This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/5.1
in repository ffmpeg.

commit 05acb383df39543599f26781dba7e6f6a03d5516
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Mon Sep 23 20:52:02 2024 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun Jun 21 02:56:27 2026 +0200

    avcodec/eatgq: Check bytestream2_get_buffer() for failure
    
    Fixes: Use of uninitialized memory
    Fixes: 
71546/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EATGQ_fuzzer-5607656650244096
    
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 4949e34d96cc751aedaace02123c2fb02b5ac174)
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 496c9f42b8e91ee029c40afafe8ffebdbf59f49c)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/eatgq.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libavcodec/eatgq.c b/libavcodec/eatgq.c
index eca93fd8a2..4da8030a86 100644
--- a/libavcodec/eatgq.c
+++ b/libavcodec/eatgq.c
@@ -183,7 +183,8 @@ static int tgq_decode_mb(TgqContext *s, AVFrame *frame, int 
mb_y, int mb_x)
             dc[4] = bytestream2_get_byte(&s->gb);
             dc[5] = bytestream2_get_byte(&s->gb);
         } else if (mode == 6) {
-            bytestream2_get_buffer(&s->gb, dc, 6);
+            if (bytestream2_get_buffer(&s->gb, dc, 6) != 6)
+                return AVERROR_INVALIDDATA;
         } else if (mode == 12) {
             for (i = 0; i < 6; i++) {
                 dc[i] = bytestream2_get_byte(&s->gb);

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to