Michael Niedermayer 532063e7ff avcodec/bsf/dts2pts: fix binary tree invariant violation on selective dec_poc ...

Modifying the keys of a sorted structure, be that a tree or other
can lead to changes in the ordering and undefined behavior.
It can also lead to collisions with existing keys.

All these cases need to be handled unless there is a bug elsewhere
that would prevent them.

Fixes: out of array access
Fixes: 504281984/clusterfuzz-testcase-minimized-ffmpeg_BSF_DTS2PTS_fuzzer-6032368162111488

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 054dffd133)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

2026-06-14 04:40:59 +02:00

..

aac_adtstoasc.c

…

ahx_to_mp2.c

…

apv_metadata.c

…

av1_frame_merge.c

…

av1_frame_split.c

…

av1_metadata.c

…

chomp.c

…

dca_core.c

…

dovi_rpu.c

…

dts2pts.c

avcodec/bsf/dts2pts: fix binary tree invariant violation on selective dec_poc

2026-06-14 04:40:59 +02:00

dump_extradata.c

…

dv_error_marker.c

…

eac3_core.c

…

eia608_to_smpte436m.c

…

evc_frame_merge.c

…

extract_extradata.c

…

filter_units.c

…

h264_metadata.c

…

h264_mp4toannexb.c

…

h264_redundant_pps.c

…

h265_metadata.c

…

h266_metadata.c

…

hapqa_extract.c

…

hevc_mp4toannexb.c

…

imx_dump_header.c

…

lcevc_metadata.c

…

Makefile

…

media100_to_mjpegb.c

…

mjpeg2jpeg.c

…

mjpega_dump_header.c

…

movsub.c

…

mpeg2_metadata.c

…

mpeg4_unpack_bframes.c

…

noise.c

…

null.c

…

opus_metadata.c

…

pcm_rechunk.c

…

pgs_frame_merge.c

…

prores_metadata.c

…

remove_extradata.c

…

setts.c

…

showinfo.c

…

smpte436m_to_eia608.c

…

trace_headers.c

…

truehd_core.c

…

vp9_metadata.c

…

vp9_raw_reorder.c

…

vp9_superframe_split.c

…

vp9_superframe.c

…

vvc_mp4toannexb.c

…