PR #21165 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21165
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21165.patch
In `libavformat/sierravmd.c (vmd_read_header)`, the header read check was
written as:
```
if ((ret = ffio_read_size(pb, vmd->vmd_header, VMD_HEADER
PR #21151 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21151
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21151.patch
Prevents stack overflow with deeply nested repeat/if/proc blocks.
Originally reported via ffmpeg-security; this patch incorporates feedback from
Ka
PR #21196 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21196
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21196.patch
Regression since: 536475ea05.
The JPEG-XS PES path trusted header_size from the payload and advanced
pkt->data/pkt->size without validation, so the
PR #21180 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21180
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21180.patch
fflcms2 caches tone curves in an array indexed by
AVColorTransferCharacteristic values up to AVCOL_TRC_NB. After the
introduction of extended transfe
PR #21181 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21181
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21181.patch
The DPX Vulkan unpack shader computes a word offset as
uint off = (line_off + pix_off >> 5);
Due to GLSL operator precedence this is evaluated
PR #21198 opened by ruikai
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21198
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21198.patch
Regression since: 08db850159
Chunked JPEG-XS decode returned positive libsvtjpegxs errors directly,
so FFmpeg treated failures as “bytes consumed” a
