Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
 help / color / mirror / Atom feed
* [FFmpeg-devel] [PATCH] avformat/iff: fix EOF check
@ 2025-08-04 22:54 James Almer
  2025-08-05  2:12 ` Peter Ross
  0 siblings, 1 reply; 2+ messages in thread
From: James Almer @ 2025-08-04 22:54 UTC (permalink / raw)
  To: ffmpeg-devel

The check to return on EOF should not be inside a block that will not be entered after reaching EOF.
Should fix "libavcodec/bytestream.h:144:27: runtime error: applying zero offset to null pointer".

Signed-off-by: James Almer <jamrial@gmail.com>
---
 libavformat/iff.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/libavformat/iff.c b/libavformat/iff.c
index 4ff10beb38..44ba5a9023 100644
--- a/libavformat/iff.c
+++ b/libavformat/iff.c
@@ -969,9 +969,6 @@ static int iff_read_packet(AVFormatContext *s,
         uint32_t chunk_id, chunk_id2;
 
         while (!avio_feof(pb)) {
-            if (avio_feof(pb))
-                return AVERROR_EOF;
-
             orig_pos  = avio_tell(pb);
             chunk_id  = avio_rl32(pb);
             data_size = avio_rb32(pb);
@@ -988,6 +985,9 @@ static int iff_read_packet(AVFormatContext *s,
                 avio_skip(pb, data_size);
             }
         }
+        if (pb->eof_reached)
+            return AVERROR_EOF;
+
         ret = av_get_packet(pb, pkt, data_size);
         pkt->stream_index = iff->video_stream_index;
         pkt->pos = orig_pos;
-- 
2.50.1

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [FFmpeg-devel] [PATCH] avformat/iff: fix EOF check
  2025-08-04 22:54 [FFmpeg-devel] [PATCH] avformat/iff: fix EOF check James Almer
@ 2025-08-05  2:12 ` Peter Ross
  0 siblings, 0 replies; 2+ messages in thread
From: Peter Ross @ 2025-08-05  2:12 UTC (permalink / raw)
  To: FFmpeg development discussions and patches


[-- Attachment #1.1: Type: text/plain, Size: 1659 bytes --]

On Mon, Aug 04, 2025 at 07:54:41PM -0300, James Almer wrote:
> The check to return on EOF should not be inside a block that will not be entered after reaching EOF.
> Should fix "libavcodec/bytestream.h:144:27: runtime error: applying zero offset to null pointer".
> 
> Signed-off-by: James Almer <jamrial@gmail.com>
> ---
>  libavformat/iff.c | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/libavformat/iff.c b/libavformat/iff.c
> index 4ff10beb38..44ba5a9023 100644
> --- a/libavformat/iff.c
> +++ b/libavformat/iff.c
> @@ -969,9 +969,6 @@ static int iff_read_packet(AVFormatContext *s,
>          uint32_t chunk_id, chunk_id2;
>  
>          while (!avio_feof(pb)) {
> -            if (avio_feof(pb))
> -                return AVERROR_EOF;
> -
>              orig_pos  = avio_tell(pb);
>              chunk_id  = avio_rl32(pb);
>              data_size = avio_rb32(pb);
> @@ -988,6 +985,9 @@ static int iff_read_packet(AVFormatContext *s,
>                  avio_skip(pb, data_size);
>              }
>          }
> +        if (pb->eof_reached)
> +            return AVERROR_EOF;
> +
>          ret = av_get_packet(pb, pkt, data_size);
>          pkt->stream_index = iff->video_stream_index;
>          pkt->pos = orig_pos;

Please apply.

If this doesn't fix the UBSAN runtime error, I propose to add a
data_size sanity check immediately before av_get_packet:

    if (!data_size)
        return AVERROR_INVALIDDATA;

It seems some IFF ANIM files have lots of zeros around EOF, including
the file in fate samples.

-- Peter
(A907 E02F A6E5 0CD2 34CD 20D2 6760 79C5 AC40 DD6B)

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2025-08-05  2:13 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-08-04 22:54 [FFmpeg-devel] [PATCH] avformat/iff: fix EOF check James Almer
2025-08-05  2:12 ` Peter Ross

Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

This inbox may be cloned and mirrored by anyone:

	git clone --mirror https://master.gitmailbox.com/ffmpegdev/0 ffmpegdev/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 ffmpegdev ffmpegdev/ https://master.gitmailbox.com/ffmpegdev \
		ffmpegdev@gitmailbox.com
	public-inbox-index ffmpegdev

Example config snippet for mirrors.


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git