 16bps, the max allowed coefficient depth is depth+6
Fixes: signed integer overflow: 1074266112 + 1073725439 cannot be represented in type 'int'
Fixes: 26493/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5657763331702784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 7cf852b03c3ae6b61f89614371d2cb308d0b7f86)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/rmsipr.c')
0 files changed, 0 insertions, 0 deletions