From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id F2D004E2AC for ; Fri, 16 Jan 2026 16:15:14 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'r3JEPDanoNkDuPeslpdvlBSqn8HV4TXphk5frDoDqaI=', expected b'4VoOu/CoZsVVLoKl15vMgyWbjwVORAoOVNT+ivxKXX4=')) header.d=ffmpeg.org header.i=@ffmpeg.org header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1768580107; h=mime-version : to : date : message-id : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=r3JEPDanoNkDuPeslpdvlBSqn8HV4TXphk5frDoDqaI=; b=kyBUlPDgdVKdGYtuipqRdq1S87DnoQoxRHcMnGjxE40LcIgBP79NZu2oN68QknaNkstBY A6kkyjrm+XACvBIZV8Co0F43GYRcV52GRoMFa6B6I63LRIaM/XQBCP8n4lI/Sh+OEh/2APX dUElF7gw7X3M9i9mlyu9QYsNv/UBTZNykmXfy0iKaKQ3Kxf5Gj+AQKAluaJr/rnCRln/k7q YWbM6c+FvUVgpGvV/p6qFGMDSzkoPQIHMK8G/kdbwtV2/jnTleoc2vZuGUblVHn3MXxflry eXA3r7wRo1w8e75Wcgg4PhUBsXkDyO1A+MpPyp0MhUsfupZn81dWKC8cqG7A== Received: from [172.20.0.4] (unknown [172.20.0.4]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 14227690E48; Fri, 16 Jan 2026 18:15:07 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1768580091; b=DR28yfnteIFM4ZjiGmu9pcIZRyygqKzxj1lxYEORQt3DTRJHJWOrPiAmfAJtpzmRbnCSS Xw6Kg4SmCofr9xkbuFS8dCkiVbMUs2g4vUtyGEZI7+QeyH0tuu+lQj3vkcp7eHykaViEZZn Rp74+8GgG6DVIUgYa800Hs7J99DLxuAIN6i+KQW/UzFE1n8lMmk2ROD6FxvS5Nc2QqdSBIJ 53qeYERoWHX1cHMxqgeAzA5oaX3U9AmC5duEnOOt5VI51x8b3jMRbvDx/G9xDIL5/VbiAAG NzlngFww5NsdW4ewRdzZa83LcJebiabHXpIeRGJTBAjnhqJoTkSpivxHQCmA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1768580091; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=Tok0/2tERvrOIf48Fjvjwu04oMskTLVJ7LpEv8rTtAo=; b=fULnCvuc3VkSrfA9vvwRY5aFhEyh1QbrVUp9+TPWj44uvW+m9BkwC6HIqpeDSII7InPvm q4NKLzdbM5Ux4f+84Bd0PL9CyCFa9/lwFjWkuP4A2WhWVutMxNuNQ51qYbSw4Dd+cIWJc81 BNn9G2HR8d4vvP/yqg445rQ53jd858Al7+RJSi6rjfYmTfTNpy8ARd6oKXWuKH1biYrMZCO CvoVEW8N9ZvV5IKL02XOYZfajsTRsNH1t0sjqiifQvSGJblibYXSvv+6k9XyQt4SBG0umNu zYEx7u+IKr652OOaSZuqcfHXISRjzn4TWvijKnp7yaEGPCnY+N7pLtVH3lzw== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none; dmarc=pass header.from=ffmpeg.org policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=ffmpeg.org policy.dmarc=quarantine DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1768580082; h=content-type : mime-version : content-transfer-encoding : from : to : reply-to : subject : date : from; bh=4VoOu/CoZsVVLoKl15vMgyWbjwVORAoOVNT+ivxKXX4=; b=EK8IrE1a4MV+SaCTuBof1NEhesMULFgWLdwvYrImF62yFrlKZyIeHCVXTVyIkyRfMyd2I xXaR1Ixw4lH08IpbdRBqzUCCGN+g9+evrLoURT7DrjL2fVJb4AUwg3/Fuo4j5lLQnnrsqyH j5KM+fVvtITqP3qckI4vzO4ab1IOy5wo8fc+yIRIVJwI9pzVba9GKRe1SxAdiO194DM5SsR AIJMvcPJ3WDpz7gVbDLKo6CQKBx1VSuBxkugmOQE2nzHsMnienod+VlK5ho1DFclKGFPhPM /faPXl3dAxQVVFQxa1otfpfvsnInHhIinUD4UUDTKdADfpn3xwtKnns9Zl5g== Received: from 69dab402ede7 (code.ffmpeg.org [188.245.149.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id F15B468009E for ; Fri, 16 Jan 2026 18:14:41 +0200 (EET) MIME-Version: 1.0 To: ffmpeg-devel@ffmpeg.org Date: Fri, 16 Jan 2026 16:14:41 -0000 Message-ID: <176858008218.25.4331897251136199264@4457048688e7> Message-ID-Hash: NVWO2THWRZ72LAZWOXUGA5CNF4JIVLLE X-Message-ID-Hash: NVWO2THWRZ72LAZWOXUGA5CNF4JIVLLE X-MailFrom: code@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] [PR] avformat/hcom: check that all extradata bytes were read from the input (PR #21494) List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: James Almer via ffmpeg-devel Cc: James Almer Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: PR #21494 opened by James Almer (jamrial) URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21494 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21494.patch Fixes issue #21493. >>From 927702d39b5612cd34f3f5c174f5a14bf86476e0 Mon Sep 17 00:00:00 2001 From: James Almer Date: Fri, 16 Jan 2026 13:14:09 -0300 Subject: [PATCH] avformat/hcom: check that all extradata bytes were read from the input Fixes issue #21493. Signed-off-by: James Almer --- libavformat/hcom.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libavformat/hcom.c b/libavformat/hcom.c index 2a8c524496..fa32f2bbb9 100644 --- a/libavformat/hcom.c +++ b/libavformat/hcom.c @@ -73,7 +73,9 @@ static int hcom_read_header(AVFormatContext *s) return ret; AV_WB16(st->codecpar->extradata, dict_entries); AV_WB32(st->codecpar->extradata + 2, compresstype); - avio_read(s->pb, st->codecpar->extradata + 6, dict_entries * 4); + ret = ffio_read_size(s->pb, st->codecpar->extradata + 6, dict_entries * 4); + if (ret < 0) + return ret; avio_skip(s->pb, 1); st->codecpar->extradata[dict_entries * 4 + 6] = avio_r8(s->pb); -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org