[FFmpeg-devel] [PATCH] libavformat/oggdec.c: Check return value from avio_read()

[Michael Niedermayer]

On Mon, Mar 30, 2020 at 03:26:28PM -0700, John Rummell wrote:
> Refactoring my previous patch into smaller items. Starting with the one
> found by the Chromium fuzzers.

>  oggdec.c |    3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)
> ce9987e85bb11b197e37a6320c7efd8c939e1f42  0001-libavformat-oggdec.c-Check-return-value-from-avio_re.patch
> From 05e96b7a4a895acc5dd0e965c0360d5fdbfe917d Mon Sep 17 00:00:00 2001
> From: John Rummell <jrummell at chromium.org>
> Date: Mon, 30 Mar 2020 14:56:11 -0700
> Subject: [PATCH] libavformat/oggdec.c: Check return value from avio_read()
> 
> If the buffer doesn't contain enough bytes when reading a stream,
> fail rather than continuing on with unitialized data. Caught by
> Chromium fuzzers (crbug.com/1054229).
> ---
>  libavformat/oggdec.c | 3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)

will apply

thx

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety -- Benjamin Franklin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20200401/02bb8b03/attachment.sig>