github-mirrors/FFmpeg
1
0
Fork 0
mirror of https://mirror.skon.top/https://github.com/FFmpeg/FFmpeg synced 2026-04-23 02:11:14 +08:00
Code Issues Packages Projects Releases Wiki Activity

avcodec/hevc/ps: Check bit_depth_cm in/out relation

Browse Source 
Fixes: Assertion n>0 && n<=25 failed at ./libavcodec/get_bits.h:3
Fixes: 472463689/clusterfuzz-testcase-minimized-ffmpeg_dem_HXVS_fuzzer-6012944883449856

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2026-02-16 01:38:53 +01:00
committed by James Almer
parent 4cefbc54c4
commit 5ec37f61b2
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/hevc/ps.c
View File

@@ -1826,6 +1826,10 @@ static int colour_mapping_table(GetBitContext *gb, AVCodecContext *avctx, HEVCPP
pps->luma_bit_depth_cm_output = get_ue_golomb(gb) + 8;
pps->chroma_bit_depth_cm_output = get_ue_golomb(gb) + 8;
if ( pps-> luma_bit_depth_cm_output < pps-> luma_bit_depth_cm_input
|| pps->chroma_bit_depth_cm_output < pps->chroma_bit_depth_cm_input)
return AVERROR_INVALIDDATA;
pps->cm_res_quant_bits = get_bits(gb, 2);
pps->cm_delta_flc_bits = get_bits(gb, 2) + 1;