avcodec/alsdec: Check for block_length <= 0 in read_var_block_data()
authorMichael Niedermayer <michael@niedermayer.cc>
Fri, 26 Jul 2019 13:26:08 +0000 (15:26 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Mon, 5 Aug 2019 16:44:34 +0000 (18:44 +0200)
commitbe4fb282f9fb00d9c267dcc477745e2e468e758f
tree234ce051a4a551a6e0faabb51c2bb5579a9988d5
parent02f909dc24b1f05cfbba75077c7707b905e63cd2
avcodec/alsdec: Check for block_length <= 0 in read_var_block_data()

Fixes: left shift of negative value -1
Fixes: 15719/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5685731105701888

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/alsdec.c