This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/4.4
in repository ffmpeg.

commit 1c32efde4bb5079d924ea040bc541ab393a52d13
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Wed Apr 8 13:49:28 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue May 5 18:55:12 2026 +0200

    avcodec/tdsc: Better input size check
    
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit bf4eb194cfd35c65d523685d35168d7107394e9c)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/tdsc.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/tdsc.c b/libavcodec/tdsc.c
index 87c5f98fec..bc7701d6e9 100644
--- a/libavcodec/tdsc.c
+++ b/libavcodec/tdsc.c
@@ -403,7 +403,7 @@ static int tdsc_decode_tiles(AVCodecContext *avctx, int 
number_tiles)
         }
 
         tile_size = bytestream2_get_le32(&ctx->gbc);
-        if (bytestream2_get_bytes_left(&ctx->gbc) < tile_size)
+        if (bytestream2_get_bytes_left(&ctx->gbc) < tile_size + 24LL)
             return AVERROR_INVALIDDATA;
 
         tile_mode = bytestream2_get_le32(&ctx->gbc);

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to