This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/9.0 in repository ffmpeg.
commit 6f45c7392cfbf9b3373b09a3ff0a0ddb9c56b750 Author: Yongqiang Tian <[email protected]> AuthorDate: Thu Sep 3 12:09:55 2026 +0000 Commit: Michael Niedermayer <[email protected]> CommitDate: Thu Sep 17 01:30:42 2026 +0200 avfilter/f_metadata: avoid overread on long formatted output vsnprintf() returns the number of characters that would have been written when its output is truncated. Passing that value to avio_write() makes it read beyond the 128-byte stack buffer for long metadata values. Use avio_vprintf() to write the complete formatted string without the fixed intermediate buffer. Fixes: b0159af6bc76553b1ab7546d821bb8c16a666cfd Signed-off-by: Yongqiang Tian <[email protected]> (cherry picked from commit fd625f452c0b59a61b81833de9f65a7b601a862c) Signed-off-by: Michael Niedermayer <[email protected]> --- libavfilter/f_metadata.c | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/libavfilter/f_metadata.c b/libavfilter/f_metadata.c index a9036ab475..c2e0a50e13 100644 --- a/libavfilter/f_metadata.c +++ b/libavfilter/f_metadata.c @@ -199,11 +199,8 @@ static void print_file(AVFilterContext *ctx, const char *msg, ...) va_list argument_list; va_start(argument_list, msg); - if (msg) { - char buf[128]; - int ret = vsnprintf(buf, sizeof(buf), msg, argument_list); - avio_write(s->avio_context, buf, ret); - } + if (msg) + avio_vprintf(s->avio_context, msg, argument_list); va_end(argument_list); } -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
