This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/5.1 in repository ffmpeg.
commit 05acb383df39543599f26781dba7e6f6a03d5516 Author: Michael Niedermayer <[email protected]> AuthorDate: Mon Sep 23 20:52:02 2024 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sun Jun 21 02:56:27 2026 +0200 avcodec/eatgq: Check bytestream2_get_buffer() for failure Fixes: Use of uninitialized memory Fixes: 71546/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EATGQ_fuzzer-5607656650244096 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 4949e34d96cc751aedaace02123c2fb02b5ac174) Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 496c9f42b8e91ee029c40afafe8ffebdbf59f49c) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/eatgq.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libavcodec/eatgq.c b/libavcodec/eatgq.c index eca93fd8a2..4da8030a86 100644 --- a/libavcodec/eatgq.c +++ b/libavcodec/eatgq.c @@ -183,7 +183,8 @@ static int tgq_decode_mb(TgqContext *s, AVFrame *frame, int mb_y, int mb_x) dc[4] = bytestream2_get_byte(&s->gb); dc[5] = bytestream2_get_byte(&s->gb); } else if (mode == 6) { - bytestream2_get_buffer(&s->gb, dc, 6); + if (bytestream2_get_buffer(&s->gb, dc, 6) != 6) + return AVERROR_INVALIDDATA; } else if (mode == 12) { for (i = 0; i < 6; i++) { dc[i] = bytestream2_get_byte(&s->gb); _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
