From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id E36134E5FB for ; Tue, 24 Feb 2026 06:15:25 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'RdCpbW6XVOU4R960hhmVc1tTek4AihnW5qFPlC46BD0=', expected b'6z7oOqrRaxt/pGgRYaGNDFMX4HVoo8vAmmBV2WjBGKg=')) header.d=ffmpeg.org header.i=@ffmpeg.org header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1771880691; h=mime-version : to : date : message-id : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=RdCpbW6XVOU4R960hhmVc1tTek4AihnW5qFPlC46BD0=; b=u0BgSZhkWLQVgqX6xvaosqGmWzudktCPM3TPztwfTMyeHNGcW7pbX6KP01ueBIp+NtRd1 B8IjlIn157DNFPaG+zQiT5gZpZdf41nJ+tDKplUP0vbY8gIZQnckWMaD4CiDWvUWEy9RnQ9 nGTRA5B7tMRkBb9X9l9TFXIx1cYOXy4Jo7s1IZloNA2blMwqAAaFRmTJM2hTs3PwzVZ+Fap L6WkgBB5tClmtFIFPF7Q+yQi/Svmw7kSASDHO161F4a9YTYMIYhrAXiME8PhMwXTn80hPH9 ZgsJduE+ZSJd4v7VLHEIBbAX1iBz7IF19MiGZamXIq7cJDKqj1HkaSMMrGAw== Received: from [172.18.0.3] (unknown [172.18.0.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 67D67691277; Mon, 23 Feb 2026 23:04:51 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1771880683; b=gOYkdtijoO+pq8vV1vNcWiHJpIKADaNtMc2J1BLHY0f4ZHNZ5qyA2uyCDSpNDQ5fkE7SN u4bK+3DkUpur2Is0xR4wyxy7Hw7oVycLP6sgyrZEsZOMT1Z9bHZK5XP5zAL3hvJJLHX6pKp prt1kBw006Zh6Kf1KK/JEm6s7uNk9d1mLWYFXhA8z5E/4HMDp8XPk5pjvxCB2RAW+6xkfpy 3KMofQiNsA8fFNb1QR3xKMu9kn3RhOcjIt9z3InSULGwD6jff7pEeOcHGTIF+5OSViVSwG+ ICauHBHMzlfpgzMnetiMSK+b9zn09/8PuF6LURqbEYcqvzb0NqmTxGAukXMw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1771880683; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=MIrLYJiviQKpOC5qWF5/5/LNj9ad+D75RfZV6slEQEA=; b=A87f9EeVFDqCfd+n/X26A4oP9oT4i0bqvFxekOXHhGInMol4x4mVkWwwvjDC2y7dk3gPI PSrXPR1U9V5hnmFK4BfY4Sk1yUCoeYtQuPA10beynownDzDazwhBdBu/RT+5E7fgvqlbfWb AEr9iKChFj01GGio/Fq5CiW2SbYgHXTVs4Jh1L2WHafpG5oFmEfj43ghvRAOWKrmPWO5Yew RVH8rQFI77Scm00Vu8QhGGd9Sta9YSAHMg5iK871W5ZGNTnJFe/gQLTAMwdkLWrEVjb8n07 8p1uwGTwyK2yDhBJ8li19oPAb57xAaoxmTGbIjk4yF3xk+F0RHUYP76aTZwg== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none; dmarc=pass header.from=ffmpeg.org policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=ffmpeg.org header.i=@ffmpeg.org; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=ffmpeg.org policy.dmarc=quarantine DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1771880674; h=content-type : mime-version : content-transfer-encoding : from : to : reply-to : subject : date : from; bh=6z7oOqrRaxt/pGgRYaGNDFMX4HVoo8vAmmBV2WjBGKg=; b=ZxfImGt2m1akfrZM262P+2KF9cofie48BuKLR3B17efeoVxQNXKRUaYPnf0auMVsUUd97 Xli6VX7LEAJQHjaF8gV6AEWgcSskmhrFgIIeH51dBDw8Dw2ZkN4A12a+KVYK9Z+IaOWBr3z OkqvLlXA2i8SBtbLMUIrwzAtLQLJjXMJrfXjXGgAV5p9ATmSoS6gahUXMpe7JZWZCncPqam DCXKuRU5UhtfuyVqYq9ICbA37sf4WSQ6YyQB3tbuAaPF3Q4T7D4ciW1k0WgHpUmzkhbp08d Ku/uo3miEis1C5DlTpMs7YNX8coFU7zo5CNTq7XC7rGnfxa8c93I2vz3pgwQ== MIME-Version: 1.0 To: ffmpeg-devel@ffmpeg.org Date: Mon, 23 Feb 2026 21:04:34 -0000 Message-ID: <177188067499.25.14834248885513415086@29965ddac10e> Message-ID-Hash: SAURPLNULJQMG7GPJ4SJ3HR3S3ROSB6B X-Message-ID-Hash: SAURPLNULJQMG7GPJ4SJ3HR3S3ROSB6B X-MailFrom: code@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] [PR] avformat/vividas: Reset n_audio_subpackets on error (PR #22271) List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: michaelni via ffmpeg-devel Cc: michaelni Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: PR #22271 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22271 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22271.patch Fixes: signed integer overflow: -63 - 2147483594 cannot be represented in type 'int' Fixes: 486530208/clusterfuzz-testcase-minimized-ffmpeg_dem_VIVIDAS_fuzzer-4694818252193792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer >>From dbc8531b57a657340678ae289678377c54688af4 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Mon, 23 Feb 2026 20:29:40 +0100 Subject: [PATCH] avformat/vividas: Reset n_audio_subpackets on error Fixes: signed integer overflow: -63 - 2147483594 cannot be represented in type 'int' Fixes: 486530208/clusterfuzz-testcase-minimized-ffmpeg_dem_VIVIDAS_fuzzer-4694818252193792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer --- libavformat/vividas.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libavformat/vividas.c b/libavformat/vividas.c index b708d71c65..76557acb8b 100644 --- a/libavformat/vividas.c +++ b/libavformat/vividas.c @@ -723,8 +723,10 @@ static int viv_read_packet(AVFormatContext *s, } last_start = viv->audio_subpackets[viv->n_audio_subpackets].start = (int)(off - avio_tell(pb)); - if (last_start < last) + if (last_start < last) { + viv->n_audio_subpackets = 0; return AVERROR_INVALIDDATA; + } viv->current_audio_subpacket = 0; } else { -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org