wrapper/libavc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
libavc/decoder/mvc
History
Exact
Vaibhav Valvaiker 3916f3eea4 mvcdec: Heap overflow in 'ih264d_read_coeff4x4_cabac' 
In some erroneous fuzzer bistreams, the slice data requires more
parsing than what was implied by the distance between successive
start codes. The primary culprit is the NEXTBITS macro which requires
reading 4 additional bytes of the bitstream buffer. To alleviate
this, 16 bytes per 4x4 TU have been additionally allocated to the
bitstream buffer. Also, chroma bytes are added for 4:2:0/4:2:2.

This is in reference to commit-72315c1, where additional bytes were added to fix similar issue.

Bug = ossfuzz:42538616
Test: mvc_dec_fuzzer
2025-01-30 06:21:06 -08:00
..
imvcd.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_api.c mvcdec: Heap overflow in 'ih264d_read_coeff4x4_cabac' 2025-01-30 06:21:06 -08:00
imvcd_api_utils.c mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_api_utils.h mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_defs.h mvcdec: Fixed heap overflow during SEI parsing 2023-11-21 06:02:14 -08:00
imvcd_dpb_manager.c mvcdec: Fixes for OOB accesses of refPicList 2023-07-26 07:34:30 -07:00
imvcd_dpb_manager.h mvc: added check for incorrect pocs in DPB list 2022-10-06 15:22:16 +05:30
imvcd_error_handler.c mvc: added check for incorrect poc signaling 2022-09-23 14:44:41 +05:30
imvcd_error_handler.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_nalu_parser.c mvcdec: Integer overflow in imvcd_parse_subset_sps 2023-10-13 07:13:14 -07:00
imvcd_nalu_parser.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_slice_functions.c mvcdec: Fixes for OOB accesses of refPicList 2023-07-26 07:34:30 -07:00
imvcd_slice_functions.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_structs.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
imvcd_utils.c mvc: fixed an integer overflow in max_disp_seq computation 2022-08-31 20:30:58 +05:30
imvcd_utils.h Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00
libmvcdec.cmake Decoder: MVC decoding support added 2022-08-06 05:51:31 +00:00