This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

The following commit(s) were added to refs/heads/master by this push:
     new 444f2cf047 avfilter/boxblur: Fix off by one errors
444f2cf047 is described below

commit 444f2cf047b92fac8d470f969dbd04bf1107757c
Author:     David Korczynski <[email protected]>
AuthorDate: Sat May 16 16:52:36 2026 +0200
Commit:     michaelni <[email protected]>
CommitDate: Sat May 16 17:22:45 2026 +0000

    avfilter/boxblur: Fix off by one errors
    
    Fixes: ada-2-poc.mkv
    
    Found-by: Claude and Ada Logics. This issue was found by Anthropic from 
using agents to study security of open source projects, and I am from Ada 
Logics helping validate the found issues and report to maintainers.
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavfilter/boxblur.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libavfilter/boxblur.c b/libavfilter/boxblur.c
index 43c724daea..51029b93b4 100644
--- a/libavfilter/boxblur.c
+++ b/libavfilter/boxblur.c
@@ -114,9 +114,9 @@ int ff_boxblur_eval_filter_params(AVFilterLink *inlink,
 
 #define CHECK_RADIUS_VAL(w_, h_, comp)                                  \
     if (comp->radius < 0 ||                                   \
-        2*comp->radius > FFMIN(w_, h_)) {                     \
+        2*comp->radius >= FFMIN(w_, h_)) {                              \
         av_log(ctx, AV_LOG_ERROR,                                       \
-               "Invalid " #comp " radius value %d, must be >= 0 and <= %d\n", \
+               "Invalid " #comp " radius value %d, must be >= 0 and < %d\n", \
                comp->radius, FFMIN(w_, h_)/2);                \
         return AVERROR(EINVAL);                                         \
     }

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to