ffmpeg/libavcodec
Michael Niedermayer b1374b8bd2
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-03 00:58:59 +02:00
..
2023-06-04 20:18:21 +02:00
2023-11-10 00:25:46 +01:00
2021-09-11 21:23:49 +02:00
2022-07-12 22:24:16 +02:00
2022-05-04 19:54:53 +02:00
2021-09-11 21:23:49 +02:00
2022-07-12 23:11:37 +02:00
2023-06-04 20:18:22 +02:00
2023-06-04 20:18:13 +02:00
2023-06-04 20:18:13 +02:00
2023-10-18 11:21:58 +02:00
2022-07-12 22:30:12 +02:00