This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/9.0
in repository ffmpeg.

commit aba17b5dc3e278650264f0f371873b04ca025fe9
Author:     Pavel Kohout <[email protected]>
AuthorDate: Tue Jun 30 21:54:03 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue Jul 21 22:59:52 2026 +0200

    avformat/imfdec: reject virtual tracks with no resources
    
    Fixes: NULL pointer dereference
    Fixes: kia6rom3mZdr
    Fixes: 73f6cce9361 (avformat/imf: Demuxer)
    Found-by: Pavel Kohout (Aisle Research)
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit a76190152d0d1e90f38a761e0a1443c1dcb4e7a8)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavformat/imfdec.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/libavformat/imfdec.c b/libavformat/imfdec.c
index def9b2b7a7..2d1f73c450 100644
--- a/libavformat/imfdec.c
+++ b/libavformat/imfdec.c
@@ -525,6 +525,12 @@ static int open_virtual_track(AVFormatContext *s,
     track->index = track_index;
     track->duration = av_make_q(0, 1);
 
+    if (!virtual_track->resource_count) {
+        av_log(s, AV_LOG_ERROR, "Virtual track has no resources\n");
+        ret = AVERROR_INVALIDDATA;
+        goto clean_up;
+    }
+
     for (uint32_t i = 0; i < virtual_track->resource_count; i++) {
         av_log(s,
                AV_LOG_DEBUG,

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to