This is an automated email from the git hooks/post-receive script.
Git pushed a change to annotated tag n7.1.5
in repository ffmpeg.
at eefb3654c4 (tag)
tagging 3a0867c2bfda4a4d4309ca1a8cbdc6175e67f587 (commit)
replaces n7.1.4
by Michael Niedermayer
on Sat Jun 20 04:23:57 2026 +0200
- Log -----------------------------------------------------------------
FFmpeg 7.1.5 release
-----BEGIN PGP SIGNATURE-----
iHUEABYKAB0WIQTdHsno3ghcYps+GEaxjokos5SNZAUCajX5yAAKCRCxjokos5SN
ZOyyAP9LqhTmbmTECcjUMjyCN3m0KlZ+OW3TKIWYqlQ28Na3NgD/ZoHYg9OWqhm8
x7jWvLAlmRwSa25yY9kCRKngzDvbZgI=
=tr9H
-----END PGP SIGNATURE-----
Alexander Strasser (1):
avcodec/cbs_h266: Fix typo
Andreas Rheinhardt (2):
avfilter/avf_showspectrum: Fix allocation check
avcodec/vp8: Maintain consistency of frame pointers
Anthony Hurtado (1):
avcodec/diracdec: fix heap buffer overflow in edge_emu_buffer
Balling (1):
tests/tiny_ssim: fixed mistake in ssim_c1 calculation
Bogdan Lisman (2):
avcodec/snowenc: fix out-of-bounds memcpy in get_block_rd() for narrow
planes
avcodec/snowenc: fix SIGFPE in get_dc() when a block lies outside the
plane
Chris Warrington (1):
avcodec/vvc decode: ALF filtering without CC-ALF
Dale Curtis (2):
avformat/mov: Fix negative index given to can_seek_to_key_sample()
[Wave] Fix issues with unaligned metadata chunks.
David Korczynski (8):
avformat/assenc: Add the missing parentheses
avfilter/boxblur: Fix off by one errors
avcodec/g2meet: The stack is EPIC_PIX_STACK_SIZE
avcodec/cook: bound subpacket channel sum against channel count
avcodec/fastaudio: reject subframes count whose * 256 product overflows
32-bit
avcodec/on2avc: reject subframe count whose * SUBFRAME_SIZE product
overflows 32-bit
avcodec/truespeech: reject iterations count whose * 240 product overflows
32-bit
avcodec/agm: validate actual src_y against prev plane in
decode_inter_plane
Fei Wang (1):
lavc/vvc_refs: Define VVC_FRAME_FLAG* to h header
Franciszek Kalinowski (7):
avformat/oggparsecelt: bound extra_headers to avoid an effectively
infinite loop
avformat/rtpenc_aac: reject packets smaller than the ADTS header
avformat/rtpenc_xiph: bail out when the max payload size underflows
avcodec/h264_slice: guard color_frame() against chroma-width underflow
avfilter/af_join: fix wrong loop bound in buffer dedup (use-after-free)
avformat/ftp: reject CR/LF in the URL path to prevent FTP command
injection
avformat/icecast: reject CR/LF in metadata header values
Frank Plowman (14):
lavc/vvc: Check slice structure
lavc/vvc: Set fc->ref to NULL at top of decode_nal_units
lavc/vvc: Fix derivation of inverse LMCS idx
lavc/vvc: Fix slice map construction for small subpics
lavc/vvc: Ensure subpictures don't overlap
lavc/vvc: Fix pps_single_slice_picture
lavc/vvc: Detect subpic overlaps at CTU level
lavc/vvc: Fix divide-by-zero in LMCS param derivation
lavc/vvc: Mark SPS used if multiple CLVSSs use it
lavc/vvc: Error on inter slice with no reference pics
lavc/vvc: Fix unchecked error codes from set_qp_y
lavc/vvc: Fix unchecked error codes from add_reconstructed_area
lavc/vvc: Use second definition of MinQtLog2SizeIntraC if relevant
lavc/vvc: Stricter bound on pps_exp_slice_height_in_ctus_minus1
Hao Chen (1):
swscale: Fix out-of-bounds write errors in yuv2rgb_lasx.c file.
Hassan Hany (1):
avcodec/x86/vorbisdsp: change cmpleps to cmpltps in inverse coupling
James Almer (8):
avformat/mov_chan: keep the layout untouched on chan/chnl box failure
avformat/mov: don't abort on unsupported or invalid chnl boxes
avcodec/cbs_h266_syntax_template: Fix pps_exp_slice_height_in_ctus_minus1
range
tools/zmqsend: free the AVBprint buffer after using it
avformat/avc: Adjust get_ue_golomb() to handle 32 bit
avcodec/cbs_h266_syntax_template: reject subpic info with
res_change_in_clvs
avcodec/jpeg2000dec: clear array length when freeing it
tests/checkasm/sw_rgb: don't write random data past the end of the buffer
João Neves (1):
avcodec/hdrdec: fix pixel count decrement in RLE decompress loop
Kacper Michajłow (5):
avformat/dashdec: respect io_open set in AVFormatContext
avformat/dashenc: respect io_open set in AVFormatContext
avformat/hlsenc: respect io_open set in AVFormatContext
avformat/hlsenc: use correct close function for custom io
avformat/demux: use correct close function for custom io
Martin Storsjö (1):
av1dec: Don't crash if decoding of some frames have failed
Michael Niedermayer (62):
avcodec/cbs_h266_syntax_template: tighten sh_num_tiles_in_slice_minus1
upper bound
avcodec/h2645_sei: Initialize side data before deallocation
avformat/vividas: fix misaligned access
avcodec/jpeg2000dec: compute mask in decode_clnpass() like in
decode_sigpass()
avformat/ty: check rec_size
avformat/hls: Check url_offset and size
avformat/hls: Check TIME-OFFSET value
avformat/soxdec: Check sample_rate for nan
avformat/mxfdec: zero-init Sony MPEG-4 extradata and add padding
avcodec/magicyuv: Fix 1 line MEDIAN slices
avcodec/magicyuv: Expand the s->interlaced slice-height sanity check
avcodec/jpeg2000dec: Clear header derived variables
avformat/ftp: Check for Telnet IAC characters and other non printable
ASCII chars
avformat/ftp: Check string used for RNTO
avformat/mxfdec: Remove unneeded check
avfilter/vf_drawtext: always check pixel_mode == FT_PIXEL_MODE_MONO
avfilter/vf_drawtext: don't double-free glyph that has been cached in tree
avfilter/vf_drawtext: avoid double-free of aliased FT_Glyph in
glyph_enu_free
avfilter/vf_drawtext: plug error-path leaks in measure_text/draw_text
avfilter/vf_drawtext: Avoid double free in glyph_enu_border_free()
avformat/iff: check av_get_packet() result in ANIM branch
avcodec/aac/aacdec: reject decoded frame without a valid sample rate
avcodec/aac/aacdec_usac: reject explicit usacSamplingFrequency of 0
avcodec/jpeglsdec: only apply color transform to decoded rows
avformat/rtmppkt: Check recursion depth
avformat/matroskadec: bound TRACKENTRY parsing by max_streams
avformat/iamf_parse: bound substream count by remaining OBU size
swscale/rgb2rgb_template: use unsigned for <<24
avformat/gxfenc: Check timecode and propagate error
tools/target_dem_fuzzer: do not exit on io_buffer allocation failure
avcodec/misc4: reject invalid sample rate
avcodec/mwsc: do not dereference a missing reference frame
avcodec/vc2enc_dwt: avoid signed overflow in the 5/3 and Haar DWT
avcodec/vc2enc_dwt: avoid signed overflow in the 9/7 DWT lifting
avformat/matroskadec: avoid signed overflow in DASH cue time differences
avcodec/adpcm: fix signed integer overflow in get_nb_samples()
avcodec/hevc/ps: Factor window reading out
avcodec/hevc/ps: Check window parameters
avformat/mov: reject out of range ispe dimensions, avoid overflow summing
HEIF tile dimensions
avcodec/rv10, rv34: check init_get_bits8() before RealVideo bit access
avcodec/misc4: Check nb channels
avformat/rtspdec: bound Content-Length in the ANNOUNCE handler to
SDP_MAX_SIZE
avfilter/estdif: avoid signed overflow in slice boundary calculation
avfilter: add ff_slice_pos() helper for slice boundaries
avfilter: use ff_slice_pos() for per-slice boundary computation
swresample/x86/resample: write only int16 in the int16 resampler
avfilter/v360: reject out-of-range dimensions
avfilter/v360: compute remap table offsets in 64bit
avfilter/avf_showcwt: fix out of array read in compute_kernel
avfilter/avf_showcwt: avoid undefined float to int conversion of
nb_consumed_samples
avfilter/avf_showcwt: fix DIRECTION_RL EOF fill clearing the wrong columns
avformat/mpegts: use av_fast_realloc() for prg
avfilter/convolution: compute user matrix products in unsigned
avcodec/cbs_av1_syntax_template: reset seen_frame_header on sequence
avcodec/snowenc: fix out-of-bounds OBMC read in get_dc() for narrow planes
swscale/x86/rgb_2_rgb: fix uyvytoyuv422 overwrite on odd width
avformat/dashdec: Fail with any inner stream count being 0
update for 7.1.5
avcodec/cri: propagate max_pixels to the JPEG tile decoder
avcodec/imm5: propagate max_pixels to the H264/HEVC sub-decoders
avcodec/tdsc: propagate max_pixels to the JPEG tile decoder
Changelog:update
Niklas Haas (1):
swscale/alphablend: don't overread alpha plane on subsampled odd size
Nuo Mi (8):
avcodec/vvc/thread: Check frame to be non NULL
avcodec/vvcdec: ensure every CTU belongs to a slice
avcodec/vvcdec: inter_data, check the return value from hls_merge_data
avcodec/vvcdec: schedule next stage only if the current stage reports no
error
avcodec/cbs_h266: improve readability in subpicture parser
avcodec/cbs_h266: stricter validation for subpicture's max width and
height
avcodec/vvcdec: return error if CTU size > 128
lavc/vvcdec: ensure slices contain nonzero CTUs
Ori Hollander (1):
avcodec/magicyuv: reject slice_height misaligned with chroma vshift
Robert Nagy (1):
libavcodec/options_table: gamma22 and gamma28 aliases
Romain Beauxis (1):
avformat/oggparsevorbis.c: Prevent integer overflow when summing header
lengths; add bounds check.
Scott Boudreaux (2):
swscale/ppc: fix LOAD_FILTER overread in VSX path
swscale/ppc: fix ASAN stack-buffer-overflow in yuv2planeX
Thai Duong (1):
avcodec/diracdec: Enlarge `mctmp` to cover the worst-case `blheight·ybsep
+ yblen` rows, and break the MC loop when no output rows remain
Zhao Zhili (4):
avcodec/vvc: Don't use large array on stack
avcodec/vvc: Add support for output_corrupt/showall flags
avcodec/hevc: limit missing-ref fill to coded planes
avformat/mov: fix crash when stsz_sample_size is zero and sample_sizes is
null
Zhen Yan (1):
fftools/ffmpeg_dec: deep-copy subtitle_header to fix use-after-free
bird (1):
avformat/sctp: add size check in sctp_read() matching sctp_write()
haoyuLiu (2):
avfilter/zmq: initialize send_buf before shared cleanup on parse failure
avformat/http: reject request-line tokens not terminated by whitespace
jiale yao (3):
avfilter/avf_showcwt: fix out-of-bounds read in du scroll
avformat/rtpenc_amr: Check input size
avfilter/avf_showcwt: fix DIRECTION_DU EOF fill clearing the wrong rows
牟凡 (1):
avcodec/cbs_h266: fix wrong condition for chroma MTT depth in PH
-----------------------------------------------------------------------
No new revisions were added by this update.
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
