PR #21552 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21552 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21552.patch
Fixes: out of array access if a filter-graph is used the injects changing dimensions Found-by: Zhenpeng (Leo) Lin from depthfirst Signed-off-by: Michael Niedermayer <[email protected]> >From 2ac2f8eba4d5bdcbe00c937373858f7b1b79aaea Mon Sep 17 00:00:00 2001 From: Michael Niedermayer <[email protected]> Date: Fri, 23 Jan 2026 02:09:02 +0100 Subject: [PATCH] avformat/yuv4mpegen: Sanity check input packet frame dimensions Fixes: out of array access if a filter-graph is used the injects changing dimensions Found-by: Zhenpeng (Leo) Lin from depthfirst Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/yuv4mpegenc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavformat/yuv4mpegenc.c b/libavformat/yuv4mpegenc.c index 371d3745c1..493ddd1e38 100644 --- a/libavformat/yuv4mpegenc.c +++ b/libavformat/yuv4mpegenc.c @@ -197,6 +197,9 @@ static int yuv4_write_packet(AVFormatContext *s, AVPacket *pkt) width = st->codecpar->width; height = st->codecpar->height; + if (frame->width != width || frame->height != height) + return AVERROR(EINVAL); + desc = av_pix_fmt_desc_get(st->codecpar->format); /* The following code presumes all planes to be non-interleaved. */ -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
