ffmpeg/libavcodec
Michael Niedermayer 45011af5b4
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-14 22:12:46 +02:00
..
2023-04-21 01:55:19 +02:00
2024-04-14 22:12:35 +02:00
2021-10-06 13:54:16 +02:00
2022-10-09 21:32:55 +02:00
2021-09-10 16:04:26 +02:00
2021-10-06 13:54:16 +02:00
2022-10-09 21:32:59 +02:00
2023-04-21 01:55:12 +02:00
2023-04-21 01:55:11 +02:00
2023-04-21 01:55:10 +02:00
2024-04-14 22:12:22 +02:00
2022-10-09 21:33:05 +02:00
2022-10-09 21:32:56 +02:00