diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-10-22 23:08:13 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-09-09 13:53:29 +0200 |
| commit | 6723d6db9bbc506bf42ba0d4d51bf0c220391a3d (patch) | |
| tree | 8eb1b8a76abd247dfce5da815dccda6dbdf4d348 /libavutil/buffer.c | |
| parent | 6379a6f34325c4e359bb0cafe09e7af9f3ca2789 (diff) | |
| download | ffmpeg-6723d6db9bbc506bf42ba0d4d51bf0c220391a3d.tar.gz | |
avformat/cafdec: Check that bytes_per_packet and frames_per_packet are non negative
These fields are not signed in the spec (1.0) so they cannot be negative
Changing bytes_per_packet to unsigned would not solve this as it is exported
as block_align which is signed
Fixes: Infinite loop
Fixes: 26492/clusterfuzz-testcase-minimized-ffmpeg_dem_CAF_fuzzer-5632087614554112
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 5eed718087f2ba307a3d1d294016d2ebae9230f3)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavutil/buffer.c')
0 files changed, 0 insertions, 0 deletions