Re: [FFmpeg-devel] [PATCH] avcodec/jpegxl_parser: add sanity check for frame size

2025-07-16 Thread Leo Izen
On 7/16/25 06:34, Kacper Michajlow wrote: On Tue, 15 Jul 2025 at 20:02, Leo Izen wrote: If a frame size is absolutely massive, this can spin the parser as it attempts to decode a permuted TOC. We add a sanity check here for eight times the size of the image for an internal frame to prevent mal

Re: [FFmpeg-devel] [PATCH] avcodec/jpegxl_parser: add sanity check for frame size

2025-07-16 Thread Kacper Michajlow
On Tue, 15 Jul 2025 at 20:02, Leo Izen wrote: > > If a frame size is absolutely massive, this can spin the parser as it > attempts to decode a permuted TOC. We add a sanity check here for eight > times the size of the image for an internal frame to prevent malicious > bitstreams from slowing the p

[FFmpeg-devel] [PATCH] avcodec/jpegxl_parser: add sanity check for frame size

2025-07-15 Thread Leo Izen
If a frame size is absolutely massive, this can spin the parser as it attempts to decode a permuted TOC. We add a sanity check here for eight times the size of the image for an internal frame to prevent malicious bitstreams from slowing the parser down to a crawl. Signed-off-by: Leo Izen Reported