PR #24895 opened by michaelni
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24895
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24895.patch

Fixes: out of array access
Fixes: Ot8zjwCVrunh
Regression since: f926b6045522c5f9887a108f5d9b6ae017e9ba02

Found-by: Nicholas Carlini <[email protected]>
Signed-off-by: Michael Niedermayer <[email protected]>



>From 7e97efc8bbf29d91578f16f7eeffaece92eecc16 Mon Sep 17 00:00:00 2001
From: Nicholas Carlini <[email protected]>
Date: Sat, 19 Sep 2026 22:06:26 +0200
Subject: [PATCH] avcodec/hevc: re-validate non-base layer SPS when the base
 SPS changes

Fixes: out of array access
Fixes: Ot8zjwCVrunh
Regression since: f926b6045522c5f9887a108f5d9b6ae017e9ba02

Found-by: Nicholas Carlini <[email protected]>
Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/hevc/hevcdec.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/libavcodec/hevc/hevcdec.c b/libavcodec/hevc/hevcdec.c
index b572d8dd11..7162af7dbb 100644
--- a/libavcodec/hevc/hevcdec.c
+++ b/libavcodec/hevc/hevcdec.c
@@ -3448,6 +3448,9 @@ static int hevc_frame_start(HEVCContext *s, 
HEVCLayerContext *l,
                        "Base/non-base layer SPS have unsupported parameter 
combination\n");
                 return AVERROR(ENOSYS);
             }
+        } else {
+            for (int i = 1; i < FF_ARRAY_ELEMS(s->layers); i++)
+                set_sps(s, &s->layers[i], NULL);
         }
 
         ff_hevc_clear_refs(l);
-- 
2.52.0

_______________________________________________
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to