This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new ed4f286a10 avcodec/ffv1dec: mask the fltmap index on the 8bit remap
path
ed4f286a10 is described below
commit ed4f286a1049bcd394ab9a5ce71e297f6cbba002
Author: Michael Niedermayer <[email protected]>
AuthorDate: Fri Jul 10 04:07:27 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Mon Jul 13 01:07:35 2026 +0000
avcodec/ffv1dec: mask the fltmap index on the 8bit remap path
Fixes: out of array access
Fixes: ffv1_poc/test_ffv1_8bit_v4.avi
Fixes: 6p0ahHBxreqG
Found-by: SecBuddyF - Tencent KeenLab
---
libavcodec/ffv1dec.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavcodec/ffv1dec.c b/libavcodec/ffv1dec.c
index 0c0689c81f..ba973ab76f 100644
--- a/libavcodec/ffv1dec.c
+++ b/libavcodec/ffv1dec.c
@@ -138,7 +138,7 @@ static int decode_plane(FFV1Context *f, FFV1SliceContext
*sc,
return ret;
if (sc->remap)
for (x = 0; x < w; x++)
- sample[1][x] = sc->fltmap[remap_index][sample[1][x]];
+ sample[1][x] = sc->fltmap[remap_index][sample[1][x] &
mask];
for (x = 0; x < w; x++)
src[x*pixel_stride + stride * y] = sample[1][x];
} else {
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
