This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/6.1 in repository ffmpeg.
commit 420b2b20ddb42042de41c6a421ec527f036f225c Author: Michael Niedermayer <[email protected]> AuthorDate: Mon Feb 16 01:38:53 2026 +0100 Commit: Michael Niedermayer <[email protected]> CommitDate: Mon May 4 17:13:20 2026 +0200 avcodec/hevc/ps: Check bit_depth_cm in/out relation Fixes: Assertion n>0 && n<=25 failed at ./libavcodec/get_bits.h:3 Fixes: 472463689/clusterfuzz-testcase-minimized-ffmpeg_dem_HXVS_fuzzer-6012944883449856 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 5ec37f61b2fff32aaa2bd3923a213b3dda4d67ea) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/hevc_ps.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libavcodec/hevc_ps.c b/libavcodec/hevc_ps.c index fb997066d9..4606765db4 100644 --- a/libavcodec/hevc_ps.c +++ b/libavcodec/hevc_ps.c @@ -1395,6 +1395,10 @@ static int colour_mapping_table(GetBitContext *gb, AVCodecContext *avctx, HEVCPP pps->luma_bit_depth_cm_output = get_ue_golomb(gb) + 8; pps->chroma_bit_depth_cm_output = get_ue_golomb(gb) + 8; + if ( pps-> luma_bit_depth_cm_output < pps-> luma_bit_depth_cm_input + || pps->chroma_bit_depth_cm_output < pps->chroma_bit_depth_cm_input) + return AVERROR_INVALIDDATA; + pps->cm_res_quant_bits = get_bits(gb, 2); pps->cm_delta_flc_bits = get_bits(gb, 2) + 1; _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
