dav1d and fuzzer access global security limits

strukturag · Oct 7, 2024 · 8657d35 · 8657d35
1 parent b2e6c93
commit 8657d35
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/fuzzing/box_fuzzer.cc b/fuzzing/box_fuzzer.cc
@@ -31,7 +31,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
   BitstreamRange range(reader, size);
   for (;;) {
     std::shared_ptr<Box> box;
-    Error error = Box::read(range, &box);
+    Error error = Box::read(range, &box, heif_get_global_security_limits());
     if (error != Error::Ok || range.error()) {
       break;
     }

diff --git a/libheif/plugins/decoder_dav1d.cc b/libheif/plugins/decoder_dav1d.cc
@@ -90,7 +90,7 @@ struct heif_error dav1d_new_decoder(void** dec)
 
   dav1d_default_settings(&decoder->settings);
 
-  decoder->settings.frame_size_limit = MAX_IMAGE_SIZE;
+  decoder->settings.frame_size_limit = heif_get_global_security_limits()->max_image_size_pixels;
   decoder->settings.all_layers = 0;
 
   if (dav1d_open(&decoder->context, &decoder->settings) != 0) {