PR #21671 opened by michaelni
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21671
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21671.patch

Fixes: division by 0
Fixes: 
478005965/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-5748337088462848
Fixes: 
472226169/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-4528777763028992

Found-by:  continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>


>From 0b7877102da20f228e67b3ee61175c724520fb00 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <[email protected]>
Date: Fri, 6 Feb 2026 23:44:40 +0100
Subject: [PATCH] avformat/iff: Error out with 0 channel loudspeaker
 configuration

Fixes: division by 0
Fixes: 
478005965/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-5748337088462848
Fixes: 
472226169/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-4528777763028992

Found-by:  continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavformat/iff.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/libavformat/iff.c b/libavformat/iff.c
index fc40ef1aea..8dccd58b35 100644
--- a/libavformat/iff.c
+++ b/libavformat/iff.c
@@ -346,8 +346,10 @@ static int parse_dsd_prop(AVFormatContext *s, AVStream 
*st, uint64_t eof)
             if (config != 0xFFFF) {
                 if (config < FF_ARRAY_ELEMS(dsd_loudspeaker_config))
                     st->codecpar->ch_layout = dsd_loudspeaker_config[config];
-                if (!st->codecpar->ch_layout.nb_channels)
+                if (!st->codecpar->ch_layout.nb_channels) {
                     avpriv_request_sample(s, "loudspeaker configuration %d", 
config);
+                    return AVERROR_PATCHWELCOME;
+                }
             }
             break;
         }
-- 
2.52.0

_______________________________________________
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to