This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/8.1
in repository ffmpeg.

commit b8422184027ff6ed2c61d602a65c75f21c7797da
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Thu Mar 5 17:18:18 2026 +0100
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun Mar 15 00:49:55 2026 +0100

    swscale/output: fix integer overflows in chroma in yuv2rgba64_X_c_template()
    
    Fixes: signed integer overflow: 130489 * 16525 cannot be represented in 
type 'int'
    Fixes: 
488950053/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-4627272670969856
    
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 3b98e29da87c85396b55bbd86be289a16d07be16)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libswscale/output.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/libswscale/output.c b/libswscale/output.c
index 0561e5736d..1494b06bf5 100644
--- a/libswscale/output.c
+++ b/libswscale/output.c
@@ -1128,8 +1128,8 @@ yuv2rgba64_X_c_template(SwsInternal *c, const int16_t 
*lumFilter,
         int j;
         unsigned Y1 = -0x40000000;
         unsigned Y2 = -0x40000000;
-        int U  = -(128 << 23); // 19
-        int V  = -(128 << 23);
+        unsigned U  = -(128 << 23); // 19
+        unsigned V  = -(128 << 23);
         int R, G, B;
 
         for (j = 0; j < lumFilterSize; j++) {
@@ -1159,8 +1159,8 @@ yuv2rgba64_X_c_template(SwsInternal *c, const int16_t 
*lumFilter,
         Y1 += 0x10000;
         Y2 = (int)Y2 >> 14;
         Y2 += 0x10000;
-        U  >>= 14;
-        V  >>= 14;
+        U  = (int)U >> 14;
+        V  = (int)V >> 14;
 
         // 8 bits: 27 -> 17 bits, 16 bits: 31 - 14 = 17 bits
         Y1 -= c->yuv2rgb_y_offset;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to