Fixes: out of array access Fixes: 67021/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-4883576579489792
Unified · Split
| @@ -2072,6 +2072,8 @@ static int FUNC(pps) (CodedBitstreamContext *ctx, RWContext *rw, · 2071 unmodified lines | ||
| 2072 | 2072 | |
| 2073 | 2073 | tile_x = tile_idx % current->num_tile_columns; |
| 2074 | 2074 | tile_y = tile_idx / current->num_tile_columns; |
| 2075 | + if (tile_y >= current->num_tile_rows) | |
| 2076 | + return AVERROR_INVALIDDATA; | |
| 2075 | 2077 | |
| 2076 | 2078 | ctu_x = 0, ctu_y = 0; |
| 2077 | 2079 | for (j = 0; j < tile_x; j++) { |