This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit 989444060d5fbb030a1554fc47791887c9e725f6 Author: Michael Niedermayer <[email protected]> AuthorDate: Fri Jul 10 04:07:17 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue Jul 21 22:59:58 2026 +0200 avfilter/vf_lut3d: compute size2 after the 3DLUTSIZE directive Fixes: out of array access Fixes: lut3d_poc/poc_3dlut2.dat Fixes: 6p0ahHBxreqG Found-by: SecBuddyF - Tencent KeenLab (cherry picked from commit 0089694c060bf25b628d16ba6078f083f7522bae) Signed-off-by: Michael Niedermayer <[email protected]> --- libavfilter/vf_lut3d.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavfilter/vf_lut3d.c b/libavfilter/vf_lut3d.c index 6ab33790c6..9071dabeb9 100644 --- a/libavfilter/vf_lut3d.c +++ b/libavfilter/vf_lut3d.c @@ -644,7 +644,6 @@ static int parse_dat(AVFilterContext *ctx, FILE *f) int ret, i, j, k, size, size2; lut3d->lutsize = size = 33; - size2 = size * size; NEXT_LINE(skip_line(line)); if (!strncmp(line, "3DLUTSIZE ", 10)) { @@ -652,6 +651,7 @@ static int parse_dat(AVFilterContext *ctx, FILE *f) NEXT_LINE(skip_line(line)); } + size2 = size * size; ret = allocate_3dlut(ctx, size, 0); if (ret < 0) _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
