FFmpeg/libavcodec
Michael Niedermayer 2c9832bca2
avcodec/truemotion1: Height not being a multiple of 4 is unsupported
mb_change_bits is given space based on height >> 2, while more data is read

Fixes: out of array access
Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2024-04-14 21:19:53 +02:00
..
2023-04-15 22:38:10 +02:00
2024-04-14 21:19:41 +02:00
2021-10-06 14:41:41 +02:00
2022-09-26 16:50:45 +02:00
2021-02-02 14:18:21 +01:00
2021-02-02 14:18:21 +01:00
2018-02-24 17:06:31 +01:00
2021-10-06 14:41:41 +02:00
2022-09-26 16:50:49 +02:00
2022-04-06 20:38:06 +02:00
2021-02-02 14:18:21 +01:00
2020-07-09 12:35:39 +02:00
2023-04-15 22:38:03 +02:00
2023-04-15 22:38:02 +02:00
2021-10-06 14:41:42 +02:00
2023-04-15 22:38:02 +02:00
2024-04-14 21:19:24 +02:00
2021-02-02 14:18:20 +01:00
2022-09-26 16:50:46 +02:00