PR #22472 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22472 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22472.patch
Fixes: out of array access Fixes: vvc_poc_subpic_wh_bug.h266 Signed-off-by: Michael Niedermayer <[email protected]> >From f83273b464f841aee89aa6687bceddadff0a0705 Mon Sep 17 00:00:00 2001 From: Gil Portnoy <[email protected]> Date: Wed, 11 Mar 2026 04:39:06 +0100 Subject: [PATCH] avcodec/cbs_h266_syntax_template: Fix w/h typo Fixes: out of array access Fixes: vvc_poc_subpic_wh_bug.h266 Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/cbs_h266_syntax_template.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/cbs_h266_syntax_template.c b/libavcodec/cbs_h266_syntax_template.c index 0ff7459f5c..51e1948d0e 100644 --- a/libavcodec/cbs_h266_syntax_template.c +++ b/libavcodec/cbs_h266_syntax_template.c @@ -1216,7 +1216,7 @@ static int FUNC(sps)(CodedBitstreamContext *ctx, RWContext *rw, int num_subpic_cols = tmp_width_val / (current->sps_subpic_width_minus1[0] + 1); if (tmp_width_val % (current->sps_subpic_width_minus1[0] + 1) || - tmp_height_val % (current->sps_subpic_width_minus1[0] + 1) || + tmp_height_val % (current->sps_subpic_height_minus1[0] + 1) || current->sps_num_subpics_minus1 != (num_subpic_cols * tmp_height_val / (current->sps_subpic_height_minus1[0] + 1) - 1)) -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
