Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 141ea152cf214cd8426f0711efc6eac7209bd0ef
https://github.com/WebKit/WebKit/commit/141ea152cf214cd8426f0711efc6eac7209bd0ef
Author: Youenn Fablet <[email protected]>
Date: 2026-09-02 (Wed, 02 Sep 2026)
Changed paths:
M
Source/ThirdParty/libwebrtc/Source/webrtc/webkit_sdk/objc/components/video_codec/RTCVideoEncoderH264.mm
M
Source/ThirdParty/libwebrtc/Source/webrtc/webkit_sdk/objc/components/video_codec/RTCVideoEncoderH265.mm
Log Message:
-----------
Out-of-bounds read in -[RTCVideoEncoderH265/H264 frameWasEncoded:] —
AppendData uses total CMBlockBuffer size instead of chunk length
rdar://176886407
Reviewed by Eric Carlson.
We were copying size bytes of data while we should only copy length bytes of
data, which is an issue if VT is generating non contiguous encoded frames.
*
Source/ThirdParty/libwebrtc/Source/webrtc/webkit_sdk/objc/components/video_codec/RTCVideoEncoderH264.mm:
(-[RTCVideoEncoderH264
frameWasEncoded:flags:sampleBuffer:codecSpecificInfo:width:height:renderTimeMs:timestamp:duration:rotation:isKeyFrameRequired:]):
*
Source/ThirdParty/libwebrtc/Source/webrtc/webkit_sdk/objc/components/video_codec/RTCVideoEncoderH265.mm:
(-[RTCVideoEncoderH265
frameWasEncoded:flags:sampleBuffer:width:height:renderTimeMs:timestamp:rotation:]):
Originally-landed-as: [email protected] (34598221929f).
rdar://185368333
Canonical link: https://commits.webkit.org/320365@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
