From 40e15b58d0ed6d519a8052f973caff18348938d5 Mon Sep 17 00:00:00 2001 From: Martin Storsjo Date: Wed, 7 Jun 2017 15:54:02 +0300 Subject: [PATCH] Avoid infinite loops in block decoding Fixes: 1921/clusterfuzz-testcase-minimized-5480510065213440 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg --- libAACdec/src/block.cpp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libAACdec/src/block.cpp b/libAACdec/src/block.cpp index b3d09a6..6a6ae61 100644 --- a/libAACdec/src/block.cpp +++ b/libAACdec/src/block.cpp @@ -372,6 +372,9 @@ AAC_DECODER_ERROR CBlock_ReadSectionData( } sect_len += sect_len_incr; + if (sect_len <= 0) { + return AAC_DEC_PARSE_ERROR; + } top = band + sect_len;