PR #24477 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24477 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24477.patch
Fixes: use of uninitialized memory Fixes: crafted_malicious.genh / generate_poc.py Fixes: XtWk54O0PGfP Found-by: zhang xingxing Signed-off-by: Michael Niedermayer <[email protected]> >From cb392a02d60b3572dd6cb447a7c51dee947d0bea Mon Sep 17 00:00:00 2001 From: Michael Niedermayer <[email protected]> Date: Mon, 14 Sep 2026 03:02:32 +0200 Subject: [PATCH] avformat/genh: check for unsupported interlaved size 1 typ1 THP Fixes: use of uninitialized memory Fixes: crafted_malicious.genh / generate_poc.py Fixes: XtWk54O0PGfP Found-by: zhang xingxing Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/genh.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavformat/genh.c b/libavformat/genh.c index 32cad7382b..14618a8ed7 100644 --- a/libavformat/genh.c +++ b/libavformat/genh.c @@ -177,6 +177,11 @@ static int genh_read_packet(AVFormatContext *s, AVPacket *pkt) par->ch_layout.nb_channels > 1) { int i, ch; + if (c->interleave_size != 2) { + avpriv_request_sample(s, "type1 THP interleave size %d", c->interleave_size); + return AVERROR_PATCHWELCOME; + } + if (avio_feof(s->pb)) return AVERROR_EOF; ret = av_new_packet(pkt, 8 * par->ch_layout.nb_channels); -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
