avformat/iamf_parse: bound substream count by remaining OBU size
authorMichael Niedermayer <michael@niedermayer.cc>
Sat, 30 May 2026 02:19:41 +0000 (04:19 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 14 Jun 2026 02:59:09 +0000 (04:59 +0200)
commit5ed93579e7d242c5da00316397fc0499bb729598
tree367034203d31292b71f44b14b0d8506bb152988d
parent942f897e8aa98e0507342afad1d9a020565a8130
avformat/iamf_parse: bound substream count by remaining OBU size

also check for nb_substreams == 0

Fixes: 472641765/clusterfuzz-testcase-minimized-ffmpeg_dem_IAMF_fuzzer-6390897173659648
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit fe2dabbbf44184b6947d943aa5b4b1e82f7b3f3a)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/iamf_parse.c