ffmpeg/libavcodec
Michael Niedermayer d53b763fab
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-03 00:59:06 +02:00
..
2023-11-10 00:25:52 +01:00
2021-10-17 21:34:53 +02:00
2022-05-04 19:55:07 +02:00
2020-07-05 12:43:08 +02:00
2021-10-17 21:34:53 +02:00
2020-07-05 12:43:08 +02:00
2020-07-05 12:43:08 +02:00
2020-07-05 12:43:08 +02:00
2020-07-06 01:51:19 +02:00
2021-10-17 21:34:53 +02:00
2023-02-21 23:53:45 +01:00
2021-10-17 21:34:53 +02:00
2022-10-28 21:04:04 +02:00