Effective Fuzzing: A Dav1d Case Study
While working on a 20% project with Project Zero, Nick Galloway found a signed 32-bit integer overflow in the dav1d AV1 decoder that occurs when multiple decoding threads are used and leads to an out-of-bounds write to memory. Dav1d 1.4.0 patched the flaw,...