Fixes: Timeout Fixes: 403673829/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-5498240154009600
Unified · Split
| @@ -434,6 +434,9 @@ static int decode_subframe(TAKDecContext *s, int32_t *decoded, · 433 unmodified lines | |||
| 434 | return AVERROR_INVALIDDATA; | 434 | return AVERROR_INVALIDDATA; |
| 435 | } | 435 | } |
| 436 | 436 | ||
| 437 | if (get_bits_left(gb) < 2*10 + 2*size) | ||
| 438 | return AVERROR_INVALIDDATA; | ||
| 439 | |||
| 437 | s->predictors[0] = get_sbits(gb, 10); | 440 | s->predictors[0] = get_sbits(gb, 10); |
| 438 | s->predictors[1] = get_sbits(gb, 10); | 441 | s->predictors[1] = get_sbits(gb, 10); |
| 439 | s->predictors[2] = get_sbits(gb, size) * (1 << (10 - size)); | 442 | s->predictors[2] = get_sbits(gb, size) * (1 << (10 - size)); |