Pointer-overflow · dav1d_cdef_brow_16bpc

Similar to issue #311 (closed), using ToT.

../../third_party/dav1d/libdav1d/src/cdef_apply_tmpl.c:216:26: runtime error: applying non-zero offset 8 to null pointer
    #0 0x55a8b05f3144 in dav1d_cdef_brow_16bpc third_party/dav1d/libdav1d/src/cdef_apply_tmpl.c:216:26
    #1 0x55a8b05ed954 in dav1d_filter_sbrow_16bpc third_party/dav1d/libdav1d/src/recon_tmpl.c:1993:9
    #2 0x55a8b0583f62 in dav1d_decode_frame third_party/dav1d/libdav1d/src/decode.c:3095:25
    #3 0x55a8b058ab53 in dav1d_submit_frame third_party/dav1d/libdav1d/src/decode.c:3504:20
    #4 0x55a8b056bdf7 in dav1d_parse_obus third_party/dav1d/libdav1d/src/obu.c:1548:24
    #5 0x55a8b053ffd7 in dav1d_get_picture third_party/dav1d/libdav1d/src/lib.c:372:15

clusterfuzz-testcase-minimized-mediasource_MP4_AV1_pipeline_integration_fuzzer-5473739575525376