* [FFmpeg-devel] [PATCH] avcodec/rv60dec: add upper bound check for qp
@ 2025-11-07 17:16 Reaxx via ffmpeg-devel
0 siblings, 0 replies; 2+ messages in thread
From: Reaxx via ffmpeg-devel @ 2025-11-07 17:16 UTC (permalink / raw)
To: ffmpeg-devel; +Cc: Michael Niedermayer, Reaxx
[-- Attachment #1: Type: text/plain, Size: 242 bytes --]
This patch fixes an out-of-bounds read in the RV60 decoder where qp can
reach 65, exceeding the rv60_qp_to_idx[64] array bounds. The previous fix
(61cbcaf93f) only covered intra frames. This adds validation at the source
for all frame types.
[-- Attachment #2: 0001-avcodec-rv60dec-add-upper-bound-check-for-qp.patch --]
[-- Type: application/octet-stream, Size: 1531 bytes --]
[-- Attachment #3: Type: text/plain, Size: 163 bytes --]
_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org
^ permalink raw reply [flat|nested] 2+ messages in thread
* [FFmpeg-devel] [PATCH] avcodec/rv60dec: add upper bound check for qp
@ 2025-11-07 17:20 Reaxx via ffmpeg-devel
0 siblings, 0 replies; 2+ messages in thread
From: Reaxx via ffmpeg-devel @ 2025-11-07 17:20 UTC (permalink / raw)
To: ffmpeg-devel; +Cc: Michael Niedermayer, Reaxx
[-- Attachment #1: Type: text/plain, Size: 242 bytes --]
This patch fixes an out-of-bounds read in the RV60 decoder where qp can
reach 65, exceeding the rv60_qp_to_idx[64] array bounds. The previous fix
(61cbcaf93f) only covered intra frames. This adds validation at the source
for all frame types.
[-- Attachment #2: 0001-avcodec-rv60dec-add-upper-bound-check-for-qp.patch --]
[-- Type: application/octet-stream, Size: 1531 bytes --]
[-- Attachment #3: Type: text/plain, Size: 163 bytes --]
_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2025-11-10 14:11 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-11-07 17:16 [FFmpeg-devel] [PATCH] avcodec/rv60dec: add upper bound check for qp Reaxx via ffmpeg-devel
2025-11-07 17:20 Reaxx via ffmpeg-devel
Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
This inbox may be cloned and mirrored by anyone:
git clone --mirror https://master.gitmailbox.com/ffmpegdev/0 ffmpegdev/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 ffmpegdev ffmpegdev/ https://master.gitmailbox.com/ffmpegdev \
ffmpegdev@gitmailbox.com
public-inbox-index ffmpegdev
Example config snippet for mirrors.
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git