diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2024-02-27 23:47:07 +0100 |
|---|---|---|
| committer | Nuo Mi <nuomi2021@gmail.com> | 2024-03-02 13:29:07 +0800 |
| commit | b95c0d93fff06c695c074e512c4bce8788f9ff56 (patch) | |
| tree | 8ae8b44a83e56abff23c3f990b170b03159e658b | |
| parent | 45c612702f6b21219d6092d611fb7aef61550902 (diff) | |
avcodec/vvc/vvcdec: allow vvc_decode_close() on failed open
Fixes: division by 0
Fixes: 67008/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VVC_fuzzer-5873503163187200
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/vvc/vvcdec.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/libavcodec/vvc/vvcdec.c b/libavcodec/vvc/vvcdec.c index f024cbd067..570e2aa513 100644 --- a/libavcodec/vvc/vvcdec.c +++ b/libavcodec/vvc/vvcdec.c @@ -950,13 +950,14 @@ static av_cold void vvc_decode_flush(AVCodecContext *avctx) { VVCContext *s = avctx->priv_data; int got_output = 0; - VVCFrameContext *last; while (s->nb_delayed) wait_delayed_frame(s, NULL, &got_output); - last = get_frame_context(s, s->fcs, s->nb_frames - 1); - ff_vvc_flush_dpb(last); + if (s->fcs) { + VVCFrameContext *last = get_frame_context(s, s->fcs, s->nb_frames - 1); + ff_vvc_flush_dpb(last); + } s->eos = 1; } |