shithub: dav1d

Info  •  Files  •  Log  •  Branches

recon: fix bilinear entry in dav1d_filter_dir table

Fixes #152, #153. Fixes a global buffer overflow in obmc() with
clusterfuzz-testcase-dav1d_fuzzer_mt-5702455078158336 and an ubsan
Index-out-of-bounds error in dav1d_recon_b_inter_8bpc() with
clusterfuzz-testcase-minimized-dav1d_fuzzer_mt-5688109887389696. Credits
to oss-fuzz.

--- a/src/tables.c

+++ b/src/tables.c

@@ -446,7 +446,7 @@

     [FILTER_2D_8TAP_SMOOTH_REGULAR] = { FILTER_8TAP_REGULAR, FILTER_8TAP_SMOOTH  },

     [FILTER_2D_8TAP_SMOOTH]         = { FILTER_8TAP_SMOOTH,  FILTER_8TAP_SMOOTH  },

     [FILTER_2D_8TAP_SMOOTH_SHARP]   = { FILTER_8TAP_SHARP,   FILTER_8TAP_SMOOTH  },

-    [FILTER_2D_BILINEAR]            = { FILTER_2D_BILINEAR,  FILTER_2D_BILINEAR  },

+    [FILTER_2D_BILINEAR]            = { FILTER_BILINEAR,     FILTER_BILINEAR     },

 };

 const uint8_t dav1d_filter_mode_to_y_mode[5] = {