Hi all it didnt take long for something interresting to happen:
Heres my local pr/20134
git log origin/master..fforge/pr/20134 --oneline
a99fa230adb (fforge/pr/20134, fforge-michaelni/ff-tmp-uninit-ut-vlc-ffv1)
avcodec/ffv1: Clear state on alloc
006125030a0 avcodec/utvideodec: Set B for the width= 1 case
also
git log --grep "Set B for" fforge/pr/20134 --oneline
006125030a0 avcodec/utvideodec: Set B for the width= 1 case
git log --grep "Clear state on alloc" fforge/pr/20134 --oneline
a99fa230adb (fforge/pr/20134, fforge-michaelni/ff-tmp-uninit-ut-vlc-ffv1)
avcodec/ffv1: Clear state on alloc
so far so good
explain this:
git log --grep "Set B for" origin/master --oneline
27a541bb4cc avcodec/utvideodec: Set B for the width= 1 case
032dfe8584c avcodec/utvideodec: Set B for the width= 1 case
git log --grep "Clear state on alloc" origin/master --oneline
85a2beaa811 avcodec/ffv1: Clear state on alloc
70fc46d1856 avcodec/ffv1: Clear state on alloc
also not signed, not even with forgejos key:
git log --show-signature --grep "Clear state on alloc" origin/master
--pretty=fuller
commit 85a2beaa811cda7ddfb1f5be133268e364395f0e
Author: Michael Niedermayer <mich...@niedermayer.cc>
AuthorDate: Wed Aug 6 13:36:06 2025 +0200
Commit: michaelni <mich...@niedermayer.cc>
CommitDate: Thu Aug 7 19:45:04 2025 +0000
avcodec/ffv1: Clear state on alloc
Fixes: use of uninitialized memory
Fixes:
428969823/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_DEC_fuzzer-5909681623334912
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
commit 70fc46d185663dbea0995bf868d66b58b388119e
Author: Michael Niedermayer <mich...@niedermayer.cc>
AuthorDate: Wed Aug 6 13:36:06 2025 +0200
Commit: michaelni <mich...@niedermayer.cc>
CommitDate: Thu Aug 7 19:44:59 2025 +0000
avcodec/ffv1: Clear state on alloc
Fixes: use of uninitialized memory
Fixes:
428969823/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_DEC_fuzzer-5909681623334912
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
--
Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
No snowflake in an avalanche ever feels responsible. -- Voltaire
signature.asc
Description: PGP signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
