This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg.
commit dec1770703b7c19ba6bbc30049275301cd4c8a2f Author: romainhedouin <[email protected]> AuthorDate: Fri Oct 16 16:35:47 2026 +0200 Commit: michaelni <[email protected]> CommitDate: Sun Nov 1 04:00:54 2026 +0000 avfilter/vf_nnedi: fix a heap overflow in the prescreener buffer process_new() writes the prescreener flags four at a time, but the buffer was only as wide as the plane. If the width is not a multiple of four, up to three flags were written past the end of it. Found with ASan using the default settings, for example on gray 321x120. Found during a code review sweep of ffmpeg using an LLM. Signed-off-by: romainhedouin <[email protected]> --- libavfilter/vf_nnedi.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavfilter/vf_nnedi.c b/libavfilter/vf_nnedi.c index 148791f804..8deba18b0c 100644 --- a/libavfilter/vf_nnedi.c +++ b/libavfilter/vf_nnedi.c @@ -1096,7 +1096,7 @@ static int config_input(AVFilterLink *inlink) return AVERROR(ENOMEM); for (int i = 0; i < s->nb_threads; i++) { - s->prescreen_buf[i] = av_calloc(s->planewidth[0], sizeof(**s->prescreen_buf)); + s->prescreen_buf[i] = av_calloc(FFALIGN(s->planewidth[0], 4), sizeof(**s->prescreen_buf)); if (!s->prescreen_buf[i]) return AVERROR(ENOMEM); } -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
