| Message ID | 20200110220353.3043-3-michael@niedermayer.cc |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [FFmpeg-devel,1/3] avcodec/ralf: Fix integer overflow in apply_lpc() | expand |
| Context | Check | Description |
|---|---|---|
| andriy/ffmpeg-patchwork | success | Make fate finished |
On Fri, Jan 10, 2020 at 11:03:53PM +0100, Michael Niedermayer wrote: > APE in its highest compression mode is really slow so even one frame > of millions of samples takes a long time > > Fixes: Timeout (too long -> 3sec) > Fixes: 19937/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5751668818051072 > > Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> > --- > tools/target_dec_fuzzer.c | 5 ++++- > 1 file changed, 4 insertions(+), 1 deletion(-) will apply [...]
diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c index 2d9d28b46d..ccbb949b29 100644 --- a/tools/target_dec_fuzzer.c +++ b/tools/target_dec_fuzzer.c @@ -93,7 +93,7 @@ const uint32_t maxiteration = 8096; const uint64_t maxpixels_per_frame = 4096 * 4096; uint64_t maxpixels; -const uint64_t maxsamples_per_frame = 256*1024*32; +uint64_t maxsamples_per_frame = 256*1024*32; uint64_t maxsamples; static const uint64_t FUZZ_TAG = 0x4741542D5A5A5546ULL; @@ -133,6 +133,9 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { case AVMEDIA_TYPE_VIDEO : decode_handler = avcodec_decode_video2; break; case AVMEDIA_TYPE_SUBTITLE: decode_handler = subtitle_handler ; break; } + switch (c->id) { + case AV_CODEC_ID_APE: maxsamples_per_frame /= 256; break; + } maxpixels = maxpixels_per_frame * maxiteration; maxsamples = maxsamples_per_frame * maxiteration; switch (c->id) {
APE in its highest compression mode is really slow so even one frame of millions of samples takes a long time Fixes: Timeout (too long -> 3sec) Fixes: 19937/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5751668818051072 Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> --- tools/target_dec_fuzzer.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-)