From patchwork Tue Mar 22 23:07:09 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andreas Rheinhardt X-Patchwork-Id: 34911 Delivered-To: ffmpegpatchwork2@gmail.com Received: by 2002:ab0:5fda:0:0:0:0:0 with SMTP id g26csp763764uaj; Tue, 22 Mar 2022 16:07:33 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxl0iNZTV9spW6GCVy7LNu+JCBmxm2uh5t9ptaWRD99KONocbjuXc9iS4zDgTawYtWGedkz X-Received: by 2002:a17:907:7287:b0:6df:8f48:3f76 with SMTP id dt7-20020a170907728700b006df8f483f76mr27211883ejc.411.1647990453145; Tue, 22 Mar 2022 16:07:33 -0700 (PDT) Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org. [79.124.17.100]) by mx.google.com with ESMTP id t1-20020a50c241000000b004193683ff98si6879341edf.204.2022.03.22.16.07.32; Tue, 22 Mar 2022 16:07:33 -0700 (PDT) Received-SPF: pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) client-ip=79.124.17.100; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@outlook.com header.s=selector1 header.b=jTG+lkdH; arc=fail (body hash mismatch); spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org; dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 3C8C168AA6A; Wed, 23 Mar 2022 01:07:28 +0200 (EET) X-Original-To: ffmpeg-devel@ffmpeg.org Delivered-To: ffmpeg-devel@ffmpeg.org Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05olkn2040.outbound.protection.outlook.com [40.92.91.40]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 9955568AFE2 for ; Wed, 23 Mar 2022 01:07:21 +0200 (EET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JtrAc0DRLPxmOvwiOWhLz8bQj0bfrK5J4Vrevr7t1FMTNNBPUfIe7rKYcsdITz7Ub8Yk11X3t6ftdN352tDDRKyqbCqFlM3IcB9bVrcSWGvGAxCiGYoAatkx+pc/PMqvK0AMrK5sMHvXt2tvL8cNccpsWVo5JBeWIe0ioxDubEYi/6g6HwhG7I5nrHiD4WQcfLQZbpudSrgujrSSubCnpTW7a6wr3mv4m0eplKufc16eu5bjjhvbuw8YMDPauxEscf8Qse9cReNGABgln1MRyR3i4GGRlC7T3n24OizJBl/PVUutxuYKf++hSMlv4TRNOj8d3NbhLkdLGqW2fizF9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yNzH4+ZSCMqPqATYas0Hr+XenwoHrzy8WhmOYW8FbG4=; b=jpplvyT4NkCdVIDKW6uEKYwSMnzT/+d0MoiKL56csPaOtiVWj4T0rhZtztjIKVBrMHhixQ+jGBz1g541qDbwJE94KIXnwCv7R3vTSqvj5BOn3xM+dNEuGZ0OKh2RcjR++QGn2UVfo5x20R4ydMgpy1IdXSWyRw28Kqwy9mpW/SkzCxAzPrW7YivLsrBD8qCml8bNKMRP6moZHvFkGX4KCwHXGMfP7picY+JtG7NNbaq5PSP7O/lVUc7AYqP8ByUeSr9V9x5vQlPRojcx7LdoGAii6QOu+GrOggdBbL+dfB7Pb1vhqeWCFCpclZ9DkMZsvRqjVQh7Hpyjt0vJmwPfZQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yNzH4+ZSCMqPqATYas0Hr+XenwoHrzy8WhmOYW8FbG4=; b=jTG+lkdHAvNLpUwCKNht+Ctiqe2TZfUapvZ8AViv8aHYtBsTbfpXvOeFTXK5GU7qF4VwV/G1bK3xzHbqEm06ul8/64994TJuMAhSdAPj9KpWd3NiZN8QqFD5R2B0tCRb/3WlyDG7q9G3HSfmEjAaL6CckuFbJSk0AGZjNlm/fjmc4wzFPPLxybMtjNmzXj5V63HjIFnCrrg80S5CSlYPTgc86RSPoaqTac6itcCMkvPymd9JHd6C7QaaUNnn9SD/GydaEY8J9mdhiapVFkL1BjErWT/h7YaqTi9P+ySXSRdAW2k1Jg5WCZ1DsxIN5XZUEzAOuc5VpS1BhhnDw8mvNQ== Received: from AS1PR01MB9564.eurprd01.prod.exchangelabs.com (2603:10a6:20b:4d1::16) by AM0PR01MB4468.eurprd01.prod.exchangelabs.com (2603:10a6:208:f4::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.17; Tue, 22 Mar 2022 23:07:19 +0000 Received: from AS1PR01MB9564.eurprd01.prod.exchangelabs.com ([fe80::9070:a5fd:e532:bdf8]) by AS1PR01MB9564.eurprd01.prod.exchangelabs.com ([fe80::9070:a5fd:e532:bdf8%3]) with mapi id 15.20.5081.022; Tue, 22 Mar 2022 23:07:19 +0000 From: Andreas Rheinhardt To: ffmpeg-devel@ffmpeg.org Date: Wed, 23 Mar 2022 00:07:09 +0100 Message-ID: X-Mailer: git-send-email 2.32.0 X-TMN: [Z2K3qfv66jR/0ZdBAJaOLjBjkJCWoBsI] X-ClientProxiedBy: AM5PR04CA0002.eurprd04.prod.outlook.com (2603:10a6:206:1::15) To AS1PR01MB9564.eurprd01.prod.exchangelabs.com (2603:10a6:20b:4d1::16) X-Microsoft-Original-Message-ID: <20220322230712.466646-1-andreas.rheinhardt@outlook.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 9e9a2faf-6c13-4c97-5348-08da0c58b6ea X-MS-Exchange-SLBlob-MailProps: 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 X-MS-TrafficTypeDiagnostic: AM0PR01MB4468:EE_ X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9e9a2faf-6c13-4c97-5348-08da0c58b6ea X-MS-Exchange-CrossTenant-AuthSource: AS1PR01MB9564.eurprd01.prod.exchangelabs.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Mar 2022 23:07:19.6064 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR01MB4468 Subject: [FFmpeg-devel] [PATCH 1/4] avcodec/vp9_raw_reorder_bsf: Check for existence of data before reading it X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Cc: Andreas Rheinhardt Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" X-TUID: rliiwky7GQMv Signed-off-by: Andreas Rheinhardt --- @michaelni: Please tell me the exact fuzzer issue id. libavcodec/vp9_raw_reorder_bsf.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavcodec/vp9_raw_reorder_bsf.c b/libavcodec/vp9_raw_reorder_bsf.c index 6562399159..1608360fe1 100644 --- a/libavcodec/vp9_raw_reorder_bsf.c +++ b/libavcodec/vp9_raw_reorder_bsf.c @@ -292,6 +292,11 @@ static int vp9_raw_reorder_filter(AVBSFContext *bsf, AVPacket *out) return err; } + if (!in->size) { + av_packet_free(&in); + return AVERROR_INVALIDDATA; + } + if ((in->data[in->size - 1] & 0xe0) == 0xc0) { av_log(bsf, AV_LOG_ERROR, "Input in superframes is not " "supported.\n");