On Tue, Jun 06, 2017 at 01:33:31PM +0300, Martin Storsjö wrote: > From: Michael Niedermayer <[email protected]> > > The timeDataSize argument to aacDecoder_DecodeFrame() seems undocumented > and until 2016 04 (203e3f28fbebec7011342017fafc2a0bda0ce530) unused. > After that commit libfdk-aacdec interprets it as size in sample units > and memsets that on error. > > FFmpeg as well as others (like GStreamer) did interpret it as size in > bytes. > > Fixes: 1442/clusterfuzz-testcase-minimized-4540199973421056 (This requires > recent libfdk to reproduce) > > Found-by: continuous fuzzing process > https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg > --- > libavcodec/libfdk-aacdec.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-)
probably OK Diego _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
