This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/5.1
in repository ffmpeg.

commit 78cf72fd2b63755a702e4dc07afe543531a653a0
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Fri Sep 30 00:44:31 2022 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun Jun 21 02:56:27 2026 +0200

    avcodec/mlpdec: add max channels check
    
    Fixes: out of array access
    Fixes: 
51648/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer-4644322217164800
    
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit f1f78e3cf4da658225067d9ef35cdb25541e5fe2)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/mlpdec.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libavcodec/mlpdec.c b/libavcodec/mlpdec.c
index 6af63c4631..7edf6029b0 100644
--- a/libavcodec/mlpdec.c
+++ b/libavcodec/mlpdec.c
@@ -563,6 +563,10 @@ static int read_restart_header(MLPDecodeContext *m, 
GetBitContext *gbp,
         return AVERROR_INVALIDDATA;
     }
 
+    if (max_channel + 1 > MAX_CHANNELS || max_channel + 1 < min_channel)
+        return AVERROR_INVALIDDATA;
+
+
     s->min_channel        = min_channel;
     s->max_channel        = max_channel;
     s->max_matrix_channel = max_matrix_channel;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to