summaryrefslogtreecommitdiff
path: root/libavcodec/mjpegdec.h
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2018-04-10 16:12:15 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2018-04-12 23:52:59 +0200
commit8d381b57fd9d17fb5c3a851ca46c738b3afc33a2 (patch)
tree8296b1203311fc36e1a1e82eceff2673b377d711 /libavcodec/mjpegdec.h
parent8c02cd8ca097871dcd00cf8e08ce51660873f405 (diff)
downloadffmpeg-8d381b57fd9d17fb5c3a851ca46c738b3afc33a2.tar.gz
avcodec/mjpegdec: Check input buffer size.
Fixes: Timeout Fixes: 6381/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer-5665032743419904 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mjpegdec.h')
-rw-r--r--libavcodec/mjpegdec.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/libavcodec/mjpegdec.h b/libavcodec/mjpegdec.h
index ff301bcb93..653fe7cae6 100644
--- a/libavcodec/mjpegdec.h
+++ b/libavcodec/mjpegdec.h
@@ -47,6 +47,7 @@ typedef struct MJpegDecodeContext {
AVClass *class;
AVCodecContext *avctx;
GetBitContext gb;
+ int buf_size;
int start_code; /* current start code */
int buffer_size;