This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/9.0
in repository ffmpeg.

commit 6af6fef641353a345535cef6fee11c0d3f488c79
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Wed Jul 22 06:13:42 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun Aug 2 02:47:33 2026 +0200

    avcodec/cbs_h266: size vps_direct_ref_layer_flag for the full layer range
    
    Fixes: out of array access
    Fixes: poc_vvc_vps.266
    Fixes: 1z6RugPwxp39
    Found-by: TainAn Bill
    (cherry picked from commit 4f8043e658e195cc4e44cb79e864c4a6466b72a7)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/cbs_h266.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/cbs_h266.h b/libavcodec/cbs_h266.h
index 8d851a0bfb..0dc7d96828 100644
--- a/libavcodec/cbs_h266.h
+++ b/libavcodec/cbs_h266.h
@@ -270,7 +270,7 @@ typedef struct H266RawVPS {
     uint8_t  vps_layer_id[VVC_MAX_LAYERS];
     uint8_t  vps_independent_layer_flag[VVC_MAX_LAYERS];
     uint8_t  vps_max_tid_ref_present_flag[VVC_MAX_LAYERS];
-    uint8_t  vps_direct_ref_layer_flag[VVC_MAX_LAYERS][VVC_MAX_LAYERS - 1];
+    uint8_t  vps_direct_ref_layer_flag[VVC_MAX_LAYERS][VVC_MAX_LAYERS];
     uint8_t  vps_max_tid_il_ref_pics_plus1[VVC_MAX_LAYERS][VVC_MAX_LAYERS - 1];
     uint8_t  vps_each_layer_is_an_ols_flag;
     uint8_t  vps_ols_mode_idc;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to