[FFmpeg-cvslog] avcodec/eatgq: Check bytestream2_get_buffer() for failure
Michael Niedermayer
git at videolan.org
Mon Dec 2 04:28:23 EET 2024
ffmpeg | branch: master | Michael Niedermayer <michael at niedermayer.cc> | Mon Sep 23 20:52:02 2024 +0200| [4949e34d96cc751aedaace02123c2fb02b5ac174] | committer: Michael Niedermayer
avcodec/eatgq: Check bytestream2_get_buffer() for failure
Fixes: Use of uninitialized memory
Fixes: 71546/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EATGQ_fuzzer-5607656650244096
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4949e34d96cc751aedaace02123c2fb02b5ac174
---
libavcodec/eatgq.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/libavcodec/eatgq.c b/libavcodec/eatgq.c
index 3596d00e6f..efcad62df1 100644
--- a/libavcodec/eatgq.c
+++ b/libavcodec/eatgq.c
@@ -209,7 +209,8 @@ static int tgq_decode_mb(TgqContext *s, GetByteContext *gbyte,
dc[4] = bytestream2_get_byte(gbyte);
dc[5] = bytestream2_get_byte(gbyte);
} else if (mode == 6) {
- bytestream2_get_buffer(gbyte, dc, 6);
+ if (bytestream2_get_buffer(gbyte, dc, 6) != 6)
+ return AVERROR_INVALIDDATA;
} else if (mode == 12) {
for (i = 0; i < 6; i++) {
dc[i] = bytestream2_get_byte(gbyte);
More information about the ffmpeg-cvslog
mailing list