Skip to content

[oss-fuzz 5483383187898368] Integer-overflow MP4_rescale

Ref.:

demux/mp4/mp4.c:238:24: runtime error: signed integer overflow: -72057602627862528 * 1000000 cannot be represented in type 'int64_t' (aka 'long')
    #0 0x5abc9425e897 in MP4_rescale /src/vlc/modules/demux/mp4/mp4.c:238:24
    #1 0x5abc94259a8d in MP4_rescale_mtime /src/vlc/modules/demux/mp4/mp4.c:248:12
    #2 0x5abc94259a8d in LoadChapter /src/vlc/modules/demux/mp4/mp4.c:2638:17
    #3 0x5abc94250e0f in Open /src/vlc/modules/demux/mp4/mp4.c:1434:5
    #4 0x5abc94539f11 in demux_Probe /src/vlc/src/input/demux.c:112:15
    #5 0x5abc9450da75 in vlc_module_load /src/vlc/src/modules/modules.c:230:15
    #6 0x5abc94539997 in demux_NewAdvanced /src/vlc/src/input/demux.c:196:20
    #7 0x5abc94539323 in demux_New /src/vlc/src/input/demux.c:77:12
    #8 0x5abc941fe440 in demux_process_stream /src/vlc/test/src/input/demux-run.c:300:22
    #9 0x5abc941fe283 in LLVMFuzzerTestOneInput /src/vlc/test/vlc-demux-libfuzzer.c:63:5
    #10 0x5abc94160760 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13
    #11 0x5abc9414b9d5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6
    #12 0x5abc9415146f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9
    #13 0x5abc9417c712 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #14 0x79fc5faca082 in __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/libc-start.c:308:16
    #15 0x5abc94143bbd in _start

Samples:

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information