This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit bd2541b8da2cdffe76da9b67c0f22f6b0f1fc1b9 Author: Jiale Yao <[email protected]> AuthorDate: Sat Jul 11 16:46:26 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue Jul 21 22:59:57 2026 +0200 avcodec/libcodec2: reject packet sample counts that overflow int Fixes: out of array access Fixes: 2jy_poc_codec2.zip / poc_codec2.raw Fixes: jOQASNnOm6O7 Found-by: Jiale Yao <[email protected]> (cherry picked from commit 705ff11c2b02d2925fca5c2c78c547ccbd901182) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/libcodec2.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavcodec/libcodec2.c b/libavcodec/libcodec2.c index 8895865721..ca74b2beb6 100644 --- a/libavcodec/libcodec2.c +++ b/libavcodec/libcodec2.c @@ -132,6 +132,8 @@ static int libcodec2_decode(AVCodecContext *avctx, AVFrame *frame, int16_t *output; nframes = pkt->size / avctx->block_align; + if (nframes > INT_MAX / avctx->frame_size) + return AVERROR_INVALIDDATA; frame->nb_samples = avctx->frame_size * nframes; ret = ff_get_buffer(avctx, frame, 0); _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
