This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/8.1 in repository ffmpeg.
commit 9bedaaa10bdbf9188052f3fedeb1685f683bc0dc Author: Jiale Yao <[email protected]> AuthorDate: Sat Jul 11 16:46:26 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sat Sep 19 14:26:55 2026 +0200 avcodec/libcodec2: reject packet sample counts that overflow int Fixes: out of array access Fixes: 2jy_poc_codec2.zip / poc_codec2.raw Fixes: jOQASNnOm6O7 Found-by: Jiale Yao <[email protected]> (cherry picked from commit 705ff11c2b02d2925fca5c2c78c547ccbd901182) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/libcodec2.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavcodec/libcodec2.c b/libavcodec/libcodec2.c index 8895865721..ca74b2beb6 100644 --- a/libavcodec/libcodec2.c +++ b/libavcodec/libcodec2.c @@ -132,6 +132,8 @@ static int libcodec2_decode(AVCodecContext *avctx, AVFrame *frame, int16_t *output; nframes = pkt->size / avctx->block_align; + if (nframes > INT_MAX / avctx->frame_size) + return AVERROR_INVALIDDATA; frame->nb_samples = avctx->frame_size * nframes; ret = ff_get_buffer(avctx, frame, 0); -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
