This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit 789d7b1b1dff213b4e0b349345a835147cb7c1be Author: Michael Niedermayer <[email protected]> AuthorDate: Fri Jul 10 04:07:27 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue Jul 21 22:59:57 2026 +0200 avcodec/ffv1dec: mask the fltmap index on the 8bit remap path Fixes: out of array access Fixes: ffv1_poc/test_ffv1_8bit_v4.avi Fixes: 6p0ahHBxreqG Found-by: SecBuddyF - Tencent KeenLab (cherry picked from commit ed4f286a1049bcd394ab9a5ce71e297f6cbba002) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/ffv1dec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/ffv1dec.c b/libavcodec/ffv1dec.c index 0c0689c81f..ba973ab76f 100644 --- a/libavcodec/ffv1dec.c +++ b/libavcodec/ffv1dec.c @@ -138,7 +138,7 @@ static int decode_plane(FFV1Context *f, FFV1SliceContext *sc, return ret; if (sc->remap) for (x = 0; x < w; x++) - sample[1][x] = sc->fltmap[remap_index][sample[1][x]]; + sample[1][x] = sc->fltmap[remap_index][sample[1][x] & mask]; for (x = 0; x < w; x++) src[x*pixel_stride + stride * y] = sample[1][x]; } else { _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
