This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

commit fea5d3ccc3b13bd60bdd4316309856b8043aec7c
Author:     Niklas Haas <[email protected]>
AuthorDate: Mon Jun 29 16:57:08 2026 +0200
Commit:     Kacper Michajłow <[email protected]>
CommitDate: Mon Jul 27 17:05:20 2026 +0000

    avformat/libcurl: guard against overflow on seek()
    
    Sponsored-by: nxtedition AB
    Signed-off-by: Niklas Haas <[email protected]>
---
 libavformat/libcurl.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libavformat/libcurl.c b/libavformat/libcurl.c
index 7783b1aaad..b6378cb8d5 100644
--- a/libavformat/libcurl.c
+++ b/libavformat/libcurl.c
@@ -1078,11 +1078,15 @@ static int64_t libcurl_seek(URLContext *h, int64_t pos, 
int whence)
         newpos = pos;
         break;
     case SEEK_CUR:
+        if (pos > INT64_MAX - c->logical_pos)
+            return AVERROR(ERANGE);
         newpos = c->logical_pos + pos;
         break;
     case SEEK_END:
         if (content_size < 0)
             return AVERROR(ENOSYS);
+        if (pos > INT64_MAX - content_size)
+            return AVERROR(ERANGE);
         newpos = content_size + pos;
         break;
     default:

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to