diff options
author | Michael Niedermayer <michael@niedermayer.cc> | 2021-08-08 20:46:32 +0200 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-08-22 18:08:00 +0200 |
commit | c59b5e3d1e0121ea23b5b326529f5bdca44cf982 (patch) | |
tree | a96cf72172ab7050a3f6094b09eb7652d75f29d7 /libavcodec | |
parent | 845579c6e2ee4c729a56c4daf819e5690d858570 (diff) |
avcodec/vc1dec: ff_print_debug_info() does not support WMV3 field_mode
Fixes: out of array read
Fixes: 36331/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMV3_fuzzer-5140494328922112.fuzz
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec')
-rw-r--r-- | libavcodec/vc1dec.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/libavcodec/vc1dec.c b/libavcodec/vc1dec.c index 1fb1950ade..335cd92953 100644 --- a/libavcodec/vc1dec.c +++ b/libavcodec/vc1dec.c @@ -1151,12 +1151,14 @@ image: if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) { if ((ret = av_frame_ref(pict, s->current_picture_ptr->f)) < 0) goto err; - ff_print_debug_info(s, s->current_picture_ptr, pict); + if (!v->field_mode) + ff_print_debug_info(s, s->current_picture_ptr, pict); *got_frame = 1; } else if (s->last_picture_ptr) { if ((ret = av_frame_ref(pict, s->last_picture_ptr->f)) < 0) goto err; - ff_print_debug_info(s, s->last_picture_ptr, pict); + if (!v->field_mode) + ff_print_debug_info(s, s->last_picture_ptr, pict); *got_frame = 1; } } |