[FFmpeg-devel] [PATCH] avcodec/pngdec: Check compression method

[Michael Niedermayer]

On Fri, Nov 09, 2018 at 10:31:04AM +0100, Michael Niedermayer wrote:
> method 0 (inflate/deflate) is the only specified in the specification and the only supported
> 
> Fixes: Timeout
> Fixes: 10976/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PNG_fuzzer-5729372588736512
> 
> Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
> Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> ---
>  libavcodec/pngdec.c | 4 ++++
>  1 file changed, 4 insertions(+)

will apply this in a few days if there are no objections

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Many that live deserve death. And some that die deserve life. Can you give
it to them? Then do not be too eager to deal out death in judgement. For
even the very wise cannot see all ends. -- Gandalf
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20181113/284c2484/attachment.sig>