This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit 3d129a4a8531e9f7baa8558c7c994b4dd36bcf04 Author: Pavel Kohout <[email protected]> AuthorDate: Tue Jun 30 21:55:49 2026 +0200 Commit: Lynne <[email protected]> CommitDate: Sun Jul 12 13:47:24 2026 +0900 avcodec/vulkan_hevc: reject too many VPS HRD parameter sets Fixes: stack buffer overflow Fixes: tD7Mj0ST7ND3 Fixes: 82864c21112157951ce91b4430a9018edd02f5ab (vulkan_hevc: use VK_KHR_video_maintenance2 if available) Found-by: Pavel Kohout (Aisle Research) Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 92737390dc133daadce47dd7d2ec8ef3d9ebcbed) --- libavcodec/vulkan_hevc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavcodec/vulkan_hevc.c b/libavcodec/vulkan_hevc.c index 8f0d1f6636..9b9264f1cd 100644 --- a/libavcodec/vulkan_hevc.c +++ b/libavcodec/vulkan_hevc.c @@ -875,6 +875,9 @@ static int vk_hevc_end_frame(AVCodecContext *avctx) vksps_p.vcl_hdr, &vksps_p.ptl, &vksps_p.dpbm, &vksps_p.pal, vksps_p.str, &vksps_p.ltr); + if (sps->vps->vps_num_hrd_parameters > HEVC_MAX_SUB_LAYERS) + return AVERROR_INVALIDDATA; + vkvps_p.sls = vkvps_ps; set_vps(sps->vps, &vkvps, &vkvps_p.ptl, &vkvps_p.dpbm, vkvps_p.hdr, vkvps_p.sls); _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
