This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/7.1
in repository ffmpeg.

commit 263ebe4ed275aac408d146b5fffb869e922bfea1
Author:     Nuo Mi <[email protected]>
AuthorDate: Sat Nov 23 17:32:38 2024 +0800
Commit:     Frank Plowman <[email protected]>
CommitDate: Wed Jun 10 15:12:21 2026 +0100

    avcodec/vvcdec: return error if CTU size > 128
    
    The v3 spec reserves CTU size 256. Currently, we use an uint8_t* table to 
hold cb_width and cb_height.
    If a CTU size of 256 is not split, cb_width and cb_height will overflow to 
0.
    To avoid switching to uint16_t, rejecting CTU size 256 provides a simple 
solution.
    
    (cherry picked from commit 4de67e874697271e189022b03cd619329d54603c)
---
 libavcodec/vvc/ps.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/libavcodec/vvc/ps.c b/libavcodec/vvc/ps.c
index ff9a6c7a15..e5d854d899 100644
--- a/libavcodec/vvc/ps.c
+++ b/libavcodec/vvc/ps.c
@@ -649,6 +649,12 @@ static int decode_ps(VVCParamSets *ps, const 
CodedBitstreamH266Context *h266, vo
     if (ret < 0)
         return ret;
 
+    if (rsps->sps_log2_ctu_size_minus5 > 2) {
+        // CTU > 128 are reserved in vvc spec v3
+        av_log(log_ctx, AV_LOG_ERROR, "CTU size > 128. \n");
+        return AVERROR_PATCHWELCOME;
+    }
+
     ret = decode_pps(ps, rpps);
     if (ret < 0)
         return ret;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to