August 2025 - ffmpeg-cvslog - lists.ffmpeg.org

[ffmpeg] branch master updated. 1f4fed5cc3 w32pthreads: add support for setting thread name
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via 1f4fed5cc3be0737305e342f753c42716d6bf432 (commit) from 5ff2500514a0224b7c2822d3b4e950b473f5bcff (commit) - Log ----------------------------------------------------------------- commit 1f4fed5cc3be0737305e342f753c42716d6bf432 Author: Kacper Michajłow <kasper93(a)gmail.com> AuthorDate: Tue Mar 4 13:49:56 2025 +0100 Commit: James Almer <jamrial(a)gmail.com> CommitDate: Fri Aug 15 19:54:01 2025 +0000 w32pthreads: add support for setting thread name Signed-off-by: Kacper Michajłow <kasper93(a)gmail.com> diff --git a/compat/w32pthreads.h b/compat/w32pthreads.h index fd6428e29f..6f2734b470 100644 --- a/compat/w32pthreads.h +++ b/compat/w32pthreads.h @@ -44,6 +44,7 @@ #include "libavutil/internal.h" #include "libavutil/mem.h" #include "libavutil/time.h" +#include "libavutil/wchar_filename.h" typedef struct pthread_t { void *handle; @@ -209,4 +210,38 @@ static inline int pthread_setcancelstate(int state, int *oldstate) return 0; } +static inline int win32_thread_setname(const char *name) +{ +#if !HAVE_UWP + typedef HRESULT (WINAPI *SetThreadDescriptionFn)(HANDLE, PCWSTR); + + // Although SetThreadDescription lives in kernel32.dll, on Windows Server 2016, + // Windows 10 LTSB 2016 and Windows 10 version 1607, it was only available in + // kernelbase.dll. So, load it from there for maximum coverage. + HMODULE kernelbase = GetModuleHandleW(L"kernelbase.dll"); + if (!kernelbase) + return AVERROR(ENOSYS); + + SetThreadDescriptionFn pSetThreadDescription = + (SetThreadDescriptionFn)GetProcAddress(kernelbase, "SetThreadDescription"); + if (!pSetThreadDescription) + return AVERROR(ENOSYS); + + wchar_t *wname; + if (utf8towchar(name, &wname) < 0) + return AVERROR(ENOMEM); + + HRESULT hr = pSetThreadDescription(GetCurrentThread(), wname); + av_free(wname); + return SUCCEEDED(hr) ? 0 : AVERROR(EINVAL); +#else + // UWP is not supported because we cannot use LoadLibrary/GetProcAddress to + // detect the availability of the SetThreadDescription API. There is a small + // gap in Windows builds 1507-1607 where it was not available. UWP allows + // querying the availability of APIs with QueryOptionalDelayLoadedAPI, but it + // requires /DELAYLOAD:kernel32.dll during linking, and we cannot enforce that. + return AVERROR(ENOSYS); +#endif +} + #endif /* COMPAT_W32PTHREADS_H */ diff --git a/libavutil/thread.h b/libavutil/thread.h index 2c00c7cc35..184e2d8c5f 100644 --- a/libavutil/thread.h +++ b/libavutil/thread.h @@ -229,6 +229,8 @@ static inline int ff_thread_setname(const char *name) #endif #elif HAVE_PTHREAD_SET_NAME_NP pthread_set_name_np(pthread_self(), name); +#elif HAVE_W32THREADS + ret = win32_thread_setname(name); #else ret = AVERROR(ENOSYS); #endif ----------------------------------------------------------------------- Summary of changes: compat/w32pthreads.h | 35 +++++++++++++++++++++++++++++++++++ libavutil/thread.h | 2 ++ 2 files changed, 37 insertions(+) hooks/post-receive --

1 0

[ffmpeg] branch master updated. 5ff2500514 avcodec/x86/Makefile: add missing x86/proresdsp.o for prores raw
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via 5ff2500514a0224b7c2822d3b4e950b473f5bcff (commit) from 6e4805056851338fa00768931f29d4c6281495b9 (commit) - Log ----------------------------------------------------------------- commit 5ff2500514a0224b7c2822d3b4e950b473f5bcff Author: Kacper Michajłow <kasper93(a)gmail.com> AuthorDate: Fri Aug 15 19:23:31 2025 +0200 Commit: Kacper Michajłow <kasper93(a)gmail.com> CommitDate: Fri Aug 15 20:45:20 2025 +0200 avcodec/x86/Makefile: add missing x86/proresdsp.o for prores raw diff --git a/libavcodec/x86/Makefile b/libavcodec/x86/Makefile index ebf458453e..ebd2bdb310 100644 --- a/libavcodec/x86/Makefile +++ b/libavcodec/x86/Makefile @@ -170,6 +170,7 @@ X86ASM-OBJS-$(CONFIG_MLP_DECODER) += x86/mlpdsp.o X86ASM-OBJS-$(CONFIG_MPEG4_DECODER) += x86/xvididct.o X86ASM-OBJS-$(CONFIG_PNG_DECODER) += x86/pngdsp.o X86ASM-OBJS-$(CONFIG_PRORES_DECODER) += x86/proresdsp.o +X86ASM-OBJS-$(CONFIG_PRORES_RAW_DECODER) += x86/proresdsp.o X86ASM-OBJS-$(CONFIG_RV40_DECODER) += x86/rv40dsp.o X86ASM-OBJS-$(CONFIG_SBC_ENCODER) += x86/sbcdsp.o X86ASM-OBJS-$(CONFIG_SVQ1_ENCODER) += x86/svq1enc.o ----------------------------------------------------------------------- Summary of changes: libavcodec/x86/Makefile | 1 + 1 file changed, 1 insertion(+) hooks/post-receive --

1 0

[ffmpeg] branch release/8.0 updated. 048f6f4bd5 configure: fix -L flags for lld-link
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, release/8.0 has been updated via 048f6f4bd57b1f18af5da40d28d506a22daa1338 (commit) from 4558ad6a7734389cc0aa73215efcfb4528817877 (commit) - Log ----------------------------------------------------------------- commit 048f6f4bd57b1f18af5da40d28d506a22daa1338 Author: wangbin <wbsecg1(a)gmail.com> AuthorDate: Fri Aug 15 23:14:47 2025 +0800 Commit: Kacper Michajłow <kasper93(a)gmail.com> CommitDate: Fri Aug 15 20:22:51 2025 +0200 configure: fix -L flags for lld-link diff --git a/configure b/configure index 727c3daea8..732de59292 100755 --- a/configure +++ b/configure @@ -5174,7 +5174,7 @@ probe_cc(){ # but we can force it back to gnu mode and get the version from there. _ident=$($_cc -flavor gnu --version 2>/dev/null) _ld_o='-out:$@' - _flags_filter=msvc_flags + _flags_filter=msvc_flags_link _ld_lib='lib%.a' _ld_path='-libpath:' elif VSLANG=1033 $_cc -nologo- 2>&1 | grep -q ^Microsoft || { $_cc -v 2>&1 | grep -q clang && $_cc -? > /dev/null 2>&1; }; then ----------------------------------------------------------------------- Summary of changes: configure | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive --

1 0

[ffmpeg] branch master updated. 6e48050568 configure: fix -L flags for lld-link
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via 6e4805056851338fa00768931f29d4c6281495b9 (commit) from 2a22972db3b390d82dedbdbb5f44cc09a43912b5 (commit) - Log ----------------------------------------------------------------- commit 6e4805056851338fa00768931f29d4c6281495b9 Author: wangbin <wbsecg1(a)gmail.com> AuthorDate: Fri Aug 15 23:14:47 2025 +0800 Commit: Kacper Michajłow <kasper93(a)gmail.com> CommitDate: Fri Aug 15 18:20:33 2025 +0000 configure: fix -L flags for lld-link diff --git a/configure b/configure index 416cd2d1d6..6c1d6868ea 100755 --- a/configure +++ b/configure @@ -5174,7 +5174,7 @@ probe_cc(){ # but we can force it back to gnu mode and get the version from there. _ident=$($_cc -flavor gnu --version 2>/dev/null) _ld_o='-out:$@' - _flags_filter=msvc_flags + _flags_filter=msvc_flags_link _ld_lib='%.lib' _ld_path='-libpath:' elif VSLANG=1033 $_cc -nologo- 2>&1 | grep -q ^Microsoft || { $_cc -v 2>&1 | grep -q clang && $_cc -? > /dev/null 2>&1; }; then ----------------------------------------------------------------------- Summary of changes: configure | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive --

1 0

[ffmpeg] branch master updated. 2a22972db3 avcodec/utvideodec: Clear plane_start array
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via 2a22972db3b390d82dedbdbb5f44cc09a43912b5 (commit) from c9e93df4eed93fe0044c52d953688c4180de1d48 (commit) - Log ----------------------------------------------------------------- commit 2a22972db3b390d82dedbdbb5f44cc09a43912b5 Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Fri Aug 15 17:55:05 2025 +0200 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Fri Aug 15 18:00:11 2025 +0200 avcodec/utvideodec: Clear plane_start array in pack mode the array is passed into decode_plane() without being initialized or used Fixes: use of uninitialized memory Fixes: 438780119/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_UTVIDEO_DEC_fuzzer-5464037027807232 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> diff --git a/libavcodec/utvideodec.c b/libavcodec/utvideodec.c index 934945c1be..bc02ac44d5 100644 --- a/libavcodec/utvideodec.c +++ b/libavcodec/utvideodec.c @@ -585,7 +585,7 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *frame, int buf_size = avpkt->size; UtvideoContext *c = avctx->priv_data; int i, j; - const uint8_t *plane_start[5]; + const uint8_t *plane_start[5] = {NULL}; int plane_size, max_slice_size = 0, slice_start, slice_end, slice_size; int ret; GetByteContext gb; ----------------------------------------------------------------------- Summary of changes: libavcodec/utvideodec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive --

1 0

[ffmpeg] branch master updated. c9e93df4ee avcodec/prores_raw: Fix heap buffer overflow
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via c9e93df4eed93fe0044c52d953688c4180de1d48 (commit) from ac5303a5b9cdc17e4ebddfdc3203a4c325d42c52 (commit) - Log ----------------------------------------------------------------- commit c9e93df4eed93fe0044c52d953688c4180de1d48 Author: Oliver Chang <ochang(a)google.com> AuthorDate: Thu Aug 14 22:11:41 2025 -0700 Commit: Lynne <dev(a)lynne.ee> CommitDate: Fri Aug 15 15:06:58 2025 +0000 avcodec/prores_raw: Fix heap buffer overflow When dimensions differ from context, those were updated using ff_set_dimensions, however this overwrote the aligned coded_width and coded_height that were set before, leading to a buffer overflow when writing the frame data. Fixes: OssFuzz 438771336 Fixes: Heap-buffer-overflow Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Marvin Scholz <epirat07(a)gmail.com> Reviewed-by: Marvin Scholz <epirat07(a)gmail.com> diff --git a/libavcodec/prores_raw.c b/libavcodec/prores_raw.c index 748e176815..b2aa97ddda 100644 --- a/libavcodec/prores_raw.c +++ b/libavcodec/prores_raw.c @@ -367,9 +367,6 @@ static int decode_frame(AVCodecContext *avctx, if ((w & 1) || (h & 1)) return AVERROR_INVALIDDATA; - avctx->coded_width = FFALIGN(w, 16); - avctx->coded_height = FFALIGN(h, 16); - if (w != avctx->width || h != avctx->height) { av_log(avctx, AV_LOG_WARNING, "picture resolution change: %ix%i -> %ix%i\n", avctx->width, avctx->height, w, h); @@ -377,6 +374,9 @@ static int decode_frame(AVCodecContext *avctx, return ret; } + avctx->coded_width = FFALIGN(w, 16); + avctx->coded_height = FFALIGN(h, 16); + enum AVPixelFormat pix_fmt = AV_PIX_FMT_BAYER_RGGB16; if (pix_fmt != s->pix_fmt) { s->pix_fmt = pix_fmt; ----------------------------------------------------------------------- Summary of changes: libavcodec/prores_raw.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) hooks/post-receive --

1 0

[ffmpeg] branch master updated. ac5303a5b9 hw_base_encode: Support refs option to limit number of references
by ffmpeg-git＠ffmpeg.org 15 Aug '25

15 Aug '25

The branch, master has been updated via ac5303a5b9cdc17e4ebddfdc3203a4c325d42c52 (commit) from 7d606ef0ccf2946a4a21ab1ec23486cadc21864b (commit) - Log ----------------------------------------------------------------- commit ac5303a5b9cdc17e4ebddfdc3203a4c325d42c52 Author: David Rosca <nowrep(a)gmail.com> AuthorDate: Wed Jun 25 08:46:23 2025 +0200 Commit: Lynne <dev(a)lynne.ee> CommitDate: Fri Aug 15 13:55:51 2025 +0000 hw_base_encode: Support refs option to limit number of references Set default value to 0 to keep the old behavior of using maximum number of references. diff --git a/libavcodec/d3d12va_encode_hevc.c b/libavcodec/d3d12va_encode_hevc.c index ce5d1bf110..0aa1a1d3a4 100644 --- a/libavcodec/d3d12va_encode_hevc.c +++ b/libavcodec/d3d12va_encode_hevc.c @@ -762,6 +762,7 @@ static const FFCodecDefault d3d12va_encode_hevc_defaults[] = { { "b_qoffset", "0" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/hw_base_encode.c b/libavcodec/hw_base_encode.c index 33a30c8d10..927aeb4bad 100644 --- a/libavcodec/hw_base_encode.c +++ b/libavcodec/hw_base_encode.c @@ -666,6 +666,11 @@ int ff_hw_base_init_gop_structure(FFHWBaseEncodeContext *ctx, AVCodecContext *av ctx->ref_l0 = FFMIN(ref_l0, MAX_PICTURE_REFERENCES); ctx->ref_l1 = FFMIN(ref_l1, MAX_PICTURE_REFERENCES); + if (avctx->refs > 0) { + ctx->ref_l0 = FFMIN(ctx->ref_l0, avctx->refs); + ctx->ref_l1 = FFMIN(ctx->ref_l1, avctx->refs); + } + if (flags & FF_HW_FLAG_INTRA_ONLY || avctx->gop_size <= 1) { av_log(avctx, AV_LOG_VERBOSE, "Using intra frames only.\n"); ctx->gop_size = 1; diff --git a/libavcodec/vaapi_encode_av1.c b/libavcodec/vaapi_encode_av1.c index 3d8f29d599..9d837f5c6b 100644 --- a/libavcodec/vaapi_encode_av1.c +++ b/libavcodec/vaapi_encode_av1.c @@ -1027,6 +1027,7 @@ static const FFCodecDefault vaapi_encode_av1_defaults[] = { { "g", "120" }, { "qmin", "1" }, { "qmax", "255" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vaapi_encode_h264.c b/libavcodec/vaapi_encode_h264.c index 0cd5b0ac50..27f6551719 100644 --- a/libavcodec/vaapi_encode_h264.c +++ b/libavcodec/vaapi_encode_h264.c @@ -1153,6 +1153,7 @@ static const FFCodecDefault vaapi_encode_h264_defaults[] = { { "b_qoffset", "0" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vaapi_encode_h265.c b/libavcodec/vaapi_encode_h265.c index 1539bfbf79..baf0d77c8a 100644 --- a/libavcodec/vaapi_encode_h265.c +++ b/libavcodec/vaapi_encode_h265.c @@ -1184,6 +1184,7 @@ static const FFCodecDefault vaapi_encode_h265_defaults[] = { { "b_qoffset", "0" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vaapi_encode_vp8.c b/libavcodec/vaapi_encode_vp8.c index 125d760b9b..69a56a17af 100644 --- a/libavcodec/vaapi_encode_vp8.c +++ b/libavcodec/vaapi_encode_vp8.c @@ -235,6 +235,7 @@ static const FFCodecDefault vaapi_encode_vp8_defaults[] = { { "g", "120" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vaapi_encode_vp9.c b/libavcodec/vaapi_encode_vp9.c index e88967a053..ca8de541d9 100644 --- a/libavcodec/vaapi_encode_vp9.c +++ b/libavcodec/vaapi_encode_vp9.c @@ -292,6 +292,7 @@ static const FFCodecDefault vaapi_encode_vp9_defaults[] = { { "g", "250" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vulkan_encode_av1.c b/libavcodec/vulkan_encode_av1.c index 840092cf6d..08ffbfa393 100644 --- a/libavcodec/vulkan_encode_av1.c +++ b/libavcodec/vulkan_encode_av1.c @@ -1367,6 +1367,7 @@ static const FFCodecDefault vulkan_encode_av1_defaults[] = { { "g", "300" }, { "qmin", "1" }, { "qmax", "255" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vulkan_encode_h264.c b/libavcodec/vulkan_encode_h264.c index 8bbb4639e6..942e911fb7 100644 --- a/libavcodec/vulkan_encode_h264.c +++ b/libavcodec/vulkan_encode_h264.c @@ -1634,6 +1634,7 @@ static const FFCodecDefault vulkan_encode_h264_defaults[] = { { "b_qoffset", "0" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; diff --git a/libavcodec/vulkan_encode_h265.c b/libavcodec/vulkan_encode_h265.c index f0ec852557..c30b7e8f93 100644 --- a/libavcodec/vulkan_encode_h265.c +++ b/libavcodec/vulkan_encode_h265.c @@ -1761,6 +1761,7 @@ static const FFCodecDefault vulkan_encode_h265_defaults[] = { { "b_qoffset", "0" }, { "qmin", "-1" }, { "qmax", "-1" }, + { "refs", "0" }, { NULL }, }; ----------------------------------------------------------------------- Summary of changes: libavcodec/d3d12va_encode_hevc.c | 1 + libavcodec/hw_base_encode.c | 5 +++++ libavcodec/vaapi_encode_av1.c | 1 + libavcodec/vaapi_encode_h264.c | 1 + libavcodec/vaapi_encode_h265.c | 1 + libavcodec/vaapi_encode_vp8.c | 1 + libavcodec/vaapi_encode_vp9.c | 1 + libavcodec/vulkan_encode_av1.c | 1 + libavcodec/vulkan_encode_h264.c | 1 + libavcodec/vulkan_encode_h265.c | 1 + 10 files changed, 14 insertions(+) hooks/post-receive --

1 0

[ffmpeg-web] branch master updated. 840eceb web: add ffmpeg 6.1.3
by ffmpeg-git＠ffmpeg.org 14 Aug '25

14 Aug '25

The branch, master has been updated via 840eceb7f8117d6001809f248128ae8d430d918b (commit) from f07a6f4241a3961b72e5c778830c6dbab801e797 (commit) - Log ----------------------------------------------------------------- commit 840eceb7f8117d6001809f248128ae8d430d918b Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Thu Aug 14 16:41:08 2025 +0200 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Fri Aug 15 01:46:41 2025 +0200 web: add ffmpeg 6.1.3 Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> diff --git a/src/download b/src/download index 318a261..42f958e 100644 --- a/src/download +++ b/src/download @@ -378,10 +378,10 @@ libpostproc 58. 1.100</pre> </div>  </div>  - <h3 id="release_6.1">FFmpeg 6.1.2 "Heaviside"</h3> + <h3 id="release_6.1">FFmpeg 6.1.3 "Heaviside"</h3> <p> - 6.1.2 was released on 2024-08-02. It is the latest stable FFmpeg release + 6.1.3 was released on 2025-08-15. It is the latest stable FFmpeg release from the 6.1 release branch, which was cut from master on 2023-10-29. </p> <p>It includes the following library versions: @@ -397,19 +397,19 @@ libswresample 4. 12.100 libpostproc 57. 3.100</pre> <div class="row"> <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-6.1.2.tar.xz">Download xz tarball</a> - <small><a href="releases/ffmpeg-6.1.2.tar.xz.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-6.1.3.tar.xz">Download xz tarball</a> + <small><a href="releases/ffmpeg-6.1.3.tar.xz.asc">PGP signature</a></small> </div>  <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-6.1.2.tar.bz2">Download bzip2 tarball</a> - <small><a href="releases/ffmpeg-6.1.2.tar.bz2.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-6.1.3.tar.bz2">Download bzip2 tarball</a> + <small><a href="releases/ffmpeg-6.1.3.tar.bz2.asc">PGP signature</a></small> </div>  <div class="col-md-3"> - <a class="btn btn-success" href="releases/ffmpeg-6.1.2.tar.gz">Download gzip tarball</a> - <small><a href="releases/ffmpeg-6.1.2.tar.gz.asc">PGP signature</a></small> + <a class="btn btn-success" href="releases/ffmpeg-6.1.3.tar.gz">Download gzip tarball</a> + <small><a href="releases/ffmpeg-6.1.3.tar.gz.asc">PGP signature</a></small> </div>  <div class="col-md-3 text-right"> - <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n6.1.2">Changelog</a></small> + <small><a href="https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n6.1.3">Changelog</a></small> <a class="btn btn-success" href="https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/6.1:/RELEA…">Release Notes</a> </div>  </div>  diff --git a/src/security b/src/security index ffe2665..6e03b9f 100644 --- a/src/security +++ b/src/security @@ -68,6 +68,26 @@ CVE-2024-36617, d973fcbcc2f944752ff10e6a76b0b2d9329937a7 <h2>FFmpeg 6.1</h2> +<h3>6.1.3</h3> +<p> +Fixes following vulnerabilities: +</p> +<pre> +CVE-2023-49501, efedc1d1b6aef2481cf613a11992b1dce6320055 / 4adb93dff05dd947878c67784d98c9a4e13b57a7, ticket/10686 +CVE-2023-49502, c104119c6b5e00496c5ff14071c85f95c98b7ae5 / 737ede405b11a37fdd61d19cf25df296a0cb0b75, ticket/10688 +CVE-2023-50007, dcf34f13f516aa0e214384f3185aff306feba01d / b1942734c7cbcdc9034034373abcc9ecb9644c47, ticket/10700 +CVE-2023-50008, a4b6e37ad5f50454974fa22cc8f19d83cdaff0eb / 5f87a68cf70dafeab2fb89b42e41a4c29053b89b, ticket/10701 +CVE-2023-6602, c599745377199fa75fffb30058fb2a6f39d64ab7 / 91d96dc8ddaebe0b6cb393f672085e6bfaf15a31 +CVE-2023-6604, c599745377199fa75fffb30058fb2a6f39d64ab7 / 91d96dc8ddaebe0b6cb393f672085e6bfaf15a31 +CVE-2023-6605, ceacc83011a0a5057769626faf14b9256bd3baa7 / 4c96d6bf75357ab13808efc9f08c1b41b1bf5bdf +CVE-2024-31578, 7d79d0a43b5533ff584249332bc1db7fedbab1d2 / 3bb00c0a420c3ce83c6fafee30270d69622ccad7 +CVE-2024-31582, a279a8620e2d630648d6b9d87a11682a7c6b35d4 / 99debe5f823f45a482e1dc08de35879aa9c74bd2 +CVE-2024-35367, bed04417b4d38af7a1b477b24ea6e26547e32373 / 09e6840cf7a3ee07a73c3ae88a020bf27ca1a667 +CVE-2024-35368, b43a12363c1fef0efa7eac15b6b830417656db15 / 4513300989502090c4fd6560544dce399a8cd53c +CVE-2025-0518, 43f64690ad9df72976bcbd6ea9e41b2542db2464 / b5b6391d64807578ab872dc58fb8aa621dcfc38a +CVE-2025-22919, e2b20632b8c71a4e174511f8ff6e8342e0c63bd3 / 1446e37d3d032e1452844778b3e6ba2c20f0c322, ticket/11385 +</pre> + <h3>6.1.2</h3> <p> Fixes following vulnerabilities: ----------------------------------------------------------------------- Summary of changes: src/download | 18 +++++++++--------- src/security | 20 ++++++++++++++++++++ 2 files changed, 29 insertions(+), 9 deletions(-) hooks/post-receive --

1 0

[ffmpeg] annotated tag n6.1.3 created. tag n6.1.3
by ffmpeg-git＠ffmpeg.org 14 Aug '25

14 Aug '25

The annotated tag, n6.1.3 has been created at 4e82d3905ef580853f24380a8a7b4bc881897ca8 (tag) tagging 01d3f764f79b2f571174a4cec855e651258f20ec (commit) replaces n6.1.2 tagged by Michael Niedermayer on Thu Aug 14 23:13:10 2025 +0200 - Log ----------------------------------------------------------------- FFmpeg 6.1.3 release -----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQTdHsno3ghcYps+GEaxjokos5SNZAUCaJ5RaQAKCRCxjokos5SN ZH0VAP0VkojSMtAnLkNdP6CKNJRA/4fHIFlRack6RCEvJZhZxAEA8y/jjEOgACge D4DmOlfvM8JN8RytvpcP8lLWk34VHws= =QhRZ -----END PGP SIGNATURE----- Andreas Rheinhardt (2): avcodec/ppc/vp8dsp_altivec: Fix out-of-bounds access avcodec/rkmppdec: Fix double-free on error Anton Khirnov (3): lavc/hevc: check framerate num/den to be strictly positive lavc/hevcdec: set per-CTB filter parameters for WPP lavc/hevcdec: pass an actual codec context to ff_h2645_sei_to_frame() Bin Peng (2): lavc/aarch64: Fix ff_pred8x8_plane_neon_10 lavc/aarch64: Fix ff_pred16x16_plane_neon_10 Brad Smith (2): lsws/ppc/yuv2rgb_altivec: Fix build in non-VSX environments with Clang lsws/ppc/yuv2rgb_altivec: Fix build in non-VSX environments with Clang v2 Coia Prant (1): configure: Use MSYSTEM_CARCH for default arch on msys2 Cosmin Stejerean (1): avfilter/bwdif: account for chroma sub-sampling in min size calculation Gyan Doshi (2): lavc/libx265: unbreak build for X265_BUILD >= 210 avcodec/libx265: unbreak build for X265_BUILD >= 213 James Almer (7): avfilter/buffersrc: check for valid sample rate avcodec/libtheora: fix setting keyframe_mask fftools/ffmpeg_demux: don't flag timestamps as unreliable if they are generated avformat/movenc: fix writing reserved bits in EC3SpecificBox avcodec/mss2dsp: use FF_PTR_ADD to add offsets to a pointer swscale/swscale_unscaled: don't add offsets to NULL pointers avcodec/motion_est: don't add offsets to NULL pointers Janne Grunau (3): aarch64: vp9mc: Load only 12 pixels in the 4 pixel wide horizontal filter arm: vp9mc: Load only 12 pixels in the 4 pixel wide horizontal filter vp9: recon: Use emulated edge to prevent buffer overflows Jiasheng Jiang (10): libavcodec/alsdec.c: Add check for av_malloc_array() and av_calloc() avcodec/tests/avpacket: Add av_packet_free() to avoid memory leak examples: Add av_freep to avoid potential memory leak avcodec/tests/avpacket: Add av_free() to avoid memory leak libavcodec/tests/motion: Add check for avcodec_alloc_context3() libavcodec/videotoolbox_vp9: Move av_malloc() to avoid memory leak libavfilter/af_firequalizer: Add check for av_malloc_array() libavcodec/tests/snowenc: Add av_free() to avoid memory leak examples: Add check and replace av_free() to avoid potential memory errors libavfilter/dnn/dnn_backend_tf: Remove redundant av_freep() to avoid double free Kacper Michajłow (10): avcodec/jpegxl_parser: check entropy_decoder_read_symbol return value avformat/jpegxl_anim_dec: ensure input padding is zeroed avcodec/parser: ensure input padding is zeroed avcodec/opus: don't materialize buf pointer from null avformat/lrcdec: support arbitrary precision timestamp avcodec/cbs_h266_syntax_template: fix out of bounds access avcodec/mpc8: init avctx->sample_rate avformat/lrcdec: limit input timestamp range to avoid overflows avcodec/g726: init missing sample rate avcodec/libvorbisdec: avoid overflow when assinging sample rate from long to int Kimapr (1): avformat/libopenmpt: fix seeking weirdness Leo Izen (2): avcodec/jpegxl_parser: fix reading lz77-pair as initial entropy symbol avcodec/jpegxl_parser: add sanity check for frame size Lynne (1): configure: update copyright year Martin Storsjö (2): rtmpproto: Avoid rare crashes in the fail: codepath in rtmp_open configure: Improve the check for the rsync --contimeout option Marton Balint (6): avformat/libzmq: fix check for zmq protocol prefix avutil/wchar_filename: re-introduce explicit cast of void* to char* avfilter/f_loop: fix length of aloop leftover buffer avfilter/f_loop: fix aloop activate logic avformat/wavdec: increase requested probe score for codec probe swscale/swscale_unscaled: use 8 line alignment for planarCopyWrapper with dithering Michael Niedermayer (193): Revert "avformat/mpegts: update stream info when PMT ES stream_type changes" avformat/wavdec: Check if there are 16 bytes before testing them avformat/img2dec: Clear padding data after EOF avformat/wtvdec: clear sectors avformat/wtvdec: Check length of read mpeg2_descriptor tools/target_dec_fuzzer: Use av_buffer_allocz() to avoid missing slices to have unpredictable content avformat/lmlm4: Eliminate some AVERROR(EIO) avfilter/vf_xfade_opencl: Check ff_inlink_consume_frame() for failure avfilter/af_surround: Check output format avfilter/vf_tonemap_opencl: Dereference after NULL check avfilter/vf_v360: Assert that vf was initialized avfilter/vf_xfade: Compute w2, h2 with float avcodec/dxva2: Initialize dxva_size and check it avcodec/dxva2: Initialize ConfigBitstreamRaw avcodec/dxva2: initialize validate avcodec/dxva2: initialize hr in ff_dxva2_common_end_frame() avdevice/dshow: Initialize 2 pointers tools/target_dec_fuzzer: Check that FFv1 doesnt leave uninitialized memory in its buffers avcodec/sga: av_assert1 check init_get_bits8() avformat/segafilm: Set keyframe bsf/media100_to_mjpegb: Clear output buffer padding avcodec/mvha: Clear remaining space after inflate() avcodec/apac: Clean padding space avformat/mpeg: Check an avio_read() for failure avcodec/shorten: clear padding avcodec/vc1dec: Clear mb_type_base and ttblk_base avcodec/aic: Clear slice_data avcodec/alsdec: clear last_acf_mantissa avcodec/apac: Fix discards ‘const’ qualifier avformat/av1dec: Better fix for 70872/clusterfuzz-testcase-minimized-ffmpeg_dem_OBU_fuzzer-6005782487826432 avcodec/avcodec: Warn about data returned from get_buffer*() avcodec/magicyuvenc: better slice height avformat/apetag: Check APETAGEX avcodec/vc1_block: propagate error codes avcodec/notchlc: Check bytes left before reading avformat/argo_brp: Check that ASF chunk header is completely read avcodec/wmavoice: Do not use uninitialized pitch[0] avformat/mvdec: Check if name was fully read avcodec/vc2enc: basic sanity check on slice_max_bytes swscale/swscale: Use unsigned operation to avoid undefined behavior swscale/output: Fix undefined integer overflow in yuv2rgba64_2_c_template() avformat/mxfdec: More offset_temp checks avformat/mxfdec: Check timecode for overflow avcodec/osq: Treat sum = 0 as k = 0 avformat/asf: Check picsize avcodec/jfdctint_template: use unsigned z* in row_fdct() avcodec/osq: use unsigned for decorrelation avcodec/cbs_h266_syntax_template: Check bit depth with range extension avcodec/encode: Check bitrate tools/target_dec_fuzzer: Adapt threshold for RASC avcodec/eacmv: Check input size for intra frames avcodec/svq3: Check for minimum size input avcodec/imm4: Check input size avcodec/xan: Add basic input size check avcodec/ffv1enc: Fix >8bit context size avcodec/ffv1enc: 2Pass mode is not possible with golomb coding avcodec/ffv1enc: Slice combination is unsupported avcodec/ffv1enc: Correct error message about unsupported version avformat/mov: Avoid overflow in dts avformat/matroskadec: Check desc_bytes so bits fit in 64bit avcodec/ffv1enc: Prevent generation of files with broken slices avcodec/ffv1dec: Fix end computation with ec=2 avcodec/rangecoder: only perform renorm check/loop for callers that need it swscale/output: used unsigned for bit accumulation avformat/mxfdec: Fix overflow in midpoint computation avformat/mpegts: Initialize predefined_SLConfigDescriptor_seen INSTALL: explain the circular dependency issue and solution avformat/rpl: check channels avformat/mccdec: Initialize and check rate.den avformat/nistspheredec: Clear buffer avformat/ilbc: Check avio_read() for failure avformat/vividas: Check avio_read() for failure doc/developer: Document relationship between git accounts and MAINTAINERS avformat/icodec: fix integer overflow with nb_pal avcodec/mjpegdec: Disallow progressive bayer images avcodec/h2645_parse: Ignore NAL with nuh_layer_id == 63 swscale/slice: clear allocated memory in alloc_lines() avformat/dxa: check bpc avcodec/eatgq: Check bytestream2_get_buffer() for failure avformat/qcp: Check for read failure in header avcodec/ilbcdec: Initialize tempbuff2 avcodec/webp: Check ref_x/y avutil/timecode: Avoid fps overflow in av_timecode_get_smpte_from_framenum() tools/target_dec_fuzzer: Adjust Threshold for indeo5 tools/target_dec_fuzzer: Adjust threshold for MVC1 tools/target_dec_fuzzer: Adjust threshold for EACMV avformat/matroskadec: Check pre_ns for overflow avcodec/utils: Fix block align overflow for ADPCM_IMA_WAV avformat/mlvdec: Check avio_read() avformat/rpl: Fix check for negative values avformat/mxfdec: Check that key was read sucessfull avcodec/hapdec: Clear tex buffer avcodec/cfhdenc: Clear dwt_tmp avformat/rmdec: check that buf if completely filled avformat/jpegxl_anim_dec: clear buffer padding avcodec/get_buffer: Use av_buffer_mallocz() for audio same as its done for video avfilter/vf_addroi: Add missing NULL termination to addroi_var_names[]() avfilter/vf_grayworld: Use the correct pointer for av_log() avfilter/af_pan: Fix sscanf() use swscale/output: Fix undefined overflow in yuv2rgba64_full_X_c_template() avcodec/osq: Fixes several undefined overflows in do_decode() avcodec/aacsbr_template: Clear n_q on error avcodec/vc1dec: Clear block_index in vc1_decode_reset() avcodec/ffv1enc: Fix handling of 32bit unsigned symbols avcodec/mpegvideo_enc: Check FLV1 resolution limits avfilter/vf_v360: Fix NULL pointer use avutil/avstring: dont mess with NULL pointers in av_match_list() avformat/dashdec: Check whitelist avformat/vqf: Check avio_read() in add_metadata() avformat/vqf: Propagate errors from add_metadata() avcodec/cbs_vp9: Initialize VP9RawSuperframeIndex avformat/wtvdec: Initialize buf avformat/ipmovie: Check signature_buffer read avcodec/huffyuvdec: Initialize whole output for decode_gray_bitstream() avformat/mxfdec: Check avio_read() success in mxf_decrypt_triplet() avformat/hls: Be more picky on extensions avformat/hls: Print input format in error message avcodec/h263dec: Check against previous dimensions instead of coded avformat/hls: .ts is always ok even if its a mov/mp4 libavformat/hls: Be more restrictive on mpegts extensions avformat/hls: Fix twitter avformat/mxfdec: Check edit unit for overflow in mxf_set_current_edit_unit() avformat/wavdec: Fix overflow of intermediate in block_align check avformat/mlvdec: fix size checks avformat/iff: Check that we have a stream in read_dst_frame() doc: replace http/git by https urls swscale/output: Fix integer overflow in yuv2gbrp_full_X_c() avcodec/osq: avoid undefined negation configure: Clearer documentation for "disable-safe-bitstream-reader" postproc/postprocess_template: Fix reading uninitialized pixels in dering_C() avformat/hls: Add cmfv and cmfa to allowed_extensions avformat/hls: Add ec3 to allowed_extensions avformat/hls: add fmp4 to allowed_extensions avformat/hls: Fix Youtube AAC avformat/hls: Split allowed_segment_extensions off allowed_extensions avformat/hls: Fix flash1.bogulus.cfd support libpostproc: check minimum size tests/fate/filter-video: Fix dependancy for codecview avformat/iff: Check nb_channels == 0 in MHDR avcodec/vorbisdec: Dont treat overread as error avcodec/h264_mb: Fix tmp_cr for arm avformat/avidec: Ignore duplicate GAB2 avformat/mov: reject negative ELST durations avformat/imf_cpl: do not continue looping forever avformat/imf_cpl: fix indention after previous commit avcodec/sonic: Check num_taps avcodec/svq3: Check there are bits left before decompression avcodec/takdec: Check remaining space for first predictors avformat/matroskadec: check that channels fit in signed 32bit int avcodec/speexdec: Pass and check remaining packets to decode functions avcodec/hevc/hevcdec: Check num_entry_point_offsets avcodec/osq: Fix signed integer overflow in update_stats() avcodec/osq: Add note about update_stats() count avcodec/osq: Switch back to av_ceil_log2() avcodec/osq: Request a coding mode 2 sample avformat/iff: Check nb_channels == 0 in CHNL avcodec/speexdec: consider differing frame sizes in remaining space check avcodec/smacker: Move buffer allocation to later avcodec/psd: Move frame allocation after RLE processing avcodec/ivi: Check luma/chroma mb_size avcodec/cfhd: Check idwt_buf size before allocation avcodec/ffv1dec: Check k in get_vlc_symbol() avformat/concatdec: Clip duration in one more case in get_best_effort_duration() avformat/asfdec_f: Check amount of value read avformat/mov: make sure file_checksum is fully initialized avformat/vqf: Ensure that comm_chunk is fully read avformat/mxg: clear AV_INPUT_BUFFER_PADDING_SIZE avcodec/mpegvideo_dec: Fix lowres=3 field select interlaced mpeg4 frame avformat/dashdec: Allocate space for appended "/" avcodec/cri: Factor read_len out avcodec/cri: Check bytestream2_get_buffer() for end avcodec/iff: Clear ham_buf avcodec/imc: Clear padding of buf16 avcodec/lzf: Check for input space avcodec/vqavideo; Check bytestream2_get_buffer() reading next_codebook_buffer avcodec/fits: Clear naxis Update for 6.1.3 avcodec/ffv1dec: Disable frame threading due to race condition avformat/hls: add cmfv/cmfa exceptions avcodec/exr: Dont access outside xsize/ysize avcodec/exr: Check rle_raw_data and surroundings avcodec/jpeg2000dec: move cdef default check into get_siz() avcodec/jpeg2000dec: implement cdef remapping during pixel format matching avcodec/ffv1: Clear state on alloc avcodec/utvideodec: Set B for the width= 1 case avcodec/aacsbr_template: Check ilb avcodec/jpeg2000dec: Make sure the 4 extra bytes allocated are initialized avcodec/ilbcdec: Clear cbvec when used with create_augmented_vector() avcodec/scpr3: Clear clr avcodec/exr: Check for pixel type consistency in DWA avcodec/dxv: Check that we initialize op_data Changelog:update Changelog: remove stray branch name Muhammad Faiz (1): avfilter/avf_showcqt: fix unbounded index when copying to fft_data Paul B Mahol (4): avfilter/avfiltergraph: fix regression in picking channel layout avfilter/vf_colorcorrect: fix memory leaks avfilter/af_afwtdn: fix crash with EOF handling avfilter/asrc_afirsrc: fix by one smaller allocation of buffer Pavel Koshevoy (2): avformat/mov: (v4) fix get_eia608_packet avformat/mpegts: update stream info when PMT ES stream_type changes Ramiro Polla (2): configure: restore autodetection of v4l2 and fbdev configure: improve check for POSIX ioctl Ross Burton (1): libavcodec/arm/mlpdsp_armv5te: fix label format to work with binutils 2.43 Rémi Denis-Courmont (1): riscv: test for assembler support Timo Rothenpieler (1): avformat/hlsenc: correctly reset subtitle stream counter per-varstream Zhao Zhili (2): avutil/hwcontext: Don't assume frames_uninit is reentrant avfilter/vf_codecview: fix heap buffer overflow softworkz (1): avformat/hls: Partially revert "reduce default max reload to 3" ----------------------------------------------------------------------- hooks/post-receive --

1 0

[ffmpeg] branch release/6.1 updated. 01d3f764f7 Changelog: remove stray branch name
by ffmpeg-git＠ffmpeg.org 14 Aug '25

14 Aug '25

The branch, release/6.1 has been updated via 01d3f764f79b2f571174a4cec855e651258f20ec (commit) from 979df1c813fbb3a7ac5e2806eb85c7afa4291891 (commit) - Log ----------------------------------------------------------------- commit 01d3f764f79b2f571174a4cec855e651258f20ec Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Thu Aug 14 23:12:36 2025 +0200 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Thu Aug 14 23:12:36 2025 +0200 Changelog: remove stray branch name Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> diff --git a/Changelog b/Changelog index 458986d2f7..01cd1ba06f 100644 --- a/Changelog +++ b/Changelog @@ -29,7 +29,7 @@ version 6.1.3: avformat/hls: add cmfv/cmfa exceptions avformat/lrcdec: support arbitrary precision timestamp avcodec/ffv1dec: Disable frame threading due to race condition - (origin/release/6.1, fforge/release/6.1) swscale/swscale_unscaled: use 8 line alignment for planarCopyWrapper with dithering + swscale/swscale_unscaled: use 8 line alignment for planarCopyWrapper with dithering Update for 6.1.3 libavcodec/tests/motion: Add check for avcodec_alloc_context3() avcodec/tests/avpacket: Add av_free() to avoid memory leak ----------------------------------------------------------------------- Summary of changes: Changelog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive --

1 0