ffmpeg/libavcodec/hevc
Michael Niedermayer 791a333a0e
avcodec/hevc/hevcdec: Check num_entry_point_offsets
The code uses int, unsigned int and uint16_t to store num_entry_point_offsets
This limits it to the smallest of the 3.
Alternatively uint16_t can be changed and then a larger limit used.
A Check will still be needed.

Fixes: 391974932/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5966648879677440
Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2025-05-30 22:07:09 +02:00
..
cabac.c lavc/hevcdec: move HEVCContext.tab_ct_depth to HEVCLayerContext 2024-09-06 13:59:29 +02:00
data.c
data.h
dsp.c lavc/hevc: R-V V put_pixels(pow2) 2024-12-17 09:21:20 +08:00
dsp.h lavc/hevc: R-V V put_pixels(pow2) 2024-12-17 09:21:20 +08:00
dsp_template.c avcodec/hevc: ff_hevc_(qpel/epel)_filters are signed type 2024-09-14 16:36:34 +08:00
filter.c lavc/hevcdec: make a HEVCFrame hold a reference to its PPS 2024-09-06 13:59:29 +02:00
hevc.h avcodec/hevc/ps: Add basic HEVC_SCALABILITY_AUXILIARY support 2025-02-17 15:08:42 +08:00
hevcdec.c avcodec/hevc/hevcdec: Check num_entry_point_offsets 2025-05-30 22:07:09 +02:00
hevcdec.h all: Fix doxy comments wrongly designated as trailing ///< 2025-03-12 17:00:24 +01:00
Makefile avcodec/hevc/Makefile: Move rules for lavc/* files to lavc/Makefile 2024-06-09 10:59:33 +02:00
mvs.c lavc/hevcdec: make a HEVCFrame hold a reference to its PPS 2024-09-06 13:59:29 +02:00
parse.c lavc/hevcdec/parse: process NALUs with nuh_layer_id>0 2024-09-23 17:11:40 +02:00
parse.h
parser.c lavc/hevc/parser: only split packets on NALUs with nuh_layer_id=0 2024-09-23 17:11:40 +02:00
pred.c
pred.h lavc/hevc/pred: stop accessing parameter sets through HEVCParamSets 2024-06-11 17:39:34 +02:00
pred_template.c avcodec: use the renamed av_zero_extend 2024-06-13 20:36:09 -03:00
ps.c avcodec/hevc/ps: Fix dependant layer id check 2025-05-09 22:27:04 +02:00
ps.h all: Fix doxy comments wrongly designated as trailing ///< 2025-03-12 17:00:24 +01:00
ps_enc.c
refs.c avcodec/decode: Only use ff_progress_frame_get_buffer() with blank input 2025-04-14 10:15:08 +02:00
sei.c avcodec/hevc: Add support for output_corrupt/showall flags 2025-02-20 11:39:52 +08:00
sei.h avcodec/hevc: Add support for output_corrupt/showall flags 2025-02-20 11:39:52 +08:00