1
0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-10-24 02:09:03 +03:00

avformat/rtpenc: Reject packet sizes too small for the VP9 payload descriptor

Fixes: infinite loop
Fixes: 2bIuZUVk7KRO
Fixes: ffmpeg -f lavfi -i testsrc=duration=0.2:size=64x64:rate=5 -c:v libvpx-vp9 -strict experimental -f rtp -packetsize 13 /dev/null

Endless loop Replicated through UnModified FFmpeg

Found during triage of the security report TwYfznAFyatl (#22717)
This commit is contained in:
Michael Niedermayer
2026-10-19 02:15:19 +02:00
committed by michaelni
parent 59af4fea04
commit 092c2d9b72

View File

@@ -269,6 +269,7 @@ static int rtp_write_header(AVFormatContext *s1)
ret = AVERROR_EXPERIMENTAL;
goto fail;
}
payload_header_size = 1;
break;
case AV_CODEC_ID_AV1:
if (s1->strict_std_compliance > FF_COMPLIANCE_EXPERIMENTAL) {