mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2026-06-16 04:32:47 +02:00
Michael Niedermayer
0f5705959d
When an SPS uses the multi-layer extension (nuh_layer_id > 0 with sps_max_sub_layers_minus1 == 7), width and height are taken from the VPS rep_format without the av_image_check_size() validation that the direct path performs. HEVC F.7.4.3.1.1 requires rep_format pic dimensions to satisfy the constraints in 7.4.3.2.1, including "pic_width_in_luma_samples shall not be equal to 0". Run the same av_image_check_size() check in the multi-layer-extension path so the SPS is rejected before it reaches setup_pps(). Fixes: VS-FF-2026-0003/poc.flv Fixes: out of array access Found-by: Vuln Seeker Cyber Security Team Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
FFmpeg README
FFmpeg is a collection of libraries and tools to process multimedia content such as audio, video, subtitles and related metadata.
Libraries
libavcodecprovides implementation of a wider range of codecs.libavformatimplements streaming protocols, container formats and basic I/O access.libavutilincludes hashers, decompressors and miscellaneous utility functions.libavfilterprovides means to alter decoded audio and video through a directed graph of connected filters.libavdeviceprovides an abstraction to access capture and playback devices.libswresampleimplements audio mixing and resampling routines.libswscaleimplements color conversion and scaling routines.
Tools
- ffmpeg is a command line toolbox to manipulate, convert and stream multimedia content.
- ffplay is a minimalistic multimedia player.
- ffprobe is a simple analysis tool to inspect multimedia content.
- Additional small tools such as
aviocat,ismindexandqt-faststart.
Documentation
The offline documentation is available in the doc/ directory.
The online documentation is available in the main website and in the wiki.
Examples
Coding examples are available in the doc/examples directory.
License
FFmpeg codebase is mainly LGPL-licensed with optional components licensed under GPL. Please refer to the LICENSE file for detailed information.
Contributing
Patches should be submitted to the ffmpeg-devel mailing list using
git format-patch or git send-email. Github pull requests should be
avoided because they are not part of our review process and will be ignored.