ffmpeg/libavformat
Michael Niedermayer ac7566e2d8 avformat/id3v2: Check the return from avio_get_str()
Fixes: out of array access
Fixes: 29446/clusterfuzz-testcase-minimized-ffmpeg_dem_AAC_fuzzer-5096222622875648

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 25f240fcb3)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2021-09-10 16:04:26 +02:00
..
tests
.gitignore
3dostr.c avformat/3dostr: Check sample_rate 2021-09-10 16:04:26 +02:00
4xm.c avformat/4xm: Make audio_frame_count 64bit 2021-09-10 16:04:26 +02:00
Makefile
a64.c
aacdec.c
aadec.c avformat/aadec: Check toc_size to contain the minimum to demuxer uses 2020-05-21 15:32:28 +02:00
ac3dec.c
acm.c
act.c
adp.c
ads.c avformat/ads: Check size 2021-09-10 16:04:26 +02:00
adtsenc.c
adxdec.c
aea.c
afc.c
aiff.h
aiffdec.c avformat/aiffdec: Check size before subtraction in get_aiff_header() 2021-09-10 16:04:26 +02:00
aiffenc.c
aixdec.c
allformats.c
amr.c
anm.c
apc.c
ape.c
apetag.c
apetag.h
apngdec.c
apngenc.c avformat/apngenc: Add deinit function 2020-07-01 21:31:59 +02:00
aptxdec.c
aqtitledec.c avformat/aqtitledec: Fix memleak upon read header failure 2020-07-01 21:33:39 +02:00
asf.c
asf.h
asfcrypt.c
asfcrypt.h
asfdec_f.c avformat/asfdec_f: Add an additional check for the extradata size 2021-09-10 16:04:26 +02:00
asfdec_o.c avformat/asfdec_o: Check for EOF in asf_read_marker() 2021-09-10 16:04:26 +02:00
asfenc.c
assdec.c avformat/assdec: Fix memleak upon read header failure 2020-07-01 21:33:54 +02:00
assenc.c
ast.c
ast.h
astdec.c
astenc.c
async.c
au.c avformat/au: cleanup on EOF return in au_read_annotation() 2021-09-10 16:04:26 +02:00
audiointerleave.c
audiointerleave.h
av1.c
av1.h
avc.c avformat/avc, mxfenc: Avoid allocation of H264 SPS structure, fix memleak 2020-07-01 21:39:54 +02:00
avc.h avformat/avc, mxfenc: Avoid allocation of H264 SPS structure, fix memleak 2020-07-01 21:39:54 +02:00
avformat.h
avformatres.rc
avi.h
avidec.c avformat/avidec: dv does not support palettes 2021-09-10 16:04:26 +02:00
avienc.c
avio.c
avio.h
avio_internal.h
aviobuf.c avformat/aviobuf: Don't check for overflow after it happened 2020-07-01 21:32:50 +02:00
avisynth.c
avlanguage.c
avlanguage.h
avr.c
avs.c avformat/avs: Use 64bit for the avio_tell() output 2021-09-10 16:04:26 +02:00
bethsoftvid.c avformat/bethsoftvid: Check image dimensions before use 2021-09-10 16:04:26 +02:00
bfi.c avformat/bfi: Check chunk_header 2021-09-10 16:04:26 +02:00
bink.c
bintext.c avformat/bintext: Check width 2021-09-10 16:04:26 +02:00
bit.c
bluray.c
bmv.c
boadec.c avformat/boadec: Check that channels and block_align are set 2021-09-10 16:04:26 +02:00
brstm.c
c93.c
cache.c
caf.c
caf.h
cafdec.c avformat/cafdec: clip sample rate 2021-09-10 16:04:26 +02:00
cafenc.c
cavsvideodec.c
cdg.c avformat/cdg: Fix integer overflow in duration computation 2020-10-05 21:28:08 +02:00
cdxl.c
chromaprint.c
cinedec.c
codec2.c
concat.c
concatdec.c avformat/concatdec: use av_strstart() 2021-09-10 16:04:26 +02:00
crcenc.c
crypto.c
cutils.c
dash.c
dash.h
dashdec.c
dashenc.c
data_uri.c
dauddec.c
daudenc.c
davs2.c
dcstr.c
dfa.c
dhav.c
diracdec.c
dnxhddec.c
dsfdec.c avformat/dsfdec: Check block_align more completely 2021-09-10 16:04:26 +02:00
dsicin.c
dss.c
dtsdec.c
dtshddec.c
dump.c
dv.c
dv.h
dvbsub.c
dvbtxt.c
dvenc.c
dxa.c avformat/dxa: Use av_rescale() for duration computation 2021-09-10 16:04:26 +02:00
eacdata.c
electronicarts.c avformat/electronicarts: More chunk_size checks 2021-09-10 16:04:26 +02:00
epafdec.c
ffmeta.h
ffmetadec.c avformat/ffmetadec: finalize AVBPrint on errors 2021-09-10 16:04:26 +02:00
ffmetaenc.c
fifo.c
fifo_test.c
file.c
file_open.c
filmstripdec.c
filmstripenc.c
fitsdec.c avformat/fitsdec: Better size checks 2021-09-10 16:04:26 +02:00
fitsenc.c
flac_picture.c
flac_picture.h
flacdec.c
flacenc.c
flacenc.h
flacenc_header.c
flic.c
flv.h
flvdec.c avformat/flvdec: Check for EOF in amf_skip_tag() 2021-09-10 16:04:26 +02:00
flvenc.c
format.c
framecrcenc.c
framehash.c
frmdec.c
fsb.c
ftp.c
g722.c
g723_1.c
g726.c
g729dec.c
gdv.c
genh.c avformat/genh: Check block_align 2021-09-10 16:04:26 +02:00
gif.c
gifdec.c
golomb_tab.c
gopher.c
gsmdec.c
gxf.c avformat/gxf: Check pkt_len 2021-09-10 16:04:26 +02:00
gxf.h
gxfenc.c
h261dec.c
h263dec.c
h264dec.c
hashenc.c
hcom.c
hdsenc.c
hevc.c
hevc.h
hevcdec.c
hls.c avformat/hls: Pass a copy of the URL for probing 2020-07-05 01:47:57 +02:00
hlsenc.c
hlsplaylist.c
hlsplaylist.h
hlsproto.c
hnm.c avformat/hnm: Check for extradata allocation failure 2020-07-02 01:25:24 +02:00
http.c
http.h
httpauth.c
httpauth.h
icecast.c
icodec.c avformat/icodec: Check for zero streams and stream creation failure 2021-09-10 16:04:26 +02:00
icoenc.c
id3v1.c
id3v1.h
id3v2.c avformat/id3v2: Check the return from avio_get_str() 2021-09-10 16:04:26 +02:00
id3v2.h
id3v2enc.c
idcin.c
idroqdec.c
idroqenc.c
iff.c avformat/iff: Check block align also for ID_MAUD 2021-09-10 16:04:26 +02:00
ifv.c avformat/ifv: Check that total frames do not overflow 2021-09-10 16:04:26 +02:00
ilbc.c
img2.c
img2.h
img2_alias_pix.c
img2_brender_pix.c
img2dec.c
img2enc.c
ingenientdec.c
internal.h
ip.c
ip.h
ipmovie.c
ircam.c
ircam.h
ircamdec.c
ircamenc.c
isom.c
isom.h
iss.c
iv8.c
ivfdec.c
ivfenc.c
jacosubdec.c avformat/jacosubdec: Use 64bit inside get_shift() 2021-09-10 16:04:26 +02:00
jacosubenc.c
jvdec.c
latmenc.c
libavformat.v
libgme.c
libmodplug.c
libopenmpt.c
librtmp.c
libsmbclient.c
libsrt.c
libssh.c
lmlm4.c
loasdec.c
log2_tab.c
lrc.c
lrc.h
lrcdec.c avformat/lrcdec: Clip timestamps 2021-09-10 16:04:26 +02:00
lrcenc.c
lvfdec.c avformat/lvfdec: Check stream_index before use 2021-09-10 16:04:26 +02:00
lxfdec.c
m4vdec.c
matroska.c
matroska.h
matroskadec.c avformat/matroskadec: Sanity check codec_id/track type 2021-09-10 16:04:26 +02:00
matroskaenc.c avformat/matroskaenc: Don't use NULL for %s format string 2020-07-01 21:38:47 +02:00
md5proto.c
metadata.c
metadata.h
mgsts.c
microdvddec.c avformat/microdvddec: skip malformed lines without frame number. 2020-07-05 01:47:56 +02:00
microdvdenc.c
mj2kdec.c
mkvtimestamp_v2.c
mlpdec.c
mlvdec.c avformat/mlvdec: fail reading a packet with 0 streams 2020-07-05 01:47:56 +02:00
mm.c avformat/mm: Check for existence of audio stream 2020-07-10 21:31:36 +02:00
mmf.c
mms.c
mms.h
mmsh.c
mmst.c
mov.c avformat/mov: Use av_mul_q() to avoid integer overflows 2021-09-10 16:04:26 +02:00
mov_chan.c
mov_chan.h
mov_esds.c
movenc.c
movenc.h
movenccenc.c
movenccenc.h
movenchint.c
mp3dec.c
mp3enc.c
mpc.c
mpc8.c avformat/mpc8: Check size before implicitly converting to int 2021-09-10 16:04:26 +02:00
mpeg.c avformat/mpeg: Check avio_read() return value in get_pts() 2020-10-05 21:28:08 +02:00
mpeg.h
mpegenc.c avformat/mpegenc: Fix integer overflow with AV_NOPTS_VALUE 2020-05-21 15:32:28 +02:00
mpegts.c avformat/mpegts: Fix argument type for av_log 2021-09-10 16:04:26 +02:00
mpegts.h
mpegtsenc.c
mpegvideodec.c
mpjpeg.c
mpjpegdec.c
mpl2dec.c avformat/mpl2dec: Fix integer overflow with duration 2020-07-05 01:47:56 +02:00
mpsubdec.c avformat/mpsubdec: Fix memleak upon read header failure 2020-07-01 21:36:38 +02:00
msf.c
msnwc_tcp.c
mtaf.c
mtv.c
musx.c
mux.c
mvdec.c avformat/mvdec: Sanity check SAMPLE_WIDTH 2021-09-10 16:04:26 +02:00
mvi.c avformat/mvi: Use 64bit for testing dimensions 2021-09-10 16:04:26 +02:00
mxf.c
mxf.h
mxfdec.c avformat/mxfdec: Fix integer overflow in next position in mxf_read_local_tags() 2021-09-10 16:04:26 +02:00
mxfenc.c avformat/avc, mxfenc: Avoid allocation of H264 SPS structure, fix memleak 2020-07-01 21:39:54 +02:00
mxg.c
ncdec.c
network.c
network.h
nistspheredec.c avformat/nistspheredec: Check bits_per_coded_sample and channels 2021-09-10 16:04:26 +02:00
nspdec.c
nsvdec.c
nullenc.c
nut.c
nut.h
nutdec.c avformat/nutdec: Fix integer overflow in count computation 2021-09-10 16:04:26 +02:00
nutenc.c
nuv.c avformat/nuv: Check channels 2021-09-10 16:04:26 +02:00
oggdec.c
oggdec.h
oggenc.c
oggparsecelt.c
oggparsedaala.c
oggparsedirac.c
oggparseflac.c
oggparseogm.c
oggparseopus.c
oggparseskeleton.c
oggparsespeex.c
oggparsetheora.c
oggparsevorbis.c avformat/oggparsevorbis: Error out on double init of vp 2020-07-05 01:47:56 +02:00
oggparsevp8.c
oma.c
oma.h
omadec.c avformat/omadec: Fix memleaks upon read_header failure 2020-07-01 21:33:18 +02:00
omaenc.c
options.c
options_table.h
os_support.c
os_support.h
paf.c avformat/paf: Check for EOF in read_table() 2021-09-10 16:04:26 +02:00
pcm.c avformat/pcm: Check block_align 2021-09-10 16:04:26 +02:00
pcm.h
pcmdec.c
pcmenc.c
pjsdec.c avformat/pjsdec: Fix memleak upon read header failure 2020-07-01 21:36:51 +02:00
pmpdec.c
prompeg.c
protocols.c
psxstr.c
pva.c
pvfdec.c
qcp.c
qtpalette.c
qtpalette.h
r3d.c
rawdec.c avformat/rawdec: fix identifier names 2020-07-05 01:47:56 +02:00
rawdec.h avformat/rawdec: fix identifier names 2020-07-05 01:47:56 +02:00
rawenc.c
rawenc.h
rawutils.c
rawvideodec.c
rdt.c
rdt.h
realtextdec.c
redspark.c
replaygain.c
replaygain.h
riff.c
riff.h
riffdec.c
riffenc.c
rl2.c
rm.c
rm.h
rmdec.c avformat/rmdec: Reorder operations to avoid overflow 2021-09-10 16:04:26 +02:00
rmenc.c
rmsipr.c
rmsipr.h
rpl.c avformat/rpl: Check the number of streams 2021-09-10 16:04:26 +02:00
rsd.c uavformat/rsd: check for EOF in extradata 2021-09-10 16:04:26 +02:00
rso.c
rso.h
rsodec.c
rsoenc.c
rtmp.h
rtmpcrypt.c
rtmpcrypt.h
rtmpdh.c
rtmpdh.h
rtmpdigest.c
rtmphttp.c
rtmppkt.c
rtmppkt.h
rtmpproto.c
rtp.c
rtp.h
rtpdec.c
rtpdec.h
rtpdec_ac3.c
rtpdec_amr.c
rtpdec_asf.c
rtpdec_dv.c
rtpdec_formats.h
rtpdec_g726.c
rtpdec_h261.c
rtpdec_h263.c
rtpdec_h263_rfc2190.c
rtpdec_h264.c
rtpdec_hevc.c
rtpdec_ilbc.c
rtpdec_jpeg.c
rtpdec_latm.c
rtpdec_mpa_robust.c
rtpdec_mpeg4.c
rtpdec_mpeg12.c
rtpdec_mpegts.c
rtpdec_qcelp.c
rtpdec_qdm2.c
rtpdec_qt.c
rtpdec_rfc4175.c
rtpdec_svq3.c
rtpdec_vc2hq.c
rtpdec_vp8.c
rtpdec_vp9.c
rtpdec_xiph.c
rtpenc.c
rtpenc.h
rtpenc_aac.c
rtpenc_amr.c
rtpenc_chain.c
rtpenc_chain.h
rtpenc_h261.c
rtpenc_h263.c
rtpenc_h263_rfc2190.c
rtpenc_h264_hevc.c
rtpenc_jpeg.c
rtpenc_latm.c
rtpenc_mpegts.c
rtpenc_mpv.c
rtpenc_vc2hq.c
rtpenc_vp8.c
rtpenc_vp9.c
rtpenc_xiph.c
rtpproto.c
rtpproto.h
rtsp.c
rtsp.h
rtspcodes.h
rtspdec.c
rtspenc.c
s337m.c
samidec.c avformat/samidec: Fix memleak upon read header failure 2020-07-01 21:37:08 +02:00
sapdec.c
sapenc.c
sauce.c
sauce.h
sbcdec.c
sbgdec.c avformat/sbgdec: Reduce the amount of floating point in str_to_time() 2021-09-10 16:04:26 +02:00
sccdec.c avformat/sccdec: Fix memleak upon read header failure 2020-07-01 21:37:21 +02:00
sccenc.c
sctp.c
sdp.c avformat/sdp: Fix potential write beyond end of buffer 2020-07-10 21:31:39 +02:00
sdr2.c
sdsdec.c
sdxdec.c
segafilm.c avformat/segafilm: Do not assume AV_CODEC_ID_NONE is 0 2021-09-10 16:04:26 +02:00
segafilmenc.c
segment.c
serdec.c
shortendec.c
sierravmd.c
siff.c avformat/siff: Reject audio packets without audio stream 2020-10-05 21:28:08 +02:00
smacker.c
smjpeg.c
smjpeg.h
smjpegdec.c avformat/smjpegdec: Check the existence of referred streams 2020-07-07 19:28:29 +02:00
smjpegenc.c
smoothstreamingenc.c
smush.c
sol.c
sox.h
soxdec.c avformat/soxdec: Check channels to be positive 2021-09-10 16:04:26 +02:00
soxenc.c
spdif.c
spdif.h
spdifdec.c
spdifenc.c
srtdec.c avformat/srtdec: Fix memleak upon read header failure 2020-07-01 21:37:34 +02:00
srtenc.c
srtp.c
srtp.h
srtpproto.c
stldec.c avformat/stldec: Fix memleak upon read header failure 2020-07-01 21:37:54 +02:00
subfile.c
subtitles.c
subtitles.h
subviewer1dec.c avformat/subviewer1dec: Fix memleak upon read header failure 2020-07-01 21:38:19 +02:00
subviewerdec.c avformat/subviewerdec: fail on AV_NOPTS_VALUE 2021-09-10 16:04:26 +02:00
supdec.c
supenc.c
svag.c
swf.c
swf.h
swfdec.c
swfenc.c avformat/swfenc: Fix integer overflow in frame rate handling 2020-05-21 15:32:28 +02:00
takdec.c
tcp.c
tedcaptionsdec.c avformat/tedcaptionsdec: Check for overflow in parse_int() 2021-09-10 16:04:26 +02:00
tee.c
tee_common.c
tee_common.h
teeproto.c
thp.c avformat/thp: Check fps 2020-07-05 01:47:56 +02:00
tiertexseq.c
tls.c
tls.h
tls_gnutls.c lavf/tls_gnutls: check for interrupt inside handshake loop 2020-09-04 21:34:37 +03:00
tls_libtls.c
tls_mbedtls.c
tls_openssl.c
tls_schannel.c avformat/tls_schannel: immediately return decrypted data if available 2020-09-04 19:04:55 +03:00
tls_securetransport.c
tmv.c
tta.c avformat/tta: Use 64bit intermediate for index 2021-09-10 16:04:26 +02:00
ttaenc.c
tty.c
txd.c
ty.c
udp.c
uncodedframecrcenc.c
unix.c
url.c
url.h
urldecode.c
urldecode.h
utils.c avformat/utils: Check dts in update_initial_timestamps() more 2021-09-10 16:04:26 +02:00
v210.c
vag.c
vapoursynth.c
vc1dec.c
vc1test.c
vc1testenc.c
version.h
vividas.c avformat/vividas: Check number of audio channels 2021-09-10 16:04:26 +02:00
vivo.c
voc.c
voc.h
voc_packet.c
vocdec.c
vocenc.c
vorbiscomment.c
vorbiscomment.h
vpcc.c
vpcc.h
vpk.c
vplayerdec.c avformat/vplayerdec: Fix memleak upon read header failure 2020-07-01 21:38:35 +02:00
vqf.c avformat/vqf: Check len for COMM chunks 2021-09-10 16:04:26 +02:00
w64.c
w64.h
wavdec.c avformat/wavdec: Check avio_get_str16le() for failure 2021-09-10 16:04:26 +02:00
wavenc.c
wc3movie.c avformat/wc3movie: Cleanup on wc3_read_header() failure 2020-10-05 21:28:08 +02:00
webm_chunk.c avformat/webm_chunk: Close IO if writing header fails 2020-05-20 04:15:00 +02:00
webmdashenc.c
webpenc.c
webvttdec.c avformat/webvttdec: Fix memleak upon read header failure 2020-07-01 21:38:41 +02:00
webvttenc.c
westwood_aud.c
westwood_vqa.c
wsddec.c
wtv.h
wtv_common.c
wtvdec.c avformat/wtvdec: Check len in parse_chunks() to avoid overflow 2021-09-10 16:04:26 +02:00
wtvenc.c
wv.c
wv.h
wvdec.c
wvedec.c
wvenc.c
xa.c
xmv.c
xvag.c
xwma.c avformat/xwma: Check for EOF in dpds_table read code 2021-09-10 16:04:26 +02:00
yop.c
yuv4mpeg.h
yuv4mpegdec.c
yuv4mpegenc.c