FFmpeg/libavcodec
Michael Niedermayer 2c9832bca2
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-14 21:19:53 +02:00
..
2023-04-15 22:38:10 +02:00
2024-04-14 21:19:41 +02:00
2021-10-06 14:41:41 +02:00
2022-09-26 16:50:45 +02:00
2020-02-07 13:36:57 -03:00
2020-05-27 22:13:39 +02:00
2021-02-02 14:18:21 +01:00
2021-02-02 14:18:21 +01:00
2020-05-30 18:02:55 +02:00
2020-05-30 18:02:55 +02:00
2020-03-12 20:26:48 +00:00
2020-05-21 09:31:08 +02:00
2020-02-22 00:15:43 +01:00
2021-10-06 14:41:41 +02:00
2020-03-22 11:55:44 -03:00
2022-09-26 16:50:49 +02:00
2020-03-17 16:07:25 +01:00
2020-06-05 18:14:17 +02:00
2022-04-06 20:38:06 +02:00
2020-04-26 18:38:25 +01:00
2021-02-02 14:18:21 +01:00
2020-05-19 20:09:25 +02:00
2020-05-12 01:00:28 +02:00
2020-05-26 10:52:12 +01:00
2020-05-26 10:52:12 +01:00
2020-05-26 10:52:12 +01:00
2020-06-08 20:45:56 +02:00
2020-05-30 18:02:55 +02:00
2020-07-09 12:35:39 +02:00
2020-02-19 22:37:30 +01:00
2020-04-26 18:38:25 +01:00
2020-01-30 19:57:25 +01:00
2020-04-04 23:26:15 +02:00
2020-05-22 22:23:18 +02:00
2023-04-15 22:38:03 +02:00
2023-04-15 22:38:02 +02:00
2021-10-06 14:41:42 +02:00
2023-04-15 22:38:02 +02:00
2024-04-14 21:19:24 +02:00
2021-02-02 14:18:20 +01:00
2020-06-08 01:22:34 +02:00
2020-04-16 15:05:07 -03:00
2020-03-22 11:55:44 -03:00
2022-09-26 16:50:46 +02:00
2020-05-23 07:07:36 +02:00