From d662143f064636f11d92083cd9aa4f907cf97d59 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 30 Sep 2017 18:54:07 +0200 Subject: [PATCH] avcodec/dxv: Check for end of input in dxv_decompress_dxt5() Fixes: Timeout Fixes: 3291/clusterfuzz-testcase-4630024655208448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer --- libavcodec/dxv.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavcodec/dxv.c b/libavcodec/dxv.c index 6f3c075d06..529e211258 100644 --- a/libavcodec/dxv.c +++ b/libavcodec/dxv.c @@ -197,6 +197,8 @@ static int dxv_decompress_dxt5(AVCodecContext *avctx) AV_WL32(ctx->tex_data + 4 * pos, prev); pos++; } else { + if (bytestream2_get_bytes_left(gbc) < 1) + return AVERROR_INVALIDDATA; if (state == 0) { value = bytestream2_get_le32(gbc); state = 16;