This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/9.0
in repository ffmpeg.

commit 52f7983f15678c8a6065327760d7b6eb1c9c84ed
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Fri Jul 10 04:07:35 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue Jul 21 22:59:59 2026 +0200

    avformat/ty: don't let the Series2 AC3 trim underflow the packet size
    
    Fixes: negative-size-param
    Fixes: ty-s2-ac3-negative-size-single-file.ffconcat / create_poc.py
    Fixes: g0qeE6KvrjZi
    Found-by: Adrian Junge (vurlo)
    (cherry picked from commit de771bd52774a52d45b0e2c82e56995a1ef40df7)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavformat/ty.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/ty.c b/libavformat/ty.c
index 9be027fcca..842d97038c 100644
--- a/libavformat/ty.c
+++ b/libavformat/ty.c
@@ -578,7 +578,7 @@ static int demux_audio(AVFormatContext *s, TyRecHdr 
*rec_hdr, AVPacket *pkt)
         if (ty->audio_type == TIVO_AUDIO_AC3 &&
                 ty->tivo_series == TIVO_SERIES2) {
             if (ty->ac3_pkt_size + pkt->size > AC3_PKT_LENGTH) {
-                pkt->size -= 2;
+                pkt->size -= FFMIN(pkt->size, 2);
                 ty->ac3_pkt_size = 0;
             } else {
                 ty->ac3_pkt_size += pkt->size;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to