wrapper/FFmpeg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

avformat/aaxdec: Check for overlaping segments

Browse source 
Fixes: Timeout
Fixes: 45875/clusterfuzz-testcase-minimized-ffmpeg_dem_AAX_fuzzer-6121689903136768

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit c16a0ed242)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2022-03-23 00:57:34 +01:00
parent 39f15f6663
commit 9db37b02ed
No known key found for this signature in database
GPG key ID: B18E8928B3948D64
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
libavformat/aaxdec.c
View file

@ -251,6 +251,10 @@ static int aax_read_header(AVFormatContext *s)
size = avio_rb32(pb);
a->segments[r].start = start + a->data_offset;
a->segments[r].end = a->segments[r].start + size;
if (r &&
a->segments[r].start < a->segments[r-1].end &&
a->segments[r].end > a->segments[r-1].start)
return AVERROR_INVALIDDATA;
} else
return AVERROR_INVALIDDATA;
}