avformat/mvdec: Check bytes_per_sample

Fixes: division by zero Fixes: 42814/clusterfuzz-testcase-minimized-ffmpeg_dem_MV_fuzzer-4787014237552640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Peter Ross <[email protected]> Reviewed-by: John-Paul Stewart <[email protected]> Signed-off-by: Michael Niedermayer <[email protected]>
SaschaVasarrhelyi · Dec 25, 2021 · f3a949d · f3a949d
1 parent 10add8b
commit f3a949d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/libavformat/mvdec.c b/libavformat/mvdec.c
@@ -366,6 +366,9 @@ static int mv_read_header(AVFormatContext *avctx)
             avpriv_request_sample(avctx, "Audio compression (format %i)", v);
         }
 
+        if (bytes_per_sample == 0)
+            return AVERROR_INVALIDDATA;
+
         if (set_channels(avctx, ast, avio_rb32(pb)) < 0)
             return AVERROR_INVALIDDATA;