From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id C5A6A4C933 for ; Wed, 6 Aug 2025 16:31:08 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 02EAA68CBAD; Wed, 6 Aug 2025 19:31:04 +0300 (EEST) Received: from 264e01bdf0e5 (code.ffmpeg.org [188.245.149.3]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id C4BBE68CA66 for ; Wed, 6 Aug 2025 19:31:01 +0300 (EEST) MIME-Version: 1.0 From: =?utf-8?q?Kacper_Michaj=C5=82ow?= To: ffmpeg-devel@ffmpeg.org Subject: [FFmpeg-devel] =?utf-8?q?=5BPATCH=5D_avcodec/cbs=5Fh266=5Fsyntax?= =?utf-8?q?=5Ftemplate=3A_fix_out_of_bounds_access_=28PR_=2320139=29?= X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Message-Id: <20250806163104.02EAA68CBAD@ffbox0-bg.ffmpeg.org> Date: Wed, 6 Aug 2025 19:31:04 +0300 (EEST) Archived-At: List-Archive: List-Post: UFIgIzIwMTM5IG9wZW5lZCBieSBLYWNwZXIgTWljaGFqxYJvdyAoa2FzcGVyOTMpClVSTDogaHR0 cHM6Ly9jb2RlLmZmbXBlZy5vcmcvRkZtcGVnL0ZGbXBlZy9wdWxscy8yMDEzOQpQYXRjaCBVUkw6 IGh0dHBzOi8vY29kZS5mZm1wZWcub3JnL0ZGbXBlZy9GRm1wZWcvcHVsbHMvMjAxMzkucGF0Y2gK CmN1cnJlbnQtPm51bV90aWxlX2NvbHVtbnMgaXMgbm90IHVwZGF0ZWQgaW4gdGhlIGxvb3AsIHNv IHRoZSBleGlzdGluZw0KY2hlY2sgd2FzIG5vdCB3b3JraW5nLiBDaGVjayBjdXJyZW50IGluZGV4 IGluc3RlYWQgYW5kIGJyZWFrLiBUaGlzIGFsc28NCnNpbXBsaWZpZXMgZHVwbGljYXRlZCBsb2cu DQoNCkZpeGVzOiBPU1MtRnV6ei80MzUyMjU1MzEKCgpGcm9tIGViZjRlOWRkMDNmNjJlMTRjYTFh ZjE3ZjZmZjNhYzZkNzdkZGM5NmEgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCkZyb206ID0/VVRG LTg/cT9LYWNwZXI9MjBNaWNoYWo9QzU9ODJvdz89IDxrYXNwZXI5M0BnbWFpbC5jb20+CkRhdGU6 IFdlZCwgNiBBdWcgMjAyNSAxODoyNjo0MiArMDIwMApTdWJqZWN0OiBbUEFUQ0hdIGF2Y29kZWMv Y2JzX2gyNjZfc3ludGF4X3RlbXBsYXRlOiBmaXggb3V0IG9mIGJvdW5kcyBhY2Nlc3MKTUlNRS1W ZXJzaW9uOiAxLjAKQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFyc2V0PVVURi04CkNvbnRl bnQtVHJhbnNmZXItRW5jb2Rpbmc6IDhiaXQKCmN1cnJlbnQtPm51bV90aWxlX2NvbHVtbnMgaXMg bm90IHVwZGF0ZWQgaW4gdGhlIGxvb3AsIHNvIHRoZSBleGlzdGluZwpjaGVjayB3YXMgbm90IHdv cmtpbmcuIENoZWNrIGN1cnJlbnQgaW5kZXggaW5zdGVhZCBhbmQgYnJlYWsuIFRoaXMgYWxzbwpz aW1wbGlmaWVzIGR1cGxpY2F0ZWQgbG9nLgoKRml4ZXM6IE9TUy1GdXp6LzQzNTIyNTUzMQoKU2ln bmVkLW9mZi1ieTogS2FjcGVyIE1pY2hhasWCb3cgPGthc3BlcjkzQGdtYWlsLmNvbT4KLS0tCiBs aWJhdmNvZGVjL2Nic19oMjY2X3N5bnRheF90ZW1wbGF0ZS5jIHwgOCArKy0tLS0tLQogMSBmaWxl IGNoYW5nZWQsIDIgaW5zZXJ0aW9ucygrKSwgNiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9s aWJhdmNvZGVjL2Nic19oMjY2X3N5bnRheF90ZW1wbGF0ZS5jIGIvbGliYXZjb2RlYy9jYnNfaDI2 Nl9zeW50YXhfdGVtcGxhdGUuYwppbmRleCBlMmNjNDYxYmZmLi5kZTgwZGFhZjBiIDEwMDY0NAot LS0gYS9saWJhdmNvZGVjL2Nic19oMjY2X3N5bnRheF90ZW1wbGF0ZS5jCisrKyBiL2xpYmF2Y29k ZWMvY2JzX2gyNjZfc3ludGF4X3RlbXBsYXRlLmMKQEAgLTE4OTcsMTIgKzE4OTcsOCBAQCBzdGF0 aWMgaW50IEZVTkMocHBzKSAoQ29kZWRCaXRzdHJlYW1Db250ZXh0ICpjdHgsIFJXQ29udGV4dCAq cncsCiAgICAgICAgIH0KICAgICAgICAgdW5pZmllZF9zaXplID0gY3VycmVudC0+cHBzX3RpbGVf Y29sdW1uX3dpZHRoX21pbnVzMVtpIC0gMV0gKyAxOwogICAgICAgICB3aGlsZSAocmVtYWluaW5n X3NpemUgPiAwKSB7Ci0gICAgICAgICAgICBpZiAoY3VycmVudC0+bnVtX3RpbGVfY29sdW1ucyA+ IFZWQ19NQVhfVElMRV9DT0xVTU5TKSB7Ci0gICAgICAgICAgICAgICAgYXZfbG9nKGN0eC0+bG9n X2N0eCwgQVZfTE9HX0VSUk9SLAotICAgICAgICAgICAgICAgICAgICAgICAiTnVtVGlsZUNvbHVt bnMoJWQpID4gdGhhbiBWVkNfTUFYX1RJTEVfQ09MVU1OUyglZClcbiIsCi0gICAgICAgICAgICAg ICAgICAgICAgIGN1cnJlbnQtPm51bV90aWxlX2NvbHVtbnMsIFZWQ19NQVhfVElMRV9DT0xVTU5T KTsKLSAgICAgICAgICAgICAgICByZXR1cm4gQVZFUlJPUl9JTlZBTElEREFUQTsKLSAgICAgICAg ICAgIH0KKyAgICAgICAgICAgIGlmIChpID49IFZWQ19NQVhfVElMRV9DT0xVTU5TKQorICAgICAg ICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgdW5pZmllZF9zaXplID0gRkZNSU4ocmVtYWlu aW5nX3NpemUsIHVuaWZpZWRfc2l6ZSk7CiAgICAgICAgICAgICBjdXJyZW50LT5jb2xfd2lkdGhf dmFsW2ldID0gdW5pZmllZF9zaXplOwogICAgICAgICAgICAgcmVtYWluaW5nX3NpemUgLT0gdW5p ZmllZF9zaXplOwotLSAKMi40OS4xCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXwpmZm1wZWctZGV2ZWwgbWFpbGluZyBsaXN0CmZmbXBlZy1kZXZlbEBmZm1w ZWcub3JnCmh0dHBzOi8vZmZtcGVnLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZmbXBlZy1kZXZlbAoK VG8gdW5zdWJzY3JpYmUsIHZpc2l0IGxpbmsgYWJvdmUsIG9yIGVtYWlsCmZmbXBlZy1kZXZlbC1y ZXF1ZXN0QGZmbXBlZy5vcmcgd2l0aCBzdWJqZWN0ICJ1bnN1YnNjcmliZSIuCg==