[FFmpeg-devel] [PATCH 3/3] avcodec/argo: Check for even dimensions

Michael Niedermayer michael at niedermayer.cc
Sat Jul 31 20:48:44 EEST 2021


Fixes: reading over the end
Fixes: 36346/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ARGO_fuzzer-5366943107383296

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
---
 libavcodec/argo.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/libavcodec/argo.c b/libavcodec/argo.c
index bbdb6ae15f..df9aab92a8 100644
--- a/libavcodec/argo.c
+++ b/libavcodec/argo.c
@@ -684,6 +684,11 @@ static av_cold int decode_init(AVCodecContext *avctx)
              return AVERROR_PATCHWELCOME;
     }
 
+    if (avctx->width % 2 || avctx->height % 2) {
+        avpriv_request_sample(s, "Odd dimensions\n");
+        return AVERROR_PATCHWELCOME;
+    }
+
     s->frame = av_frame_alloc();
     if (!s->frame)
         return AVERROR(ENOMEM);
-- 
2.17.1



More information about the ffmpeg-devel mailing list