* [FFmpeg-devel] [PATCH] tools/zmqsend: fix integer overflow on 32-bit systems
@ 2026-01-05 1:14 0xBat via ffmpeg-devel
0 siblings, 0 replies; only message in thread
From: 0xBat via ffmpeg-devel @ 2026-01-05 1:14 UTC (permalink / raw)
To: ffmpeg-devel; +Cc: 0xBat
Validate zmq_msg_size to prevent an integer overflow when calculating recv_buf_size (sz + 1). This ensures safe memory allocation on 32-bit architectures.
Signed-off-by: 0xBat <monsterbat02@gmail.com>
---
tools/zmqsend.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/tools/zmqsend.c b/tools/zmqsend.c
index dc5d426cc8..6e80fdab8c 100644
--- a/tools/zmqsend.c
+++ b/tools/zmqsend.c
@@ -149,7 +149,13 @@ int main(int argc, char **argv)
goto end;
}
- recv_buf_size = zmq_msg_size(&msg) + 1;
+ size_t sz = zmq_msg_size(&msg);
+ if (sz == SIZE_MAX) {
+ av_log(NULL, AV_LOG_ERROR, "Message too large (overflow detected)\n");
+ ret = 1;
+ goto end;
+ }
+ recv_buf_size = sz + 1;
recv_buf = av_malloc(recv_buf_size);
if (!recv_buf) {
av_log(NULL, AV_LOG_ERROR,
--
2.52.0.windows.1
_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-01-06 2:16 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-01-05 1:14 [FFmpeg-devel] [PATCH] tools/zmqsend: fix integer overflow on 32-bit systems 0xBat via ffmpeg-devel
Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
This inbox may be cloned and mirrored by anyone:
git clone --mirror https://master.gitmailbox.com/ffmpegdev/0 ffmpegdev/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 ffmpegdev ffmpegdev/ https://master.gitmailbox.com/ffmpegdev \
ffmpegdev@gitmailbox.com
public-inbox-index ffmpegdev
Example config snippet for mirrors.
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git