This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

The following commit(s) were added to refs/heads/master by this push:
     new 4f8043e658 avcodec/cbs_h266: size vps_direct_ref_layer_flag for the 
full layer range
4f8043e658 is described below

commit 4f8043e658e195cc4e44cb79e864c4a6466b72a7
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Wed Jul 22 06:13:42 2026 +0200
Commit:     michaelni <[email protected]>
CommitDate: Sat Aug 1 14:45:45 2026 +0000

    avcodec/cbs_h266: size vps_direct_ref_layer_flag for the full layer range
    
    Fixes: out of array access
    Fixes: poc_vvc_vps.266
    Fixes: 1z6RugPwxp39
    Found-by: TainAn Bill
---
 libavcodec/cbs_h266.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/cbs_h266.h b/libavcodec/cbs_h266.h
index 8d851a0bfb..0dc7d96828 100644
--- a/libavcodec/cbs_h266.h
+++ b/libavcodec/cbs_h266.h
@@ -270,7 +270,7 @@ typedef struct H266RawVPS {
     uint8_t  vps_layer_id[VVC_MAX_LAYERS];
     uint8_t  vps_independent_layer_flag[VVC_MAX_LAYERS];
     uint8_t  vps_max_tid_ref_present_flag[VVC_MAX_LAYERS];
-    uint8_t  vps_direct_ref_layer_flag[VVC_MAX_LAYERS][VVC_MAX_LAYERS - 1];
+    uint8_t  vps_direct_ref_layer_flag[VVC_MAX_LAYERS][VVC_MAX_LAYERS];
     uint8_t  vps_max_tid_il_ref_pics_plus1[VVC_MAX_LAYERS][VVC_MAX_LAYERS - 1];
     uint8_t  vps_each_layer_is_an_ols_flag;
     uint8_t  vps_ols_mode_idc;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to