This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 05817dc7dd avcodec/notchlc: Check 255 loops
05817dc7dd is described below
commit 05817dc7dd269bcdb9ded330d0bbfb70511697a9
Author: Michael Niedermayer <[email protected]>
AuthorDate: Tue Apr 28 13:41:15 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Sat May 2 21:39:02 2026 +0000
avcodec/notchlc: Check 255 loops
Fixes: integer overflow
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavcodec/notchlc.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/libavcodec/notchlc.c b/libavcodec/notchlc.c
index c28fddcea0..396089254e 100644
--- a/libavcodec/notchlc.c
+++ b/libavcodec/notchlc.c
@@ -90,6 +90,8 @@ static int lz4_decompress(AVCodecContext *avctx,
unsigned char current;
do {
current = bytestream2_get_byte(gb);
+ if (current > INT_MAX - num_literals)
+ return AVERROR_INVALIDDATA;
num_literals += current;
} while (current == 255);
}
@@ -122,6 +124,8 @@ static int lz4_decompress(AVCodecContext *avctx,
do {
current = bytestream2_get_byte(gb);
+ if (current > INT_MAX - match_length)
+ return AVERROR_INVALIDDATA;
match_length += current;
} while (current == 255);
}
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
