From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id BDB0C4EE68 for ; Wed, 18 Feb 2026 12:52:56 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'q8LDM0tYBxKmPUTDtnfXg3bxk4xEgOYStTWwvWRgT+E=', expected b'AVKomoVBhHgZv6FykI76Vve0EZLoJyfloqNUhpZ6Zno=')) header.d=ffmpeg.org header.i=@ffmpeg.org header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1771419170; h=mime-version : to : date : message-id : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=q8LDM0tYBxKmPUTDtnfXg3bxk4xEgOYStTWwvWRgT+E=; b=T6I7DDyy3EyJVcHGg+rCGOTuEQ+nX9b9mPlz9Eqr1mhgwfXpxQPTEN4xbKEuQ3OY8SpDJ tMrG9q1sdBkru2EW+sNr5FUW7+gxAf3uZtvs8phByrCVsndMkGIUyKJndIw7rdPd60D7Q82 +SEyg9M1NeyUaKd+jfXojs79gR6KZi+6IBzV0qGRFgEukDtjqYna6JyY/ppqV8WBwnvp2fD 1SOeYRABXOOuoLjy4pu4fdhtsl6icbjtKsInnQhUDfVVr9YU5Y5yQi60mIiYR2pXaS8aofC 6SUITjkyp7ybJLAhVQZpcmfdqu6RFpo0wVeagJImUnSi+3N0J2zvCxiMieZQ== Received: from [172.18.0.3] (unknown [172.18.0.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 3CC3B691139; Wed, 18 Feb 2026 14:52:50 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1771419161; b=WhNQqQMCt5j3guyPfdKS2OXX6QmVaCb7e+aR79Fkzn3003qS6ctMDhIwmWfvDmZ9Ujcss 4rrHKUcJNDeFD3DDdFAy1v1FklwVZ24+XbFKQOE8YA42HeY4FOMqDYalWQiz+Tk2PNCsdZg kVvaW4/C72DovSqmZlMiy/NEVA0Fq1GSmD752OL4xoeYj8tC7RuIDAo4c+razXw2Vl+9YK4 K16uvqHUb+GlCS4wWE1PyAa9jNBwKs7PiZbsAgymcL9QMD2a37TMqDH4uc08cwqV4VcMZZP LKobYvftieN19f2MPOzS8AmGduDUp4zoPkrse/vdFsrm42ppfaA/wLAd9LEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1771419161; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=9Ym5zStIRBaQAjHTmlIgYZQnz2Ar84zptYFp8fKCTlc=; b=VXo1SQKfAQ1RmkIM+jyn9x7eyxPSD5bq5i1OT7yuZKiGSpWsuneYU1yuJQRMBrDEDLvQS lyaBqafsPG6Ag/Uyr2dWqQc4O7hXH/cKYr45F6KDyDmuASNbdT31wK4eLzSvb/HElKwpvqU mru6EGk5G3RROPyXaiFjK6LWbU0TLZQ8KHKn6XzJG6E3dbXfE3v/xWBsovAshOyHjfpdQQ/ xrk3LsupTGHlYyzc5Kf5ZJq0F4JvXoLV8Q689w7fs0wBtucXfGjlX5j1g/HfETtIPUWz839 gU/CquxcXD0LL+h1Lu+Cxx4aW4r8SlYcMLfEb7tlY2fndah5tsheek5y4Ftg== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none; dmarc=pass header.from=ffmpeg.org policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=ffmpeg.org policy.dmarc=quarantine DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1771419153; h=content-type : mime-version : content-transfer-encoding : from : to : reply-to : subject : date : from; bh=AVKomoVBhHgZv6FykI76Vve0EZLoJyfloqNUhpZ6Zno=; b=mac3siWJWeTNJdWZqA974rCdSzdSlBpE8WaByLx91PlRuR3jbgm7Zq/E5VenqDMJE9ZNI TLfVNiTv1qcOeXU/6KUCWsQCQHQEUoRWqoyectwZGbKb5Iox98vXTvf5PaSVXGFRWEyfVTU BpObWISur2i7Zp+TGsp6U8C0JPwOiRzsxhZ/6vhBbBwVyxo/9hNxhhFU0bcSOa66pR6zRcB SZUnjS8a2BOpKbLvslz04lq4jLYTzWZL0r7LnklQgwhc8/caaEznxkFE0ULuCKn1R8lr8bQ AuMC978jT5cOk4uSJnG8qlO9IqDim1VQhB2mG44GEozvYCvyuc2v5LLvhHjg== Received: from c8d966988b92 (code.ffmpeg.org [188.245.149.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id 196A768025D for ; Wed, 18 Feb 2026 14:52:33 +0200 (EET) MIME-Version: 1.0 To: ffmpeg-devel@ffmpeg.org Date: Wed, 18 Feb 2026 12:52:32 -0000 Message-ID: <177141915321.25.9631740073811098598@29965ddac10e> Message-ID-Hash: AOBYJ6ODB3HYJUDLCAYN3IYG4CNBL6X7 X-Message-ID-Hash: AOBYJ6ODB3HYJUDLCAYN3IYG4CNBL6X7 X-MailFrom: code@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] [PR] avcodec/elbg: error out from try_shift_candidate() when clipping occurred (PR #21785) List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: michaelni via ffmpeg-devel Cc: michaelni Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: PR #21785 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21785 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21785.patch The code assumes that (a+b)+c = a+(b+c) but this does not hold true when clipping occurred. A better fix is to use int64_t or ensure clipping always cancels Fixes: error becoming negative Fixes: 472729757/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CINEPAK_fuzzer-5712538546536448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer >>From cecb39fe619391d0960ceec6cfe9ed29b26706d3 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Mon, 16 Feb 2026 03:34:25 +0100 Subject: [PATCH] avcodec/elbg: error out from try_shift_candidate() when clipping occurred The code assumes that (a+b)+c = a+(b+c) but this does not hold true when clipping occurred. A better fix is to use int64_t or ensure clipping always cancels Fixes: error becoming negative Fixes: 472729757/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CINEPAK_fuzzer-5712538546536448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer --- libavcodec/elbg.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavcodec/elbg.c b/libavcodec/elbg.c index 84043af4fd..37bc955bc2 100644 --- a/libavcodec/elbg.c +++ b/libavcodec/elbg.c @@ -302,6 +302,9 @@ static void try_shift_candidate(ELBGContext *elbg, int idx[3]) for (j=0; j<3; j++) olderror += elbg->utility[idx[j]]; + if (olderror >= INT_MAX) + return; + memset(newcentroid[2], 0, elbg->dim*sizeof(int)); for (k=0; k<2; k++) -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org