From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 046A14AF97 for ; Fri, 23 Jan 2026 02:50:26 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'/6womYzFK6aYCPDnldp8aCb5xzTVCCq5/qKiSf/hc48=', expected b'SnVDgi9jJu68CVOK0bqFDoGsX259j69ATqOziIZYhiU=')) header.d=ffmpeg.org header.i=@ffmpeg.org header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1769136621; h=mime-version : to : date : message-id : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=/6womYzFK6aYCPDnldp8aCb5xzTVCCq5/qKiSf/hc48=; b=xURezBK4cdhEJXWtxKoOTz9tuYwWvsCWVWlxssF5YOqsFHkAUNDeZTQoXboS1CnEI8HyX JQFKri5GTX9bqkpKob8+9CmC6uhGubWsln/b3BWIDhUEgtS3ZI9qB4/E1/VSz49/SMmg2ic ODZiDaD/HonmjqvMobV65MhvRyNI6tFEKf77w0AjE1GIty5zIpFisMIq4qt6BBT9VwIxiAb 3OdgZGUalSmCo1dVLz1K/4vNrQC6fAet7yi1YeTZi1G0W/PV0FSYFfQw3h7eiVb5cTLZbeI fk73IQnFtxvymkW59LtlprpAm8hUrsihy7IwMaAyf0rYktYxra/d34Qf+30g== Received: from [172.20.0.4] (unknown [172.20.0.4]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id A9B666911E1; Fri, 23 Jan 2026 04:50:21 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1769136611; b=dfQOKZIBi8n8TdGr+aND9i5UR4Lv5/7w79MY+YM4Miyc7rOaBLqvadk+j9oC/Dz01HcLF 3NrhSQzAlxrR2riCmg77kFEPdNVsJSI9PGvHNE5HQ4vg3oiVd/DfY6JWPjSOjaWAX9fpO+R TOCpYLFDcItyCHJKnl8IHCffQo5NNf5gBAgn/hWvzJZ+eJnYRZL2G9GfyS0Myq+VmCPtIqx 3y+nQdWjClIf8hc5H23YBQsOOwJlLpXdM3MFMCZGNe5yKMobtIbBp9/KWtQ6+4Ga/AhhKCO Kp2DfESt7qaPluT9DFnZPeGCc8r0IxSHQZ+UubRhVAU9UGuojYI3mSvbLFrg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1769136611; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=Ku9WnuD+cbEyP6FIAFfn5eDt3i5qlEjXQTca9WepBn8=; b=arbCe7aA1jxP8cGaTQTNBWjjjekLTTMedaB9pq7IispyhNMXFouqxaGoa/Yc3Eh95IKLp jtcRlt67XWn0il3qD1+8j2wv0dBai6lgqHra0cZ+uq+Lv5g5IuDyznKNYSeGZ4G/oZNqVf3 XzfoGk8gULaWXmtKv3++dUtP5B4kpiqEDP5Joe7rT7aL2SUp6ej7OCaXsxxRL14YSBIFboQ SS9brfXfsHuebB5k6lFdkiEEm9I0DDKvftXRSCSadrX+C4DfyVobjtSKXbVT8FBmr3CY+kt yN2Orzan/tjc8XesM4x44GuDLVJ9OAThx2hDtQPUok1G7N6U7rn5fpObfrzQ== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none; dmarc=pass header.from=ffmpeg.org policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=ffmpeg.org policy.dmarc=quarantine DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1769136603; h=content-type : mime-version : content-transfer-encoding : from : to : reply-to : subject : date : from; bh=SnVDgi9jJu68CVOK0bqFDoGsX259j69ATqOziIZYhiU=; b=Z1RmCQjLALIUNwoG+46x7CMoNNzv9mzDfxjf3Mxx0+ooYbS1CkS5XRJmokEqB6T9qcpvz rhnSKLNmbiVQk3W1qiQNsLasVCXiCEP5NOeRBoSX2/GtQiyLO7BlypiqGGLf4KBEEY024ZO V7KzGTVFyWwT/I/yU81/GgQx2WR3OyTAxArrQ4ccEjqRvSK7hJ8IG6ezVSwX6QQSV5XR8HM FxSUh0prR1VM7pwcQVZjucc9gTH5htGe6zoHudIxJU7LTUckbHfpU5BfY2C/7Oi0TdRs7uj tX1rSNwm4U974X3qarGoWpfrpm4O5rsNts2u+20MjMROxmhlQe/TzFycErNQ== Received: from 69dab402ede7 (code.ffmpeg.org [188.245.149.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id 74E4F690EE2 for ; Fri, 23 Jan 2026 04:50:03 +0200 (EET) MIME-Version: 1.0 To: ffmpeg-devel@ffmpeg.org Date: Fri, 23 Jan 2026 02:50:03 -0000 Message-ID: <176913660361.25.3992618980578719676@4457048688e7> Message-ID-Hash: 4YB5OHNBE5NWSH2P4KJ5O7NPVYKVP5HF X-Message-ID-Hash: 4YB5OHNBE5NWSH2P4KJ5O7NPVYKVP5HF X-MailFrom: code@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] [PR] avformat/yuv4mpegen: Sanity check input packet frame dimensions (PR #21552) List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: michaelni via ffmpeg-devel Cc: michaelni Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: PR #21552 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21552 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21552.patch Fixes: out of array access if a filter-graph is used the injects changing dimensions Found-by: Zhenpeng (Leo) Lin from depthfirst Signed-off-by: Michael Niedermayer >>From 2ac2f8eba4d5bdcbe00c937373858f7b1b79aaea Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 23 Jan 2026 02:09:02 +0100 Subject: [PATCH] avformat/yuv4mpegen: Sanity check input packet frame dimensions Fixes: out of array access if a filter-graph is used the injects changing dimensions Found-by: Zhenpeng (Leo) Lin from depthfirst Signed-off-by: Michael Niedermayer --- libavformat/yuv4mpegenc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavformat/yuv4mpegenc.c b/libavformat/yuv4mpegenc.c index 371d3745c1..493ddd1e38 100644 --- a/libavformat/yuv4mpegenc.c +++ b/libavformat/yuv4mpegenc.c @@ -197,6 +197,9 @@ static int yuv4_write_packet(AVFormatContext *s, AVPacket *pkt) width = st->codecpar->width; height = st->codecpar->height; + if (frame->width != width || frame->height != height) + return AVERROR(EINVAL); + desc = av_pix_fmt_desc_get(st->codecpar->format); /* The following code presumes all planes to be non-interleaved. */ -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org