This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 14604ec4b7 avformat/iff: reject invalid data_size in ANIM
14604ec4b7 is described below
commit 14604ec4b797248222cdd72a74d39abbdad9b343
Author: Michael Niedermayer <[email protected]>
AuthorDate: Wed Jul 1 06:18:07 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Sun Jul 5 04:22:13 2026 +0000
avformat/iff: reject invalid data_size in ANIM
Fixes:
520277418/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-6733106211258368
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavformat/iff.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/libavformat/iff.c b/libavformat/iff.c
index 74362d29f2..456b7e35da 100644
--- a/libavformat/iff.c
+++ b/libavformat/iff.c
@@ -992,6 +992,8 @@ static int iff_read_packet(AVFormatContext *s,
if (pb->eof_reached)
return AVERROR_EOF;
+ if (!data_size || data_size > INT_MAX)
+ return AVERROR_INVALIDDATA;
ret = av_get_packet(pb, pkt, data_size);
if (ret < 0)
return ret;
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
