From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 0F2424C38C for ; Sun, 9 Nov 2025 23:43:01 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'4tPFs9H14wz7+nJNf4QboLPQWFGY5V3HwqtJo7ucQbs=', expected b'Wfj51UctWcruyJtEZWYeLvm+hsdCalITzia/DKH6QnE=')) header.d=ffmpeg.org header.i=@ffmpeg.org header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1762731773; h=mime-version : to : date : message-id : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=4tPFs9H14wz7+nJNf4QboLPQWFGY5V3HwqtJo7ucQbs=; b=4MXXmVdSUhAsxKesqApMeWzqTf1xhF2eeD8R0Rn3XffRiiw0YAs9oV5o11d/I8AgE1ohq iuxgU64SF5MgE6LCxNJhyD9Cc9JafdqnjKLnn/eauQW0zTpyHoPadShxUVti5rpKMRy+9IN XpsTe4fIeV2iPRPkIEsALIdBQOwFDa85hWF87ORvANf/untAy6/N+2qXbV5CSahx/sjV0Sg +1xL4ipNno/wtVnyQRg0SvM9nrxhDLWQkXLGcneEFX5cZz8IUmS81kYq9qgPyZxdViiDtxn r4N2P8OXMgT4FOjKZYF1RdQzPI6OFjaF+rRyA+ASfTFotQRB1OKwYwNaHa/A== Received: from [172.19.0.2] (unknown [172.19.0.2]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 5C9A968FBE8; Mon, 10 Nov 2025 01:42:53 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1762731756; b=CoQrwqbLn9Y+JDsIV+vkRY7FDZwzZioOW4cHB/igffScqkvwdv9nPat0CG491yM5X9NlU IQstCBC9f9CoVRuB7Fv9e23GCg5PJtl08yrAy0Gtq9W7sJ/7A+ZVD0/jhIGIunVWxt7meeL tfOh/S1sh7bXlLWSRWXDM3qRacZmFM0+w3VjpTocmHF52/Eh9RpgkXA0rDUXsXtFcNrEZ2K ykkfptciEIKPH6+rZbbt/QzIaCx8nvOSi1IViaRj50e1nSoh0azUGJ9AVu4z0thkVoP3/JT K/anhD5P3gOadVQPiMGHvej4r4kMXSQkyW8D8QseJEjE2gWkT3p2RDbgPIww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1762731756; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=gPVYzPQpQa/eLRtd55WBLYM8VRD58nYtxROYk7mOHeM=; b=D/+PrLhXYmlBfegkUCkwI2EA7Gez2+v0vUrVWlkozvL17iWwEJZ6kOEBq16NjLm4FvUbP uDe33x1mc/K4JbDQ/eGJl7g7soFwoBtLuRhJCxIWG451mMLb3+4gklRy2ARgvpzGfQZJVZe 5EV7eASZvItNeB9JjGBypB4PM2EM8N7yetkIg5g65ZETqxbBbuE8D+lyHEXkl/HwjVURPdM K38Gey5vdk9Su/Dz39PH5bBUa+Z2PBG5D+pH/X0xkc1T31CQiI3uGWZ7+Sdt6ktGXyuMmWf MiVcfsyDvRwguKUvKGJlCTf7LQHkeYle/Dr2G0ohKyvrxRGCM7+4JWlrfv3w== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none; dmarc=pass header.from=ffmpeg.org policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=ffmpeg.org policy.dmarc=quarantine DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1762731747; h=content-type : mime-version : content-transfer-encoding : from : to : reply-to : subject : date : from; bh=Wfj51UctWcruyJtEZWYeLvm+hsdCalITzia/DKH6QnE=; b=jDqVE9uXhTONdan8UgIUeF1da3uy9ylHRMw5801JXo6TGftBpNgJVoyrav6zdMDEZHnFh BXPSVcCiyhNTtOdMeKhvnvo868EAai5P99JOLMcj2WlObJpSHw21Uk/rYJhpCPtS4FP/PzB oxKl0/7brrDuhheoHRj1JS/lu6wapcEdh4e7/uKreqyyGgEppkqbu6v7tBa7JcxTFN6njsG 51gCV0ShkcPGO2P9oQKw4MNKCi3mi/m7/y8FahBW/hYzUjhmlH2V3Kbk8AfTsjhaL5+eyYO 4DyEurKPfkPu167+SOVYQMLd6pPY35W5bC06hsec9D9ChvfJcD48Zxw/K52g== Received: from 188d6d40ca7a (code.ffmpeg.org [188.245.149.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id 49B6468EDDB for ; Mon, 10 Nov 2025 01:42:27 +0200 (EET) MIME-Version: 1.0 To: ffmpeg-devel@ffmpeg.org Date: Sun, 09 Nov 2025 23:42:26 -0000 Message-ID: <176273174746.25.17793568005183512010@2cb04c0e5124> Message-ID-Hash: DT43J6ZIPPWEHECCXPZL5626BL55VNGX X-Message-ID-Hash: DT43J6ZIPPWEHECCXPZL5626BL55VNGX X-MailFrom: code@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] [PATCH] avcodec/exr: Handle axmax like bxmin in 04d7a6d3db56ea1a93908ff2d3d312e3fc40a58c (PR #20879) List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: michaelni via ffmpeg-devel Cc: michaelni Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: PR #20879 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20879 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20879.patch Fixes: out of array access Fixes: 418335931/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer-6718455383654400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer >>From f14110ac5d9d7deff51c5bdcdd38eace991fc199 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sun, 9 Nov 2025 16:39:45 +0100 Subject: [PATCH] avcodec/exr: Handle axmax like bxmin in 04d7a6d3db56ea1a93908ff2d3d312e3fc40a58c Fixes: out of array access Fixes: 418335931/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer-6718455383654400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer --- libavcodec/exr.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libavcodec/exr.c b/libavcodec/exr.c index 536a55c5be..ca450a988e 100644 --- a/libavcodec/exr.c +++ b/libavcodec/exr.c @@ -1485,7 +1485,8 @@ static int decode_block(AVCodecContext *avctx, void *tdata, } // Zero out the end if xmax+1 is not w - memset(ptr_x, 0, axmax); + if (s->desc->flags & AV_PIX_FMT_FLAG_PLANAR || !c) + memset(ptr_x, 0, axmax); channel_buffer[c] += td->channel_line_size; } } -- 2.49.1 _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org