PR #23281 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23281 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23281.patch
Fixes: out of array access Found-by: jiale yao Signed-off-by: Michael Niedermayer <[email protected]> >From 12beba9f860169a9bcf9ed0a7f3dd094ef582e46 Mon Sep 17 00:00:00 2001 From: jiale yao <[email protected]> Date: Sat, 30 May 2026 21:40:12 +0200 Subject: [PATCH] avfilter/avf_showcwt: fix out-of-bounds read in du scroll Fixes: out of array access Found-by: jiale yao Signed-off-by: Michael Niedermayer <[email protected]> --- libavfilter/avf_showcwt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavfilter/avf_showcwt.c b/libavfilter/avf_showcwt.c index 839bdc7983..4c4edaa768 100644 --- a/libavfilter/avf_showcwt.c +++ b/libavfilter/avf_showcwt.c @@ -1060,7 +1060,7 @@ static int output_frame(AVFilterContext *ctx) for (int p = 0; p < nb_planes; p++) { ptrdiff_t linesize = s->outpicref->linesize[p]; - for (int y = 0; y < s->sono_size; y++) { + for (int y = 0; y < s->sono_size - 1; y++) { uint8_t *dst = s->outpicref->data[p] + y * linesize; memmove(dst, dst + linesize, s->w); -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
