This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 8f57b04fe5 avcodec/hevc/sei: Use get_bits64() in
decode_nal_sei_3d_reference_displays_info()
8f57b04fe5 is described below
commit 8f57b04fe56e0145b193efd2f5d2d0d5a80347f4
Author: Michael Niedermayer <[email protected]>
AuthorDate: Mon Dec 22 23:03:06 2025 +0100
Commit: michaelni <[email protected]>
CommitDate: Thu Feb 5 20:20:08 2026 +0000
avcodec/hevc/sei: Use get_bits64() in
decode_nal_sei_3d_reference_displays_info()
Fixes: Assertion n>=0 && n<=32 failed at ./libavcodec/get_bits.h:426
Fixes:
468435217/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4644127078940672
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavcodec/hevc/sei.c | 4 ++--
libavcodec/hevc/sei.h | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/libavcodec/hevc/sei.c b/libavcodec/hevc/sei.c
index 5fd4e763b3..e12803f1d3 100644
--- a/libavcodec/hevc/sei.c
+++ b/libavcodec/hevc/sei.c
@@ -195,7 +195,7 @@ static int
decode_nal_sei_3d_reference_displays_info(HEVCSEITDRDI *s, GetBitCont
else
length = FFMAX(0, (int)s->exponent_ref_display_width[i] +
(int)s->prec_ref_display_width - 31);
- s->mantissa_ref_display_width[i] = get_bits_long(gb, length);
+ s->mantissa_ref_display_width[i] = get_bits64(gb, length);
if (s->ref_viewing_distance_flag) {
s->exponent_ref_viewing_distance[i] = get_bits(gb, 6);
if (s->exponent_ref_viewing_distance[i] > 62)
@@ -205,7 +205,7 @@ static int
decode_nal_sei_3d_reference_displays_info(HEVCSEITDRDI *s, GetBitCont
else
length = FFMAX(0, (int)s->exponent_ref_viewing_distance[i] +
(int)s->prec_ref_viewing_dist - 31);
- s->mantissa_ref_viewing_distance[i] = get_bits_long(gb, length);
+ s->mantissa_ref_viewing_distance[i] = get_bits64(gb, length);
}
s->additional_shift_present_flag[i] = get_bits1(gb);
if (s->additional_shift_present_flag[i]) {
diff --git a/libavcodec/hevc/sei.h b/libavcodec/hevc/sei.h
index 2fcd0e8d57..59bd2b45f8 100644
--- a/libavcodec/hevc/sei.h
+++ b/libavcodec/hevc/sei.h
@@ -87,9 +87,9 @@ typedef struct HEVCSEITDRDI {
uint16_t left_view_id[32];
uint16_t right_view_id[32];
uint8_t exponent_ref_display_width[32];
- uint8_t mantissa_ref_display_width[32];
+ uint64_t mantissa_ref_display_width[32];
uint8_t exponent_ref_viewing_distance[32];
- uint8_t mantissa_ref_viewing_distance[32];
+ uint64_t mantissa_ref_viewing_distance[32];
uint8_t additional_shift_present_flag[32];
int16_t num_sample_shift[32];
uint8_t three_dimensional_reference_displays_extension_flag;
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
