avcodec/alsdec: Check opt_order / sb_length in ra_block handling
authorMichael Niedermayer <michael@niedermayer.cc>
Thu, 20 Jun 2019 22:47:15 +0000 (00:47 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sat, 6 Jul 2019 20:50:21 +0000 (22:50 +0200)
commit0794494c8f2f756e3c9384dba21c54f7d4ba9286
treea207a2b0361277f31da72868e26ef1c40fb489a1
parenta3bd4b260eb9f0d5817f9b3d672844f127c51a0b
avcodec/alsdec: Check opt_order / sb_length in ra_block handling

Fixes: out of array access
Fixes: 15277/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5184853437317120
Fixes: 15280/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5741062137577472

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/alsdec.c