PR #22974 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22974 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22974.patch
Alternative fix for 68ea660d83f27c1f45be12af21e30858d3a2cbeb I think this still makes sense as a defensive check based on patch by depthfirst *Vulnerability reported by Zhenpeng (Leo) Lin at depthfirst* Signed-off-by: Michael Niedermayer <[email protected]> >From d44979e0445292c47f806a7dd9d715281cf477a1 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer <[email protected]> Date: Thu, 30 Apr 2026 21:03:25 +0200 Subject: [PATCH] fftools/ffmpeg_demux: Check nb_tiles Alternative fix for 68ea660d83f27c1f45be12af21e30858d3a2cbeb I think this still makes sense as a defensive check based on patch by depthfirst *Vulnerability reported by Zhenpeng (Leo) Lin at depthfirst* Signed-off-by: Michael Niedermayer <[email protected]> --- fftools/ffmpeg_demux.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fftools/ffmpeg_demux.c b/fftools/ffmpeg_demux.c index 04ee2cc2ed..4ba318b6e1 100644 --- a/fftools/ffmpeg_demux.c +++ b/fftools/ffmpeg_demux.c @@ -1799,6 +1799,8 @@ static int istg_parse_tile_grid(const OptionsContext *o, Demuxer *d, InputStream const char *apply_cropping = NULL; int ret; + if (!tg->nb_tiles) + return AVERROR_INVALIDDATA; if (tg->nb_tiles == 1) return 0; -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
