This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/8.1 in repository ffmpeg.
commit db033ac06acff0688bb620c9642ec4d15747a694 Author: Kenan Alghythee <[email protected]> AuthorDate: Sat Jul 11 16:57:38 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sat Sep 19 14:27:01 2026 +0200 avcodec/dovi_rpuenc: validate vdr_rpu_id from the input metadata Fixes: out of array access Fixes: SUcVEyk7r3Gc Found-by: Kenan Alghythee <[email protected]> (cherry picked from commit 372a611913e6e2ba3d0fe859a00934f974f7d003) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/dovi_rpuenc.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libavcodec/dovi_rpuenc.c b/libavcodec/dovi_rpuenc.c index 6fc218a7ae..b071679611 100644 --- a/libavcodec/dovi_rpuenc.c +++ b/libavcodec/dovi_rpuenc.c @@ -685,6 +685,10 @@ int ff_dovi_rpu_generate(DOVIContext *s, const AVDOVIMetadata *metadata, dv_md_compression = AV_DOVI_COMPRESSION_NONE; vdr_rpu_id = mapping->vdr_rpu_id; + if (vdr_rpu_id < 0 || vdr_rpu_id > DOVI_MAX_DM_ID) { + av_log(s->logctx, AV_LOG_ERROR, "Invalid VDR RPU id %d\n", vdr_rpu_id); + return AVERROR_INVALIDDATA; + } use_prev_vdr_rpu = 0; if (!s->vdr[vdr_rpu_id]) { -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
