From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 5CF424D13E for ; Mon, 10 Nov 2025 14:11:40 +0000 (UTC) Authentication-Results: ffbox; dkim=fail (body hash mismatch (got b'1S0wJqybrYTmhFuuT7rmrGNvd2i+uud/ABJl6BRqAXs=', expected b'PfPYhimOD7XEb9OUb1+RqfZFj8HjuGL5TlTDYzmTj8Y=')) header.d=googlemail.com header.a=rsa-sha256 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ffmpeg.org; i=@ffmpeg.org; q=dns/txt; s=mail; t=1762783896; h=mime-version : date : message-id : to : reply-to : subject : list-id : list-archive : list-archive : list-help : list-owner : list-post : list-subscribe : list-unsubscribe : from : cc : content-type : content-transfer-encoding : from; bh=1S0wJqybrYTmhFuuT7rmrGNvd2i+uud/ABJl6BRqAXs=; b=kUvy6Z34fHhw7B+4X6c819vQDCiv1Io4GCHD1lW0vmzp1qSufC67CKo47HUnUvGH6Pl0w pjAvOqbQF0NUDLswopy9c70kgRhQ1as9Jbe5ZQzkhumCAZFhkeP8M1oQnqrhUsIN1Cb1wr3 hWTZ3d+7KpYHpSEoUWMsP3w2MuHXd59HK6JOiJZ95J7EPsdWcNUB5vOSu4NcaU+DAWW1k23 GBaO/pFko6F7vzn/XPh/h6Ud9kpsQnB1kF+o22wifB801te+nze8iYxBdPl42m42QUdetHf eKXjnMiV2EYHgp4YD4vn/guIkSi4A1PRFZw4/1DKrTUImCyyis+hBXR/u4bQ== Received: from [172.19.0.2] (unknown [172.19.0.2]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 17AF268FC0D; Mon, 10 Nov 2025 16:11:36 +0200 (EET) ARC-Seal: i=1; cv=none; a=rsa-sha256; d=ffmpeg.org; s=arc; t=1762783883; b=hntoqLPimdhE7NRO1Ct6n81z/4IYnx73gbCQk2iJNxofLmIlp9CUAMdI9Qd0uDHi6Hnsi wP3mt9d8P4RvMDoYMtQpUOYDH1vIPryG1F1G7/+CWfdREN+LQyR6osozRwta6y3hg8pSeFY eWkAX/YYQU/sAOWLosxTf5yomF8R1v3/kS920Et09IPMhlKMSpcPYNBfm7o5YdnLZjdcou9 hJpQT8D6MaPcBDzJbKwgpqWese5iU7R4QsQexHqbNFdcaaxet6eOgLk7Zr+dj0DI/Ei8lA3 kvDdy+mBqpDMGPSARha2L4xP6dOnCY9uK9RHfeXM11iDcVL4Ei/b1tfJeyow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=ffmpeg.org; s=arc; t=1762783883; h=from : sender : reply-to : subject : date : message-id : to : cc : mime-version : content-type : content-transfer-encoding : content-id : content-description : resent-date : resent-from : resent-sender : resent-to : resent-cc : resent-message-id : in-reply-to : references : list-id : list-help : list-unsubscribe : list-subscribe : list-post : list-owner : list-archive; bh=1S0wJqybrYTmhFuuT7rmrGNvd2i+uud/ABJl6BRqAXs=; b=gJqZobYJncaLmiFyhjKa7WIkjj1Xw/ksNBOmqkI9nVhBJjZiHsXIbvOc8/CTGElGkU/Un JO2L5WehBhis01CN1E+kM+IqOcoH94Vh3BNhbiMCZt8WaG74SjU+O0Z/7Z7eomfWd0Jdlmf HV3G2FKM4YUIMjNCKb3WEU9p9RNJDA2qwI9J/gNexlh0p5mMPkFu7uckgcF6I/Fs4JE2s9p vZuMFtuogkF2pXGNf/AiCPXXMkb5DactFGJH6jyfOrbVP7a61ev5eSB8/IZDaBzlE5V5332 K/f5XlvmjSa7M3zGQsyuUDnacIZDHX5o+2YCl4LInlJHoOp1NDl8Xj97s+iw== ARC-Authentication-Results: i=1; ffmpeg.org; dkim=pass header.d=googlemail.com; arc=none; dmarc=pass header.from=googlemail.com policy.dmarc=quarantine Authentication-Results: ffmpeg.org; dkim=pass header.d=googlemail.com; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=googlemail.com policy.dmarc=quarantine Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id 2245468025D for ; Sat, 8 Nov 2025 10:34:37 +0200 (EET) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-3ee130237a8so905670f8f.0 for ; Sat, 08 Nov 2025 00:34:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20230601; t=1762590876; x=1763195676; darn=ffmpeg.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=PfPYhimOD7XEb9OUb1+RqfZFj8HjuGL5TlTDYzmTj8Y=; b=HqM1L3dWSAk+95KRJzW+XpIzdNFgEPEwcAzLg/IZSD4xoa7d5od76FQByBLAw9cRQ2 t/drQdRX2jCZNEZGsaU8A2G+vSontDoTFazNm24nNxHwytvG2mtHEt+yHPidQiqyThxh WJB2WftzxJYCfxOad1ryDeoHZuATqzy+Db+4Z653Gx8zhBuwSl8eox2g0UcY1l2nC2JC Ilq/ygCmImDEttJhhl6gvZp3lqF8GfkGpMv0dzg63Qhpkh4mmK/IHzM/kPGrUB0+8cP+ jm7L9r0vxUjihWE/tzNXpwiC8o7T2RC26O/NYYrSpolIQvDn2anuW0yT7TJ/tSB1JCek 8b6g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762590876; x=1763195676; h=to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=PfPYhimOD7XEb9OUb1+RqfZFj8HjuGL5TlTDYzmTj8Y=; b=C48J+zwrSEiwLtdJe4yx2QumlcmO7JQbnHHgYP5f8uNkV3DEQR46RNS2AkyJAh8weM c63crMqo9DLFzKZ5ywM9uQJvVQu+rOFh6KkSTVBPOzll2PDcWbF5362ViI7w5DU+BQFf zUcM7xQNdVlvajCh7H8Di88IjOoz6VYSkG7r5xDJAaI83X2ojAlzKy89BNngXtBkLC2C KD7+bohEtW/py+84f41xiartrOt3YnXNvH1upYAcBtPGasEoNbf6jw1UfJ6QwVkq8ibD hcEbQBLiknbAkqUWhKsdeUThoY+4gLirySdaW0M/BkDz+MlOk5dtAsxcvu1p9jepTDLj 5pjA== X-Gm-Message-State: AOJu0YzdX0VmCPm0OtOdhdKJWHJQDPeg43/V+zW5bvI1NwgWCGd+dIeU fER2LJFvch7oCnhStL70LDQMt0glCXHq/zvQOBcHGpdKYT3qqk60Eqkuz/UGV1odzWhrwBk1gfp hMmfG0w+cwiiZKjtdiLakKkbxuCxXIObxlsgXmCw= X-Gm-Gg: ASbGncuJfvBwRlGL63NBkSSLgNSO/hHOsKpdISiDZsOJoCi/b4RNzMiCaHYXaDqMPmZ JZ1I/+VL3ouk1CTZYnblI5W32lYdIIFPhV4Kt0OWtPZv/inW1Bl6g/WLtH0q0psMgZb6NI5rLi1 hs7B0vvvB4VMrrya9UfKkWwpnZQC7jxXuTBnzUwkdg/ORUwzZ+ajWmmF+P2eR/r2zahJ38Uq/cU 0QBv8tWuSD5WcqkeMnj/qzMZsJh9A5vEUvRxuIoToxlq5au4gVkDPW3yshlbAMRYXByWRFoaUSm sU8NXzk9dbMiIEZP8SKD4YcYOXjI18ZSCA== X-Google-Smtp-Source: AGHT+IGhRoIDKy2tRjiw2mmUpg0zpJTiHobqY2FXW42jPuLvyJFs1r57ryAhjvnhqmadgFzyn2ZpyBjO8yLnaxZY5eg= X-Received: by 2002:a05:6000:4009:b0:427:72d1:e3b2 with SMTP id ffacd0b85a97d-42b2dc22cbcmr1446638f8f.35.1762590875834; Sat, 08 Nov 2025 00:34:35 -0800 (PST) MIME-Version: 1.0 Date: Sat, 8 Nov 2025 09:34:24 +0100 X-Gm-Features: AWmQ_bkVjgqqwwyDDx0x9Td7kRnurT005U0Mi1dgBx5lCLaRtfSB_OErdDb4Ods Message-ID: To: ffmpeg-devel@ffmpeg.org X-MailFrom: SRS0=t+/Q=5Q=googlemail.com=thomas.dullien@ffmpeg.org X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-ffmpeg-devel.ffmpeg.org-0; header-match-ffmpeg-devel.ffmpeg.org-1; header-match-ffmpeg-devel.ffmpeg.org-2; header-match-ffmpeg-devel.ffmpeg.org-3; emergency; member-moderation Message-ID-Hash: TT6IOPW4PIX7YEQGGZIVCWDCI2WZPDPU X-Message-ID-Hash: TT6IOPW4PIX7YEQGGZIVCWDCI2WZPDPU X-Mailman-Approved-At: Mon, 10 Nov 2025 14:11:17 +0000 X-Content-Filtered-By: Mailman/MimeDel 3.3.10 X-Mailman-Version: 3.3.10 Precedence: list Reply-To: FFmpeg development discussions and patches Subject: [FFmpeg-devel] question about submitting security patches List-Id: FFmpeg development discussions and patches Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: From: Thomas Dullien via ffmpeg-devel Cc: Thomas Dullien Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Archived-At: List-Archive: List-Post: Hey all, after the recent social media discussion around P0 reported bugs etc. I'd like to contribute a few patches for a few open crash bugs in the bugtracker (and hopefully for the remaining BIGSLEEP bug reports, too). I am using a coding assistant combined with a stack of ASAN + rr, and while I am not an export on ffmpeg, I am some sort of expert on vulnerabilities. I have prepared AI-assisted patches for https://trac.ffmpeg.org/ticket/11693 and https://trac.ffmpeg.org/ticket/11691, and I'll review them some more but both the root-cause analysis and the patch seem good. What's the best way to submit these patches? There is the bug tracker, there is this mailing list - what's the best way to contribute them? Cheers, Thomas _______________________________________________ ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org