This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 5ec37f61b2 avcodec/hevc/ps: Check bit_depth_cm in/out relation
5ec37f61b2 is described below
commit 5ec37f61b2fff32aaa2bd3923a213b3dda4d67ea
Author: Michael Niedermayer <[email protected]>
AuthorDate: Mon Feb 16 01:38:53 2026 +0100
Commit: James Almer <[email protected]>
CommitDate: Wed Feb 18 13:57:28 2026 +0000
avcodec/hevc/ps: Check bit_depth_cm in/out relation
Fixes: Assertion n>0 && n<=25 failed at ./libavcodec/get_bits.h:3
Fixes:
472463689/clusterfuzz-testcase-minimized-ffmpeg_dem_HXVS_fuzzer-6012944883449856
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavcodec/hevc/ps.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/libavcodec/hevc/ps.c b/libavcodec/hevc/ps.c
index 9f7a61e794..46b38564d5 100644
--- a/libavcodec/hevc/ps.c
+++ b/libavcodec/hevc/ps.c
@@ -1826,6 +1826,10 @@ static int colour_mapping_table(GetBitContext *gb,
AVCodecContext *avctx, HEVCPP
pps->luma_bit_depth_cm_output = get_ue_golomb(gb) + 8;
pps->chroma_bit_depth_cm_output = get_ue_golomb(gb) + 8;
+ if ( pps-> luma_bit_depth_cm_output < pps-> luma_bit_depth_cm_input
+ || pps->chroma_bit_depth_cm_output < pps->chroma_bit_depth_cm_input)
+ return AVERROR_INVALIDDATA;
+
pps->cm_res_quant_bits = get_bits(gb, 2);
pps->cm_delta_flc_bits = get_bits(gb, 2) + 1;
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
