From 8bdba1092f50d52e0af90f425811302ec91152f8 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 31 Jan 2017 22:26:01 +0100 Subject: [PATCH] tools/target_dec_fuzzer: Only audio uses the return value to decode packets in pieces, correct the code to match that Fixes: Timeout Fixes: 483/fuzz-0-ffmpeg_VIDEO_AV_CODEC_ID_H263I_fuzzer Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer --- tools/target_dec_fuzzer.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c index 533aa37376..8761d96454 100644 --- a/tools/target_dec_fuzzer.c +++ b/tools/target_dec_fuzzer.c @@ -186,6 +186,8 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (ret <= 0 || ret > avpkt.size) break; + if (ctx->codec_type != AVMEDIA_TYPE_AUDIO) + ret = avpkt.size; avpkt.data += ret; avpkt.size -= ret; }