This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/8.0
in repository ffmpeg.

commit ff43ef5219ad543e57ed56d065e9d4a3b0426468
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Sun May 3 04:03:07 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sun May 3 19:57:02 2026 +0200

    avformat/iamf_parse.c: Fix potential integer overflow in 
opus_decoder_config()
    
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 016a241102250372a9c2e96f6e8dca67ec01d3f7)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavformat/iamf_parse.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/iamf_parse.c b/libavformat/iamf_parse.c
index 2866c8e909..5a1bfe4d52 100644
--- a/libavformat/iamf_parse.c
+++ b/libavformat/iamf_parse.c
@@ -38,7 +38,7 @@ static int opus_decoder_config(IAMFCodecConfig *codec_config,
 {
     int ret, left = len - avio_tell(pb);
 
-    if (left < 11 || codec_config->audio_roll_distance >= 0)
+    if (left < 11 || codec_config->audio_roll_distance >= 0 || left > INT_MAX 
- 8)
         return AVERROR_INVALIDDATA;
 
     codec_config->extradata = av_malloc(left + 8);

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to