diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-10-23 00:24:01 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-09-09 13:53:29 +0200 |
| commit | bb81e6eb55bc4ce702b8926dd3d32f9b3c202520 (patch) | |
| tree | 561c6f4cd0cd94cb0876dcdb223e0a73dbcafaa5 /libavutil/buffer.c | |
| parent | 44e692bb0a54d39b08bdbb2c0692bf1a06592194 (diff) | |
| download | ffmpeg-bb81e6eb55bc4ce702b8926dd3d32f9b3c202520.tar.gz | |
avcodec/hevc_cabac: Limit value in coeff_abs_level_remaining_decode() tighter
The max depth is 16bps, the max allowed coefficient depth is depth+6
Fixes: signed integer overflow: 1074266112 + 1073725439 cannot be represented in type 'int'
Fixes: 26493/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5657763331702784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 7cf852b03c3ae6b61f89614371d2cb308d0b7f86)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavutil/buffer.c')
0 files changed, 0 insertions, 0 deletions