From d1b279ea2af832e427e24799b9b99b52088bc2ad6aa7493e013a0f8e2e9196a4 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 7 May 2024 14:53:07 +0000 Subject: [PATCH] add bugrefs, remove git-log indent that isn't there in git-format-patch OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/ffmpeg-4?expand=0&rev=220 --- ffmpeg-CVE-2023-50010.patch | 26 ++++++++++++++------------ 1 file changed, 14 insertions(+), 12 deletions(-) diff --git a/ffmpeg-CVE-2023-50010.patch b/ffmpeg-CVE-2023-50010.patch index 6ddb999..5d78ab3 100644 --- a/ffmpeg-CVE-2023-50010.patch +++ b/ffmpeg-CVE-2023-50010.patch @@ -1,18 +1,20 @@ commit e4d2666bdc3dbd177a81bbf428654a5f2fa3787a (20231224_CVE-2023-50010_e4d2666bdc3dbd177a81bbf428654a5f2fa3787a) Author: Michael Niedermayer -Date: Sun Dec 24 20:50:51 2023 +0100 +Date: Sun Dec 24 20:50:51 2023 +0100 +References: CVE-2023-50010 +References: https://bugzilla.opensuse.org/1172424 - avfilter/vf_gradfun: Do not overread last line - - The code works in steps of 2 lines and lacks support for odd height - Implementing odd height support is better but for now this fixes the - out of array access - - Fixes: out of array access - Fixes: tickets/10702/poc6ffmpe - - Found-by: Zeng Yunxiang - Signed-off-by: Michael Niedermayer +avfilter/vf_gradfun: Do not overread last line + +The code works in steps of 2 lines and lacks support for odd height +Implementing odd height support is better but for now this fixes the +out of array access + +Fixes: out of array access +Fixes: tickets/10702/poc6ffmpe + +Found-by: Zeng Yunxiang +Signed-off-by: Michael Niedermayer diff -Nura ffmpeg-4.4.4/libavfilter/vf_gradfun.c ffmpeg-4.4.4_new/libavfilter/vf_gradfun.c --- ffmpeg-4.4.4/libavfilter/vf_gradfun.c 2023-04-13 02:01:50.000000000 +0800