This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 33b3dbaf15 avcodec/exr: Handle axmax like bxmin in
04d7a6d3db56ea1a93908ff2d3d312e3fc40a58c
33b3dbaf15 is described below
commit 33b3dbaf1530b4a8f86a5063e059c4b54c497fcc
Author: Michael Niedermayer <[email protected]>
AuthorDate: Sun Nov 9 16:39:45 2025 +0100
Commit: Michael Niedermayer <[email protected]>
CommitDate: Sun Feb 15 19:57:42 2026 +0100
avcodec/exr: Handle axmax like bxmin in
04d7a6d3db56ea1a93908ff2d3d312e3fc40a58c
Fixes: out of array access
Fixes:
418335931/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer-6718455383654400
Fixes:
471611870/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer-6645447302381568
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavcodec/exr.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/libavcodec/exr.c b/libavcodec/exr.c
index 7dcd19b2a5..ebcf84722d 100644
--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
@@ -1485,7 +1485,8 @@ static int decode_block(AVCodecContext *avctx, void
*tdata,
}
// Zero out the end if xmax+1 is not w
- memset(ptr_x, 0, axmax);
+ if (s->desc->flags & AV_PIX_FMT_FLAG_PLANAR || !c)
+ memset(ptr_x, 0, axmax);
channel_buffer[c] += td->channel_line_size;
}
}
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
