FFmpeg/libavcodec
Michael Niedermayer 79a2b24b1f
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-03 02:06:05 +02:00
..
2023-04-07 23:40:49 +02:00
2023-12-21 22:44:01 +01:00
2021-06-18 20:53:56 +02:00
2022-09-25 13:51:42 +02:00
2022-04-06 20:27:35 +02:00
2023-12-21 22:43:41 +01:00
2022-09-25 13:51:46 +02:00
2022-04-06 20:27:35 +02:00
2023-04-07 23:40:41 +02:00
2023-04-07 23:40:40 +02:00
2021-10-05 23:19:39 +02:00
2023-04-07 23:40:39 +02:00
2023-12-21 22:43:44 +01:00
2021-09-21 23:20:29 -03:00
2022-09-25 13:51:43 +02:00