avcodec/cbs_h265_syntax_template:

Fixes: Assertion width > 0 && width <= 32 failed Fixes: 71012/clusterfuzz-testcase-minimized-ffmpeg_BSF_HEVC_METADATA_fuzzer-6073354744823808

Michael Niedermayer committed 2 years ago

Commit 04387591 parent 8657eb91 file · +12 −0Browse files

Showing the changes to libavcodec (1 of 1 file). Show all

Unified · Split

         else
             length = FFMAX(0, (int)current->exponent_ref_display_width[i] +
                               (int)current->prec_ref_display_width - 31);
+        if (length > 32) {
+            av_log(ctx->log_ctx, AV_LOG_ERROR, "refDispWidthBits > 32 is not supported\n");
+            return AVERROR_PATCHWELCOME;
+        }
         if (length)
             ubs(length, mantissa_ref_display_width[i], 1, i);
         else
             else
                 length = FFMAX(0, (int)current->exponent_ref_viewing_distance[i] +
                                   (int)current->prec_ref_viewing_dist - 31);
+            if (length > 32) {
+                av_log(ctx->log_ctx, AV_LOG_ERROR, "refViewDistBits > 32 is not supported\n");
+                return AVERROR_PATCHWELCOME;
+            }
             if (length)
                 ubs(length, mantissa_ref_viewing_distance[i], 1, i);
             else

Keyboard shortcuts