[FFmpeg-devel] [PATCH 03/10] tools/target_swr_fuzzer: Limit the number of samples
Michael Niedermayer
michael at niedermayer.cc
Mon Sep 23 00:56:38 EEST 2024
Fixes: OOM and Timeout
Fixes: 71254/clusterfuzz-testcase-minimized-ffmpeg_SWR_fuzzer-5941896977907712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
---
tools/target_swr_fuzzer.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/tools/target_swr_fuzzer.c b/tools/target_swr_fuzzer.c
index b6cdb72a560..9192d4bed50 100644
--- a/tools/target_swr_fuzzer.c
+++ b/tools/target_swr_fuzzer.c
@@ -129,6 +129,9 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
in_sample_nb = size / (in_ch_count * av_get_bytes_per_sample(in_sample_fmt));
out_sample_nb = out_sample_nb % (av_rescale(in_sample_nb, 2*out_sample_rate, in_sample_rate) + 1);
+ if (in_sample_nb > 1000*1000 || out_sample_nb > 1000*1000)
+ goto end;
+
out_data = av_malloc(out_sample_nb * out_ch_count * av_get_bytes_per_sample(out_sample_fmt));
if (!out_data)
goto end;
--
2.46.1
More information about the ffmpeg-devel
mailing list