February 2026 - ffmpeg-cvslog

[ffmpeg] avcodec/h264_parser: Check remaining input length in loop in scan_mmco_reset() (branch master)
by Michael Niedermayer 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new 73681f888d avcodec/h264_parser: Check remaining input length in loop in scan_mmco_reset() 73681f888d is described below commit 73681f888da4705e33a9211cb31c2a5ef4d6c85c Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Fri Feb 6 22:05:06 2026 +0100 Commit: Michael Niedermayer <michael(a)niedermayer.cc> CommitDate: Mon Feb 23 22:43:28 2026 +0100 avcodec/h264_parser: Check remaining input length in loop in scan_mmco_reset() Fixes: read of uninitialized memory Fixes: 476177761/clusterfuzz-testcase-minimized-ffmpeg_dem_H264_fuzzer-6400884824408064 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> --- libavcodec/h264_parser.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavcodec/h264_parser.c b/libavcodec/h264_parser.c index 040739a1d4..a217a0dfe4 100644 --- a/libavcodec/h264_parser.c +++ b/libavcodec/h264_parser.c @@ -225,6 +225,9 @@ static int scan_mmco_reset(AVCodecParserContext *s, GetBitContext *gb, if (get_bits1(gb)) { // adaptive_ref_pic_marking_mode_flag int i; for (i = 0; i < H264_MAX_MMCO_COUNT; i++) { + if (get_bits_left(gb) < 1) + return AVERROR_INVALIDDATA; + MMCOOpcode opcode = get_ue_golomb_31(gb); if (opcode > (unsigned) MMCO_LONG) { av_log(logctx, AV_LOG_ERROR,

1 0

[ffmpeg] tests/swscale: don't pass fake object to av_opt_eval_* (branch master)
by Niklas Haas 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new b21f1b6482 tests/swscale: don't pass fake object to av_opt_eval_* b21f1b6482 is described below commit b21f1b6482b412edc06b20b2f5807c039081ee3a Author: Niklas Haas <git(a)haasn.dev> AuthorDate: Mon Feb 23 19:37:00 2026 +0100 Commit: Niklas Haas <ffmpeg(a)haasn.dev> CommitDate: Mon Feb 23 20:55:27 2026 +0000 tests/swscale: don't pass fake object to av_opt_eval_* This is UB, as the fake object may be used for logging. Reported-by: Andreas Rheinhardt <andreas.rheinhardt(a)outlook.com> Fixes: ea791a4ef17478693c231f04d8ba60985866f5bc --- libswscale/tests/swscale.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/libswscale/tests/swscale.c b/libswscale/tests/swscale.c index 3e05c97bbf..6f6240e4b6 100644 --- a/libswscale/tests/swscale.c +++ b/libswscale/tests/swscale.c @@ -509,11 +509,6 @@ int main(int argc, char **argv) AVLFG rand; int ret = -1; - const AVClass *sws_class = sws_get_class(); - const AVOption *flags_opt = av_opt_find(&sws_class, "sws_flags", NULL, 0, - AV_OPT_SEARCH_FAKE_OBJ); - av_assert0(flags_opt); - for (int i = 1; i < argc; i += 2) { if (!strcmp(argv[i], "-help") || !strcmp(argv[i], "--help")) { fprintf(stderr, @@ -581,7 +576,10 @@ int main(int argc, char **argv) opts.w = 1920; opts.h = 1080; } else if (!strcmp(argv[i], "-flags")) { - ret = av_opt_eval_flags(&sws_class, flags_opt, argv[i + 1], &opts.flags); + SwsContext *dummy = sws_alloc_context(); + const AVOption *flags_opt = av_opt_find(dummy, "sws_flags", NULL, 0, 0); + ret = av_opt_eval_flags(dummy, flags_opt, argv[i + 1], &opts.flags); + sws_free_context(&dummy); if (ret < 0) { fprintf(stderr, "invalid flags %s\n", argv[i + 1]); goto error;

1 0

[ffmpeg] branch master updated (64fafd63f0 -> afdb683a3f)
by ffmpeg-git 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a change to branch master in repository ffmpeg. from 64fafd63f0 avformat: remove HLS protocol new e1fd274706 swscale/graph: check output plane pointer instead of pixel format new 18060a8820 swscale/graph: simplify ff_sws_graph_run() API new fe25e54d0f swscale/graph: move output image into separate struct new afa08f4971 swscale/graph: duplicate buffer dimensions in SwsPassBuffer new 0b446cdccd swscale/graph: switch to an AVBufferRef per plane new b98751b13c swscale/graph: set up palette using current input image new 1e071c8585 swscale/graph: omit memcpy() if src and dst are identical new cc346b232d swscale/graph: store current pass input instead of global args new d918551650 swscale/graph: switch SwsPass.output to refstruct new afdb683a3f swscale: avoid UB on interlaced frames The 10 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: libswscale/graph.c | 139 +++++++++++++++++++++++++++++++++++++-------------- libswscale/graph.h | 25 ++++++--- libswscale/swscale.c | 28 ++++++----- 3 files changed, 135 insertions(+), 57 deletions(-)

2 10

[ffmpeg] avformat: remove HLS protocol (branch master)
by Marvin Scholz 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new 64fafd63f0 avformat: remove HLS protocol 64fafd63f0 is described below commit 64fafd63f0b4ebf8dbbdbdc2296f21a03548b5fc Author: Marvin Scholz <epirat07(a)gmail.com> AuthorDate: Tue Jul 8 21:05:29 2025 +0200 Commit: Marvin Scholz <epirat07(a)gmail.com> CommitDate: Mon Feb 23 20:20:20 2026 +0100 avformat: remove HLS protocol The use of this protocol was already discouraged and warned about for years with the recommendation to use the HLS demuxer instead. --- Changelog | 1 + doc/protocols.texi | 20 --- libavformat/Makefile | 2 - libavformat/hlsproto.c | 318 ------------------------------------------------ libavformat/protocols.c | 1 - libavformat/version.h | 2 +- 6 files changed, 2 insertions(+), 342 deletions(-) diff --git a/Changelog b/Changelog index da8903fd36..f1e10080c6 100644 --- a/Changelog +++ b/Changelog @@ -21,6 +21,7 @@ version <next>: - IAMF Projection mode Ambisonic Audio Elements muxing and demuxing - Add vf_mestimate_d3d12 filter - xHE-AAC Mps212 decoding support (experimental) +- Remove the old HLS protocol handler version 8.0: diff --git a/doc/protocols.texi b/doc/protocols.texi index 18620cabcb..289a1fb1f5 100644 --- a/doc/protocols.texi +++ b/doc/protocols.texi @@ -417,26 +417,6 @@ Gophers protocol. The Gopher protocol with TLS encapsulation. -@section hls - -Read Apple HTTP Live Streaming compliant segmented stream as -a uniform one. The M3U8 playlists describing the segments can be -remote HTTP resources or local files, accessed using the standard -file protocol. -The nested protocol is declared by specifying -"+@var{proto}" after the hls URI scheme name, where @var{proto} -is either "file" or "http". - -@example -hls+http://host/path/to/remote/resource.m3u8 -hls+file://path/to/local/resource.m3u8 -@end example - -Using this protocol is discouraged - the hls demuxer should work -just as well (if not, please report the issues) and is more complete. -To use the hls demuxer instead, simply use the direct URLs to the -m3u8 files. - @section http HTTP (Hyper Text Transfer Protocol). diff --git a/libavformat/Makefile b/libavformat/Makefile index 5b8564bf54..4786a9345a 100644 --- a/libavformat/Makefile +++ b/libavformat/Makefile @@ -678,7 +678,6 @@ OBJS-$(CONFIG_VAPOURSYNTH_DEMUXER) += vapoursynth.o # protocols I/O OBJS-$(CONFIG_ANDROID_CONTENT_PROTOCOL) += file.o OBJS-$(CONFIG_ASYNC_PROTOCOL) += async.o -OBJS-$(CONFIG_APPLEHTTP_PROTOCOL) += hlsproto.o OBJS-$(CONFIG_BLURAY_PROTOCOL) += bluray.o OBJS-$(CONFIG_CACHE_PROTOCOL) += cache.o OBJS-$(CONFIG_CONCAT_PROTOCOL) += concat.o @@ -692,7 +691,6 @@ OBJS-$(CONFIG_FD_PROTOCOL) += file.o OBJS-$(CONFIG_FTP_PROTOCOL) += ftp.o OBJS-$(CONFIG_GOPHER_PROTOCOL) += gopher.o OBJS-$(CONFIG_GOPHERS_PROTOCOL) += gopher.o -OBJS-$(CONFIG_HLS_PROTOCOL) += hlsproto.o OBJS-$(CONFIG_HTTP_PROTOCOL) += http.o httpauth.o OBJS-$(CONFIG_HTTPPROXY_PROTOCOL) += http.o httpauth.o OBJS-$(CONFIG_HTTPS_PROTOCOL) += http.o httpauth.o diff --git a/libavformat/hlsproto.c b/libavformat/hlsproto.c deleted file mode 100644 index 02f695c1db..0000000000 --- a/libavformat/hlsproto.c +++ /dev/null @@ -1,318 +0,0 @@ -/* - * Apple HTTP Live Streaming Protocol Handler - * Copyright (c) 2010 Martin Storsjo - * - * This file is part of FFmpeg. - * - * FFmpeg is free software; you can redistribute it and/or - * modify it under the terms of the GNU Lesser General Public - * License as published by the Free Software Foundation; either - * version 2.1 of the License, or (at your option) any later version. - * - * FFmpeg is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - * Lesser General Public License for more details. - * - * You should have received a copy of the GNU Lesser General Public - * License along with FFmpeg; if not, write to the Free Software - * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA - */ - -/** - * @file - * Apple HTTP Live Streaming Protocol Handler - * https://www.rfc-editor.org/rfc/rfc8216.txt - */ - -#include "libavutil/avstring.h" -#include "libavutil/mem.h" -#include "libavutil/time.h" -#include "avio_internal.h" -#include "internal.h" -#include "url.h" - -/* - * An apple http stream consists of a playlist with media segment files, - * played sequentially. There may be several playlists with the same - * video content, in different bandwidth variants, that are played in - * parallel (preferably only one bandwidth variant at a time). In this case, - * the user supplied the url to a main playlist that only lists the variant - * playlists. - * - * If the main playlist doesn't point at any variants, we still create - * one anonymous toplevel variant for this, to maintain the structure. - */ - -struct segment { - int64_t duration; - char url[MAX_URL_SIZE]; -}; - -struct variant { - int bandwidth; - char url[MAX_URL_SIZE]; -}; - -typedef struct HLSContext { - char playlisturl[MAX_URL_SIZE]; - int64_t target_duration; - int start_seq_no; - int finished; - int n_segments; - struct segment **segments; - int n_variants; - struct variant **variants; - int cur_seq_no; - URLContext *seg_hd; - int64_t last_load_time; -} HLSContext; - -static void free_segment_list(HLSContext *s) -{ - int i; - for (i = 0; i < s->n_segments; i++) - av_freep(&s->segments[i]); - av_freep(&s->segments); - s->n_segments = 0; -} - -static void free_variant_list(HLSContext *s) -{ - int i; - for (i = 0; i < s->n_variants; i++) - av_freep(&s->variants[i]); - av_freep(&s->variants); - s->n_variants = 0; -} - -struct variant_info { - char bandwidth[20]; -}; - -static void handle_variant_args(struct variant_info *info, const char *key, - int key_len, char **dest, int *dest_len) -{ - if (!strncmp(key, "BANDWIDTH=", key_len)) { - *dest = info->bandwidth; - *dest_len = sizeof(info->bandwidth); - } -} - -static int parse_playlist(URLContext *h, const char *url) -{ - HLSContext *s = h->priv_data; - AVIOContext *in; - int ret = 0, is_segment = 0, is_variant = 0, bandwidth = 0; - int64_t duration = 0; - char line[1024]; - const char *ptr; - - if ((ret = ffio_open_whitelist(&in, url, AVIO_FLAG_READ, - &h->interrupt_callback, NULL, - h->protocol_whitelist, h->protocol_blacklist)) < 0) - return ret; - - ff_get_chomp_line(in, line, sizeof(line)); - if (strcmp(line, "#EXTM3U")) { - ret = AVERROR_INVALIDDATA; - goto fail; - } - - free_segment_list(s); - s->finished = 0; - while (!avio_feof(in)) { - ff_get_chomp_line(in, line, sizeof(line)); - if (av_strstart(line, "#EXT-X-STREAM-INF:", &ptr)) { - struct variant_info info = {{0}}; - is_variant = 1; - ff_parse_key_value(ptr, (ff_parse_key_val_cb) handle_variant_args, - &info); - bandwidth = atoi(info.bandwidth); - } else if (av_strstart(line, "#EXT-X-TARGETDURATION:", &ptr)) { - s->target_duration = atoi(ptr) * AV_TIME_BASE; - } else if (av_strstart(line, "#EXT-X-MEDIA-SEQUENCE:", &ptr)) { - s->start_seq_no = atoi(ptr); - } else if (av_strstart(line, "#EXT-X-ENDLIST", &ptr)) { - s->finished = 1; - } else if (av_strstart(line, "#EXTINF:", &ptr)) { - is_segment = 1; - duration = atof(ptr) * AV_TIME_BASE; - } else if (av_strstart(line, "#", NULL)) { - continue; - } else if (line[0]) { - if (is_segment) { - struct segment *seg = av_malloc(sizeof(struct segment)); - if (!seg) { - ret = AVERROR(ENOMEM); - goto fail; - } - seg->duration = duration; - ff_make_absolute_url(seg->url, sizeof(seg->url), url, line); - dynarray_add(&s->segments, &s->n_segments, seg); - is_segment = 0; - } else if (is_variant) { - struct variant *var = av_malloc(sizeof(struct variant)); - if (!var) { - ret = AVERROR(ENOMEM); - goto fail; - } - var->bandwidth = bandwidth; - ff_make_absolute_url(var->url, sizeof(var->url), url, line); - dynarray_add(&s->variants, &s->n_variants, var); - is_variant = 0; - } - } - } - s->last_load_time = av_gettime_relative(); - -fail: - avio_close(in); - return ret; -} - -static int hls_close(URLContext *h) -{ - HLSContext *s = h->priv_data; - - free_segment_list(s); - free_variant_list(s); - ffurl_closep(&s->seg_hd); - return 0; -} - -static int hls_open(URLContext *h, const char *uri, int flags) -{ - HLSContext *s = h->priv_data; - int ret, i; - const char *nested_url; - - if (flags & AVIO_FLAG_WRITE) - return AVERROR(ENOSYS); - - h->is_streamed = 1; - - if (av_strstart(uri, "hls+", &nested_url)) { - av_strlcpy(s->playlisturl, nested_url, sizeof(s->playlisturl)); - } else if (av_strstart(uri, "hls://", &nested_url)) { - av_log(h, AV_LOG_ERROR, - "No nested protocol specified. Specify e.g. hls+http://%s\n", - nested_url); - ret = AVERROR(EINVAL); - goto fail; - } else { - av_log(h, AV_LOG_ERROR, "Unsupported url %s\n", uri); - ret = AVERROR(EINVAL); - goto fail; - } - av_log(h, AV_LOG_WARNING, - "Using the hls protocol is discouraged, please try using the " - "hls demuxer instead. The hls demuxer should be more complete " - "and work as well as the protocol implementation. (If not, " - "please report it.) To use the demuxer, simply use %s as url.\n", - s->playlisturl); - - if ((ret = parse_playlist(h, s->playlisturl)) < 0) - goto fail; - - if (s->n_segments == 0 && s->n_variants > 0) { - int max_bandwidth = 0, maxvar = -1; - for (i = 0; i < s->n_variants; i++) { - if (s->variants[i]->bandwidth > max_bandwidth || i == 0) { - max_bandwidth = s->variants[i]->bandwidth; - maxvar = i; - } - } - av_strlcpy(s->playlisturl, s->variants[maxvar]->url, - sizeof(s->playlisturl)); - if ((ret = parse_playlist(h, s->playlisturl)) < 0) - goto fail; - } - - if (s->n_segments == 0) { - av_log(h, AV_LOG_WARNING, "Empty playlist\n"); - ret = AVERROR(EIO); - goto fail; - } - s->cur_seq_no = s->start_seq_no; - if (!s->finished && s->n_segments >= 3) - s->cur_seq_no = s->start_seq_no + s->n_segments - 3; - - return 0; - -fail: - hls_close(h); - return ret; -} - -static int hls_read(URLContext *h, uint8_t *buf, int size) -{ - HLSContext *s = h->priv_data; - const char *url; - int ret; - int64_t reload_interval; - -start: - if (s->seg_hd) { - ret = ffurl_read(s->seg_hd, buf, size); - if (ret > 0) - return ret; - } - if (s->seg_hd) { - ffurl_closep(&s->seg_hd); - s->cur_seq_no++; - } - reload_interval = s->n_segments > 0 ? - s->segments[s->n_segments - 1]->duration : - s->target_duration; -retry: - if (!s->finished) { - int64_t now = av_gettime_relative(); - if (now - s->last_load_time >= reload_interval) { - if ((ret = parse_playlist(h, s->playlisturl)) < 0) - return ret; - /* If we need to reload the playlist again below (if - * there's still no more segments), switch to a reload - * interval of half the target duration. */ - reload_interval = s->target_duration / 2; - } - } - if (s->cur_seq_no < s->start_seq_no) { - av_log(h, AV_LOG_WARNING, - "skipping %d segments ahead, expired from playlist\n", - s->start_seq_no - s->cur_seq_no); - s->cur_seq_no = s->start_seq_no; - } - if (s->cur_seq_no - s->start_seq_no >= s->n_segments) { - if (s->finished) - return AVERROR_EOF; - while (av_gettime_relative() - s->last_load_time < reload_interval) { - if (ff_check_interrupt(&h->interrupt_callback)) - return AVERROR_EXIT; - av_usleep(100*1000); - } - goto retry; - } - url = s->segments[s->cur_seq_no - s->start_seq_no]->url; - av_log(h, AV_LOG_DEBUG, "opening %s\n", url); - ret = ffurl_open_whitelist(&s->seg_hd, url, AVIO_FLAG_READ, - &h->interrupt_callback, NULL, - h->protocol_whitelist, h->protocol_blacklist, h); - if (ret < 0) { - if (ff_check_interrupt(&h->interrupt_callback)) - return AVERROR_EXIT; - av_log(h, AV_LOG_WARNING, "Unable to open %s\n", url); - s->cur_seq_no++; - goto retry; - } - goto start; -} - -const URLProtocol ff_hls_protocol = { - .name = "hls", - .url_open = hls_open, - .url_read = hls_read, - .url_close = hls_close, - .flags = URL_PROTOCOL_FLAG_NESTED_SCHEME, - .priv_data_size = sizeof(HLSContext), -}; diff --git a/libavformat/protocols.c b/libavformat/protocols.c index d394454d41..207b6bf8d9 100644 --- a/libavformat/protocols.c +++ b/libavformat/protocols.c @@ -39,7 +39,6 @@ extern const URLProtocol ff_file_protocol; extern const URLProtocol ff_ftp_protocol; extern const URLProtocol ff_gopher_protocol; extern const URLProtocol ff_gophers_protocol; -extern const URLProtocol ff_hls_protocol; extern const URLProtocol ff_http_protocol; extern const URLProtocol ff_httpproxy_protocol; extern const URLProtocol ff_https_protocol; diff --git a/libavformat/version.h b/libavformat/version.h index 979952183c..787ee8c90b 100644 --- a/libavformat/version.h +++ b/libavformat/version.h @@ -32,7 +32,7 @@ #include "version_major.h" #define LIBAVFORMAT_VERSION_MINOR 10 -#define LIBAVFORMAT_VERSION_MICRO 100 +#define LIBAVFORMAT_VERSION_MICRO 101 #define LIBAVFORMAT_VERSION_INT AV_VERSION_INT(LIBAVFORMAT_VERSION_MAJOR, \ LIBAVFORMAT_VERSION_MINOR, \

1 0

[ffmpeg] swscale/tests/swscale: parse flags from string (branch master)
by Niklas Haas 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new ea791a4ef1 swscale/tests/swscale: parse flags from string ea791a4ef1 is described below commit ea791a4ef17478693c231f04d8ba60985866f5bc Author: Niklas Haas <git(a)haasn.dev> AuthorDate: Mon Dec 8 17:26:09 2025 +0100 Commit: Niklas Haas <git(a)haasn.dev> CommitDate: Mon Feb 23 19:23:09 2026 +0100 swscale/tests/swscale: parse flags from string We don't actually have an SwsContext yet at this point, so just use AV_OPT_SEARCH_FAKE_OBJ. For the actual evaluation, the signature only requires that we pass a "pointer to a struct that contains an AVClass as its first member", so passing a double pointer to the class itself is sufficient. --- libswscale/tests/swscale.c | 11 ++++++++++- tests/fate/libswscale.mak | 2 +- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/libswscale/tests/swscale.c b/libswscale/tests/swscale.c index 373f031363..3e05c97bbf 100644 --- a/libswscale/tests/swscale.c +++ b/libswscale/tests/swscale.c @@ -509,6 +509,11 @@ int main(int argc, char **argv) AVLFG rand; int ret = -1; + const AVClass *sws_class = sws_get_class(); + const AVOption *flags_opt = av_opt_find(&sws_class, "sws_flags", NULL, 0, + AV_OPT_SEARCH_FAKE_OBJ); + av_assert0(flags_opt); + for (int i = 1; i < argc; i += 2) { if (!strcmp(argv[i], "-help") || !strcmp(argv[i], "--help")) { fprintf(stderr, @@ -576,7 +581,11 @@ int main(int argc, char **argv) opts.w = 1920; opts.h = 1080; } else if (!strcmp(argv[i], "-flags")) { - opts.flags = strtol(argv[i + 1], NULL, 0); + ret = av_opt_eval_flags(&sws_class, flags_opt, argv[i + 1], &opts.flags); + if (ret < 0) { + fprintf(stderr, "invalid flags %s\n", argv[i + 1]); + goto error; + } } else if (!strcmp(argv[i], "-dither")) { opts.dither = atoi(argv[i + 1]); } else if (!strcmp(argv[i], "-unscaled")) { diff --git a/tests/fate/libswscale.mak b/tests/fate/libswscale.mak index 8d87c39ebf..63e203dbf7 100644 --- a/tests/fate/libswscale.mak +++ b/tests/fate/libswscale.mak @@ -34,7 +34,7 @@ fate-sws-yuv-range: CMD = framecrc \ # This self-check currently fails for legacy swscale, so pass SWS_UNSTABLE to use the new code FATE_LIBSWSCALE-$(CONFIG_UNSTABLE) += fate-sws-unscaled fate-sws-unscaled: libswscale/tests/swscale$(EXESUF) -fate-sws-unscaled: CMD = run libswscale/tests/swscale$(EXESUF) -unscaled 1 -flags 0x100000 -v 16 +fate-sws-unscaled: CMD = run libswscale/tests/swscale$(EXESUF) -unscaled 1 -flags unstable -v 16 FATE_LIBSWSCALE-$(CONFIG_UNSTABLE) += fate-sws-ops-list fate-sws-ops-list: libswscale/tests/sws_ops$(EXESUF)

1 0

[ffmpeg] branch master updated (7b15039cdb -> fba9fc0c6b)
by ffmpeg-git 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a change to branch master in repository ffmpeg. from 7b15039cdb Changelog: add changelog entry for Mps212 new d219be03d6 lavc: wmadec: assert channels count new fba9fc0c6b lavc: wmadec: limit variable scopes The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: libavcodec/wmadec.c | 69 +++++++++++++++++++++++++++-------------------------- 1 file changed, 35 insertions(+), 34 deletions(-)

2 2

[ffmpeg] branch master updated (40e0463113 -> 7b15039cdb)
by ffmpeg-git 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a change to branch master in repository ffmpeg. from 40e0463113 avformat/mov: free item_name on infe entry parsing failure new a4ab4a98c4 aacdec_tab: split up tables init new 86977fdb6b aacdec_tab: add Mps212 tables new baad75cafa aacdec_usac: add support for parsing Mpsp212 (MPEG surround) new 7b15039cdb Changelog: add changelog entry for Mps212 The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: Changelog | 1 + libavcodec/aac.h | 4 + libavcodec/aac/Makefile | 3 +- libavcodec/aac/aacdec.h | 31 ++ libavcodec/aac/aacdec_tab.c | 505 +++++++++++++++++++- libavcodec/aac/aacdec_tab.h | 27 ++ libavcodec/aac/aacdec_usac.c | 173 ++++++- libavcodec/aac/aacdec_usac_mps212.c | 909 ++++++++++++++++++++++++++++++++++++ libavcodec/aac/aacdec_usac_mps212.h | 65 +++ 9 files changed, 1699 insertions(+), 19 deletions(-) create mode 100644 libavcodec/aac/aacdec_usac_mps212.c create mode 100644 libavcodec/aac/aacdec_usac_mps212.h

2 4

[ffmpeg] avformat/mov: free item_name on infe entry parsing failure (branch master)
by James Almer 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new 40e0463113 avformat/mov: free item_name on infe entry parsing failure 40e0463113 is described below commit 40e04631133402701a9365e11f152ed7b8c57a61 Author: James Almer <jamrial(a)gmail.com> AuthorDate: Sun Feb 22 23:15:47 2026 -0300 Commit: James Almer <jamrial(a)gmail.com> CommitDate: Sun Feb 22 23:16:15 2026 -0300 avformat/mov: free item_name on infe entry parsing failure Fixes regression since 28c330d0f3f3. Signed-off-by: James Almer <jamrial(a)gmail.com> --- libavformat/mov.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libavformat/mov.c b/libavformat/mov.c index 2b2a2da9f2..46dac965a2 100644 --- a/libavformat/mov.c +++ b/libavformat/mov.c @@ -9025,8 +9025,10 @@ static int mov_read_infe(MOVContext *c, AVIOContext *pb, MOVAtom atom) av_bprint_finalize(&item_name, NULL); return AVERROR(ENOMEM); } - if (i == c->nb_heif_item) + if (i == c->nb_heif_item) { + av_bprint_finalize(&item_name, NULL); return AVERROR_INVALIDDATA; + } av_freep(&item->name); av_bprint_finalize(&item_name, ret ? &item->name : NULL);

1 0

[ffmpeg] avcodec/exr: fix AVERROR typo (branch master)
by Michael Niedermayer 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg. The following commit(s) were added to refs/heads/master by this push: new 7e10579f49 avcodec/exr: fix AVERROR typo 7e10579f49 is described below commit 7e10579f499200c464eabf7077bc35fd1206b515 Author: Michael Niedermayer <michael(a)niedermayer.cc> AuthorDate: Sun Feb 22 14:50:41 2026 +0100 Commit: michaelni <michael(a)niedermayer.cc> CommitDate: Mon Feb 23 01:44:49 2026 +0000 avcodec/exr: fix AVERROR typo Fixes: out of array read Fixes: 485866440/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer-4520520419966976 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael(a)niedermayer.cc> --- libavcodec/exr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/exr.c b/libavcodec/exr.c index ebcf84722d..d67f45b983 100644 --- a/libavcodec/exr.c +++ b/libavcodec/exr.c @@ -1841,7 +1841,7 @@ static int decode_header(EXRContext *s, AVFrame *frame) s->is_luma = 1; } else { avpriv_request_sample(s->avctx, "Uncommon channel combination"); - ret = AVERROR(AVERROR_PATCHWELCOME); + ret = AVERROR_PATCHWELCOME; goto fail; }

1 0

[ffmpeg] branch master updated (9bc4109b23 -> c3aa28f23d)
by ffmpeg-git 23 Feb '26

23 Feb '26

This is an automated email from the git hooks/post-receive script. Git pushed a change to branch master in repository ffmpeg. from 9bc4109b23 avformat/tls_openssl: fix memory leak in cert_from_pem_string new 28c330d0f3 avformat/mov: abort if the queried item doesn't exist instead of overwriting it new c3aa28f23d avformat/mov: check for EOF in more loops The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: libavformat/mov.c | 22 ++++++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-)

2 2