Traneptora/FFmpeg
1
Fork 0
forked from FFmpeg/FFmpeg
Code Pull requests Activity

avformat/iamf_parse: Check output_channel_count

Browse source 
Fixes: -nan is outside the range of representable values of type 'int'
Fixes: 377072730/clusterfuzz-testcase-minimized-ffmpeg_dem_IAMF_fuzzer-6545416570601472

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2024-12-01 21:40:43 +01:00
parent 70514ff0ec
commit 4485a0fd77
No known key found for this signature in database
GPG key ID: B18E8928B3948D64
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
libavformat/iamf_parse.c
View file

@ -422,7 +422,7 @@ static int ambisonics_config(void *s, AVIOContext *pb,
output_channel_count = avio_r8(pb); // C
substream_count = avio_r8(pb); // N
if (audio_element->nb_substreams != substream_count)
if (audio_element->nb_substreams != substream_count || output_channel_count == 0)
return AVERROR_INVALIDDATA;
order = floor(sqrt(output_channel_count - 1));