[FFmpeg-devel] [PATCH 1/5] avcodec/notchlc: Check uncompressed size against input for LZ4

[Paul B Mahol]

This broke decoding of every single file.

Please revert ASAP!

On Tue, Oct 20, 2020 at 3:43 PM Michael Niedermayer <michael at niedermayer.cc>
wrote:

> On Thu, Oct 15, 2020 at 10:32:28PM +0200, Michael Niedermayer wrote:
> > Fixes: OOM
> > Fixes:
> 26168/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_NOTCHLC_fuzzer-6019839015256064
> >
> > Equation is based on LZ4_COMPRESSBOUND from lz4.h
> > Suggested-by: Paul
> > Found-by: continuous fuzzing process
> https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
> > Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> > ---
> >  libavcodec/notchlc.c | 5 +++++
> >  1 file changed, 5 insertions(+)
>
> will apply
>
> [...]
> --
> Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
>
> Elect your leaders based on what they did after the last election, not
> based on what they say before an election.
>
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel at ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request at ffmpeg.org with subject "unsubscribe".