libavc/decoder/mvc
Ashwin Natesan 72315c11ac mvcdec: Heap overflow in 'ih264d_read_coeff4x4_cabac'
In some erroneous fuzzer bistreams, the slice data requires more
parsing than what was implied by the distance between successive
start codes. The primary culprit is the NEXTBITS macro which requires
reading 4 additional bytes of the bitstream buffer. To alleviate
this, 4 bytes per 4x4 TU have been additionally allocated to the
bitstream buffer.

Bug = ossfuzz:66989
Test: mvc_dec_fuzzer
2024-05-07 11:48:55 -07:00
..
imvcd.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_api.c mvcdec: Heap overflow in 'ih264d_read_coeff4x4_cabac' 2024-05-07 11:48:55 -07:00
imvcd_api_utils.c mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_api_utils.h mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_defs.h mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_dpb_manager.c mvcdec: Fixes for OOB accesses of refPicList 2023-07-26 07:34:30 -07:00
imvcd_dpb_manager.h mvc: added check for incorrect pocs in DPB list 2022-10-06 15:22:16 +05:30
imvcd_error_handler.c mvc: added check for incorrect poc signaling 2022-09-23 14:44:41 +05:30
imvcd_error_handler.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_nalu_parser.c mvcdec: Integer overflow in imvcd_parse_subset_sps 2023-10-13 07:13:14 -07:00
imvcd_nalu_parser.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_slice_functions.c mvcdec: Fixes for OOB accesses of refPicList 2023-07-26 07:34:30 -07:00
imvcd_slice_functions.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_structs.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_utils.c mvc: fixed an integer overflow in max_disp_seq computation 2022-08-31 20:30:58 +05:30
imvcd_utils.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
libmvcdec.cmake Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00