This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/4.4 in repository ffmpeg.
commit ab0702cbf3d39e69bd907eda226bcb6df629ecb8 Author: Michael Niedermayer <[email protected]> AuthorDate: Thu Mar 5 17:18:18 2026 +0100 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue May 5 18:55:07 2026 +0200 swscale/output: fix integer overflows in chroma in yuv2rgba64_X_c_template() Fixes: signed integer overflow: 130489 * 16525 cannot be represented in type 'int' Fixes: 488950053/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-4627272670969856 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 3b98e29da87c85396b55bbd86be289a16d07be16) Signed-off-by: Michael Niedermayer <[email protected]> --- libswscale/output.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/libswscale/output.c b/libswscale/output.c index 34530b6365..98b6af8716 100644 --- a/libswscale/output.c +++ b/libswscale/output.c @@ -1007,8 +1007,8 @@ yuv2rgba64_X_c_template(SwsContext *c, const int16_t *lumFilter, int j; unsigned Y1 = -0x40000000; unsigned Y2 = -0x40000000; - int U = -(128 << 23); // 19 - int V = -(128 << 23); + unsigned U = -(128 << 23); // 19 + unsigned V = -(128 << 23); int R, G, B; for (j = 0; j < lumFilterSize; j++) { @@ -1038,8 +1038,8 @@ yuv2rgba64_X_c_template(SwsContext *c, const int16_t *lumFilter, Y1 += 0x10000; Y2 = (int)Y2 >> 14; Y2 += 0x10000; - U >>= 14; - V >>= 14; + U = (int)U >> 14; + V = (int)V >> 14; // 8 bits: 27 -> 17 bits, 16 bits: 31 - 14 = 17 bits Y1 -= c->yuv2rgb_y_offset; _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
