This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 0089694c06 avfilter/vf_lut3d: compute size2 after the 3DLUTSIZE
directive
0089694c06 is described below
commit 0089694c060bf25b628d16ba6078f083f7522bae
Author: Michael Niedermayer <[email protected]>
AuthorDate: Fri Jul 10 04:07:17 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Mon Jul 13 17:14:48 2026 +0000
avfilter/vf_lut3d: compute size2 after the 3DLUTSIZE directive
Fixes: out of array access
Fixes: lut3d_poc/poc_3dlut2.dat
Fixes: 6p0ahHBxreqG
Found-by: SecBuddyF - Tencent KeenLab
---
libavfilter/vf_lut3d.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavfilter/vf_lut3d.c b/libavfilter/vf_lut3d.c
index 6ab33790c6..9071dabeb9 100644
--- a/libavfilter/vf_lut3d.c
+++ b/libavfilter/vf_lut3d.c
@@ -644,7 +644,6 @@ static int parse_dat(AVFilterContext *ctx, FILE *f)
int ret, i, j, k, size, size2;
lut3d->lutsize = size = 33;
- size2 = size * size;
NEXT_LINE(skip_line(line));
if (!strncmp(line, "3DLUTSIZE ", 10)) {
@@ -652,6 +651,7 @@ static int parse_dat(AVFilterContext *ctx, FILE *f)
NEXT_LINE(skip_line(line));
}
+ size2 = size * size;
ret = allocate_3dlut(ctx, size, 0);
if (ret < 0)
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
