This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/8.1 in repository ffmpeg.
commit 507d8e8284c63714d4cc3531447a0b33cf4c3ce0 Author: Dale Curtis <[email protected]> AuthorDate: Thu May 21 20:55:41 2026 +0000 Commit: Michael Niedermayer <[email protected]> CommitDate: Sun Jun 14 04:40:52 2026 +0200 avformat/ogg: Fix overflow and stale oggvorbis_private values - Prevent integer overflow when summing header lengths; add bounds check. - Re-initialize priv->vp with the new stream's extradata once all chained stream headers are collected. Signed-off-by: Dale Curtis <[email protected]> (cherry picked from commit 6e0e13b0bf0493e764f0cdf9d0912b92e118bf32) Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/oggparsevorbis.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/libavformat/oggparsevorbis.c b/libavformat/oggparsevorbis.c index 145a761f2d..4044ad3bf7 100644 --- a/libavformat/oggparsevorbis.c +++ b/libavformat/oggparsevorbis.c @@ -608,6 +608,13 @@ static int vorbis_packet(AVFormatContext *s, int idx) priv->comment_size = 0; av_freep(&priv->setup); priv->setup_size = 0; + + av_vorbis_parse_free(&priv->vp); + priv->vp = av_vorbis_parse_init(os->new_extradata, os->new_extradata_size); + if (!priv->vp) { + av_log(s, AV_LOG_ERROR, "Failed to re-initialize Vorbis parser\n"); + return AVERROR_INVALIDDATA; + } } return skip_packet; _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
