[FFmpeg-cvslog] tools/target_swr_fuzzer: Limit the number of samples

[Michael Niedermayer]

ffmpeg | branch: master | Michael Niedermayer <michael at niedermayer.cc> | Sun Sep 22 20:15:40 2024 +0200| [6190e826471fd9d3a66685000b5b3e4d8b163013] | committer: Michael Niedermayer

tools/target_swr_fuzzer: Limit the number of samples

Fixes: OOM and Timeout
Fixes: 71254/clusterfuzz-testcase-minimized-ffmpeg_SWR_fuzzer-5941896977907712

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6190e826471fd9d3a66685000b5b3e4d8b163013
---

 tools/target_swr_fuzzer.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tools/target_swr_fuzzer.c b/tools/target_swr_fuzzer.c
index b6cdb72a56..9192d4bed5 100644
--- a/tools/target_swr_fuzzer.c
+++ b/tools/target_swr_fuzzer.c
@@ -129,6 +129,9 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
      in_sample_nb = size / (in_ch_count * av_get_bytes_per_sample(in_sample_fmt));
     out_sample_nb = out_sample_nb % (av_rescale(in_sample_nb, 2*out_sample_rate, in_sample_rate) + 1);
 
+    if (in_sample_nb > 1000*1000 || out_sample_nb > 1000*1000)
+        goto end;
+
     out_data = av_malloc(out_sample_nb * out_ch_count * av_get_bytes_per_sample(out_sample_fmt));
     if (!out_data)
         goto end;