This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg.
commit 372a611913e6e2ba3d0fe859a00934f974f7d003 Author: Kenan Alghythee <[email protected]> AuthorDate: Sat Jul 11 16:57:38 2026 +0200 Commit: michaelni <[email protected]> CommitDate: Fri Jul 31 04:00:56 2026 +0000 avcodec/dovi_rpuenc: validate vdr_rpu_id from the input metadata Fixes: out of array access Fixes: SUcVEyk7r3Gc Found-by: Kenan Alghythee <[email protected]> --- libavcodec/dovi_rpuenc.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libavcodec/dovi_rpuenc.c b/libavcodec/dovi_rpuenc.c index dc63c68405..9d3db33071 100644 --- a/libavcodec/dovi_rpuenc.c +++ b/libavcodec/dovi_rpuenc.c @@ -599,6 +599,10 @@ int ff_dovi_rpu_generate(DOVIContext *s, const AVDOVIMetadata *metadata, dv_md_compression = AV_DOVI_COMPRESSION_NONE; vdr_rpu_id = mapping->vdr_rpu_id; + if (vdr_rpu_id < 0 || vdr_rpu_id > DOVI_MAX_DM_ID) { + av_log(s->logctx, AV_LOG_ERROR, "Invalid VDR RPU id %d\n", vdr_rpu_id); + return AVERROR_INVALIDDATA; + } use_prev_vdr_rpu = 0; if (!s->vdr[vdr_rpu_id]) { _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
