This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new be1fd6d9d4 avcodec/prores_raw: Tiles of width less than 16 result in
undefined behavior
be1fd6d9d4 is described below
commit be1fd6d9d4b1e6371c1e0852168d728aaecb71b2
Author: Michael Niedermayer <[email protected]>
AuthorDate: Fri Feb 13 00:06:26 2026 +0100
Commit: michaelni <[email protected]>
CommitDate: Sat Feb 14 18:53:08 2026 +0000
avcodec/prores_raw: Tiles of width less than 16 result in undefined behavior
Fixes: passing zero to __builtin_clz(), which is not a valid argument
Fixes:
471569982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PRORES_RAW_DEC_fuzzer-5832576221904896
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavcodec/prores_raw.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/libavcodec/prores_raw.c b/libavcodec/prores_raw.c
index eb1a9af14f..c1c05fd959 100644
--- a/libavcodec/prores_raw.c
+++ b/libavcodec/prores_raw.c
@@ -461,6 +461,9 @@ static int decode_frame(AVCodecContext *avctx,
tile->y = (n / s->nb_tw) * s->th;
tile->x = (n % s->nb_tw) * s->tw;
+ if (avctx->width - tile->x < 16)
+ return AVERROR_PATCHWELCOME;
+
offset += size;
}
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
