This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/4.4
in repository ffmpeg.

commit c47f085b479369dea49c14b893b3e26315e6a803
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Sun Feb 8 02:52:54 2026 +0100
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue May 5 18:54:59 2026 +0200

    avcodec/adpcm: Check input buffer size
    
    Larger values will lead to integer overflows in intermediates
    No testcase
    
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 5f84a7263e34ed8aa3dba30bec791a297c7140cc)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/adpcm.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavcodec/adpcm.c b/libavcodec/adpcm.c
index 8aab07e334..e4b513db3d 100644
--- a/libavcodec/adpcm.c
+++ b/libavcodec/adpcm.c
@@ -735,6 +735,8 @@ static int get_nb_samples(AVCodecContext *avctx, 
GetByteContext *gb,
 
     if(ch <= 0)
         return 0;
+    if (buf_size > INT_MAX / 2)
+        return 0;
 
     switch (avctx->codec->id) {
     /* constant, only check buf_size */

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to