This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/4.4 in repository ffmpeg.
commit 38045cc42899470afde9fd1688d0fced5d1d0af2 Author: Michael Niedermayer <[email protected]> AuthorDate: Mon Feb 23 20:29:40 2026 +0100 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue May 5 18:55:04 2026 +0200 avformat/vividas: Reset n_audio_subpackets on error Fixes: signed integer overflow: -63 - 2147483594 cannot be represented in type 'int' Fixes: 486530208/clusterfuzz-testcase-minimized-ffmpeg_dem_VIVIDAS_fuzzer-4694818252193792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 32e4ddeda398ae7952338715fdb4f10066a19aea) Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/vividas.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libavformat/vividas.c b/libavformat/vividas.c index f42d16e462..72fbca5d45 100644 --- a/libavformat/vividas.c +++ b/libavformat/vividas.c @@ -718,8 +718,10 @@ static int viv_read_packet(AVFormatContext *s, } last_start = viv->audio_subpackets[viv->n_audio_subpackets].start = (int)(off - avio_tell(pb)); - if (last_start < last) + if (last_start < last) { + viv->n_audio_subpackets = 0; return AVERROR_INVALIDDATA; + } viv->current_audio_subpacket = 0; } else { _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
