[FFmpeg-devel] [PATCH 1/3] avformat/flvdec: Check data before casting

Michael Niedermayer michael at niedermayer.cc
Sat Jun 12 18:55:18 EEST 2021


On Tue, Jun 08, 2021 at 09:29:39PM +0200, Michael Niedermayer wrote:
> Fixes: -nan is outside the range of representable values of type 'long'
> Fixes: signed integer overflow: 1000 * -9223372036854775808 cannot be represented in type 'long'
> Fixes: 34890/clusterfuzz-testcase-minimized-ffmpeg_dem_FLV_fuzzer-5334208657620992
> 
> Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
> Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> ---
>  libavformat/flvdec.c | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)

will apply patchset


[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Modern terrorism, a quick summary: Need oil, start war with country that
has oil, kill hundread thousand in war. Let country fall into chaos,
be surprised about raise of fundamantalists. Drop more bombs, kill more
people, be surprised about them taking revenge and drop even more bombs
and strip your own citizens of their rights and freedoms. to be continued
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20210612/efc5b5e0/attachment.sig>


More information about the ffmpeg-devel mailing list