This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/4.4
in repository ffmpeg.

commit 939d84afb06279d751cc1c2eb41ecbb0c27b90b0
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Fri May 1 16:35:51 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue May 5 19:27:35 2026 +0200

    swscale/swscale_unscaled: adjust last line copy
    
    Fixes: out of array access
    Fixes: DFVULN-694
    
    *Reporter: Zhenpeng (Leo) Lin at depthfirst*
    
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 43a0715e303b0fe3101b05e808a7f7e5da6f7c10)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libswscale/swscale_unscaled.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/libswscale/swscale_unscaled.c b/libswscale/swscale_unscaled.c
index b405bcdff8..770619d2c1 100644
--- a/libswscale/swscale_unscaled.c
+++ b/libswscale/swscale_unscaled.c
@@ -127,9 +127,13 @@ static void copyPlane(const uint8_t *src, int srcStride,
                       int srcSliceY, int srcSliceH, int width,
                       uint8_t *dst, int dstStride)
 {
+    if (!srcSliceH)
+        return;
+    av_assert0(srcSliceH > 0);
+
     dst += dstStride * srcSliceY;
     if (dstStride == srcStride && srcStride > 0) {
-        memcpy(dst, src, srcSliceH * dstStride);
+        memcpy(dst, src, (srcSliceH - 1) * dstStride + width);
     } else {
         int i;
         for (i = 0; i < srcSliceH; i++) {

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to