Fixes: out of array access Fixes: 67021/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-4883576579489792
Unified · Split
| @@ -2072,6 +2072,8 @@ static int FUNC(pps) (CodedBitstreamContext *ctx, RWContext *rw, · 2071 unmodified lines | |||
| 2072 | 2072 | ||
| 2073 | tile_x = tile_idx % current->num_tile_columns; | 2073 | tile_x = tile_idx % current->num_tile_columns; |
| 2074 | tile_y = tile_idx / current->num_tile_columns; | 2074 | tile_y = tile_idx / current->num_tile_columns; |
| 2075 | if (tile_y >= current->num_tile_rows) | ||
| 2076 | return AVERROR_INVALIDDATA; | ||
| 2075 | 2077 | ||
| 2076 | ctu_x = 0, ctu_y = 0; | 2078 | ctu_x = 0, ctu_y = 0; |
| 2077 | for (j = 0; j < tile_x; j++) { | 2079 | for (j = 0; j < tile_x; j++) { |