avcodec/hcadec: Check or bound indexes
authorMichael Niedermayer <michael@niedermayer.cc>
Wed, 13 May 2020 17:54:42 +0000 (19:54 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Mon, 8 Jun 2020 18:45:56 +0000 (20:45 +0200)
commitb7e5c8f67d82550daacce58fae97e1fe3d3fb9aa
treef5742abad0880054fd40d2ec036836ba3d24acad
parent8e21379da110ca78f41ff2fe074fd771a1bcd1d0
avcodec/hcadec: Check or bound indexes

This causes indexes into scale_conversion_table to wrap around, alternatively they
could be clipped, the table be enlarged or we can error out. I have not found a document that specifies
what is the correct way to handle this

Fixes: out of array access
Fixes: 21727/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCA_fuzzer-5752477891952640.fuzz
Fixes: 22438/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCA_fuzzer-5640717790871552

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/hcadec.c