This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

commit 302f198ba55aa181bb7a8c488afe6dac3bfb3339
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Tue Feb 10 21:00:15 2026 +0100
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Mon Feb 23 23:52:37 2026 +0100

    avcodec/mjpegdec: Check for multiple exif
    
    Fixes: memleak
    Fixes: 
477993717/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AMV_DEC_fuzzer-4515108431921152
    
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/mjpegdec.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/libavcodec/mjpegdec.c b/libavcodec/mjpegdec.c
index 8d4b609101..9c8b846a76 100644
--- a/libavcodec/mjpegdec.c
+++ b/libavcodec/mjpegdec.c
@@ -2036,6 +2036,11 @@ static int mjpeg_decode_app(MJpegDecodeContext *s, int 
start_code)
         bytestream2_skipu(&s->gB, 2); // skip padding
         len -= 2;
 
+        if (s->exif_metadata.entries) {
+            av_log(s->avctx, AV_LOG_WARNING, "multiple EXIF\n");
+            goto out;
+        }
+
         ret = av_exif_parse_buffer(s->avctx, s->gB.buffer, len, 
&s->exif_metadata, AV_EXIF_TIFF_HEADER);
         if (ret < 0) {
             av_log(s->avctx, AV_LOG_WARNING, "unable to parse EXIF buffer\n");

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to