This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/5.1 in repository ffmpeg.
commit 2a5615e109a07ee1e8b2fff26f5df26289c30414 Author: Michael Niedermayer <[email protected]> AuthorDate: Fri Jan 23 02:09:02 2026 +0100 Commit: Michael Niedermayer <[email protected]> CommitDate: Tue May 5 15:21:01 2026 +0200 avformat/yuv4mpegen: Sanity check input packet frame dimensions Fixes: out of array access if a filter-graph is used the injects changing dimensions Found-by: Zhenpeng (Leo) Lin from depthfirst Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit b740b8587261ce13919634687fe9e250519716df) Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/yuv4mpegenc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavformat/yuv4mpegenc.c b/libavformat/yuv4mpegenc.c index fca0ee3120..ad127170d7 100644 --- a/libavformat/yuv4mpegenc.c +++ b/libavformat/yuv4mpegenc.c @@ -190,6 +190,9 @@ static int yuv4_write_packet(AVFormatContext *s, AVPacket *pkt) width = st->codecpar->width; height = st->codecpar->height; + if (frame->width != width || frame->height != height) + return AVERROR(EINVAL); + desc = av_pix_fmt_desc_get(st->codecpar->format); /* The following code presumes all planes to be non-interleaved. */ _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
