The branch, master has been updated
       via  ad956ff076ea808e5d64c9ac17c1bfc1ba7d0cc0 (commit)
      from  643e2e10f980cf99c4e37da027b209dcdc1ac56f (commit)


- Log -----------------------------------------------------------------
commit ad956ff076ea808e5d64c9ac17c1bfc1ba7d0cc0
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Sat Nov 1 01:29:32 2025 +0100
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun Nov 16 20:32:11 2025 +0100

    avfilter/vf_drawtext: Account for bbox text seperator
    
    Fixes: out of array access
    no test case
    
    Found-by: Joshua Rogers <[email protected]> with ZeroPath
    Reviewed-by: Joshua Rogers <[email protected]>
    Signed-off-by: Michael Niedermayer <[email protected]>

diff --git a/libavfilter/vf_drawtext.c b/libavfilter/vf_drawtext.c
index 867536aa61..1d23805b54 100644
--- a/libavfilter/vf_drawtext.c
+++ b/libavfilter/vf_drawtext.c
@@ -1011,7 +1011,7 @@ static av_cold int init(AVFilterContext *ctx)
             av_log(ctx, AV_LOG_WARNING, "Multiple texts provided, will use 
text_source only\n");
             av_free(s->text);
         }
-        s->text = av_mallocz(AV_DETECTION_BBOX_LABEL_NAME_MAX_SIZE *
+        s->text = av_mallocz((AV_DETECTION_BBOX_LABEL_NAME_MAX_SIZE + 1) *
                              (AV_NUM_DETECTION_BBOX_CLASSIFY + 1));
         if (!s->text)
             return AVERROR(ENOMEM);

-----------------------------------------------------------------------

Summary of changes:
 libavfilter/vf_drawtext.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to