avcodec/alsdec: Check opt_order / sb_length in ra_block handling
authorMichael Niedermayer <michael@niedermayer.cc>
Thu, 20 Jun 2019 22:47:15 +0000 (00:47 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sat, 6 Jul 2019 21:07:06 +0000 (23:07 +0200)
commit75e838a6daa76a913361c7e725976b3b07a1312a
treeefec76f4868e1683a2625807010c40c3dafaba8a
parent99745dc2f353be1eb97291bd501053709b7b2d61
avcodec/alsdec: Check opt_order / sb_length in ra_block handling

Fixes: out of array access
Fixes: 15277/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5184853437317120
Fixes: 15280/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5741062137577472

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 0794494c8f2f756e3c9384dba21c54f7d4ba9286)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/alsdec.c