This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit 9466148a32c663c4f51a783b7101937d1590e4e2 Author: Kenan Alghythee <[email protected]> AuthorDate: Sat Jul 11 16:57:38 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sun Aug 2 02:47:31 2026 +0200 avcodec/bsf/dovi_rpu: handle update_rpu() returning no RPU Fixes: out of array access Fixes: SUcVEyk7r3Gc Found-by: Kenan Alghythee <[email protected]> (cherry picked from commit 534f16d866c732a85c34ac576d66d578669578f1) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/bsf/dovi_rpu.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/libavcodec/bsf/dovi_rpu.c b/libavcodec/bsf/dovi_rpu.c index 88da4417b5..e8aa3eadcd 100644 --- a/libavcodec/bsf/dovi_rpu.c +++ b/libavcodec/bsf/dovi_rpu.c @@ -99,6 +99,8 @@ static int dovi_rpu_update_fragment_hevc(AVBSFContext *bsf, AVPacket *pkt, ret = update_rpu(bsf, pkt, 0, nal->data + 2, nal->data_size - 2, &rpu, &rpu_size); if (ret < 0) return ret; + if (!rpu || rpu_size <= 0) + return 0; /* NAL unit header + NAL prefix */ if (rpu_size + 3 <= nal->data_size && av_buffer_is_writable(nal->data_ref)) { @@ -158,6 +160,10 @@ static int dovi_rpu_update_fragment_av1(AVBSFContext *bsf, AVPacket *pkt, &rpu, &rpu_size); if (ret < 0) return ret; + if (!rpu || rpu_size <= 1) { + av_free(rpu); + continue; + } ref = av_buffer_create(rpu, rpu_size, av_buffer_default_free, NULL, 0); if (!ref) { _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
