Changeset 18883fbc in ffmpeg

Timestamp:

Nov 13, 2024, 3:26:28 PM (3 weeks ago)

Author:

Leo Izen <leo.izen@gmail.com>

Branches:

master

Children:

20af68b6

Parents:

a5dabfc9

git-author:

Leo Izen <leo.izen@gmail.com> (11/07/24 16:31:49)

git-committer:

Leo Izen <leo.izen@gmail.com> (11/13/24 15:26:28)

Message:

avcodec/jpegxl_parser: fix reading lz77-pair as initial entropy symbol

The JPEG XL parser has an entropy decoder inside, which supports LZ77
length-distance pairs. If the first symbol from the entropy stream is an
LZ77 pair, the bitstream is invalid, so we should abort immediately rather
than attempt to read it anyway (which would read from the uninitialized
starting window).

Reported-by: Kacper Michajłow <​kasper93@gmail.com>
Found-by: ossfuzz
Fixes: 368725676/clusterfuzz-testcase-minimized-fuzzer_protocol_file-6022251122589696-cut
Fixes: 42537758/clusterfuzz-testcase-minimized-fuzzer_protocol_file-5818969469026304-cut
Signed-off-by: Leo Izen <​leo.izen@gmail.com>

(No files)