Files
FFmpeg/libavcodec
Frank Plowman 72a38c12e5 lavc/vvc: Prevent OOB write to slice_top_left_ctu_x in PPS CBS
Prior to the fix, in the case of a tile containing multiple slices
(pps_num_exp_slices_in_tile != 0) the number of slices was temporarily
allowed to exceed pps_num_slices_in_pic_minus1+1 and therefore
VVC_MAX_SLICES.  The number of slices was later verified, but while the
current slice index was higher than expected it was used to write to a
array of size VVC_MAX_SLICES, leading to an OOB write.

To rectify this, the patch adds some checks at an earlier stage, to
ensure that the slice index i + j at no point exceeds
pps_num_slices_in_pic_minus1.

Fixes #YWH-PGM40646-30
2025-12-30 13:39:40 +00:00
..
2025-12-13 18:45:17 -03:00
2025-12-13 18:45:17 -03:00
2025-11-26 15:16:42 +01:00
2025-11-08 18:48:54 +01:00
2025-11-08 01:17:46 +01:00
2025-11-26 15:16:43 +01:00
2025-12-13 18:45:17 -03:00
2025-11-09 02:42:17 +01:00
2025-12-13 18:45:17 -03:00
2025-11-10 01:46:52 +00:00
2025-11-27 11:34:25 +01:00