Michael Niedermayer 8732d7585c avcodec/vvc/refs: reject slices with more active reference indices than list entries ...

H.266 8.3.2 requires num_ref_entries to be at least NumRefIdxActive.

Fixes: UfO9ZQ9qW76g/testcase/gdr_rpl2.bit
Fixes: UfO9ZQ9qW76g
Fixes: AISLE-2026-0150-00775
Fixes: division by zero
Division by zero Replicated through UnModified FFmpeg with UBSAN

Found-by: Joshua Rogers (AISLE)

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

2026-11-03 16:16:16 +00:00

..

cabac.c

…

cabac.h

…

ctu.c

…

ctu.h

…

data.c

…

data.h

…

dec.c

avcodec/vvc: defer output errors until the current frame is submitted

2026-10-31 09:02:36 +00:00

dec.h

avcodec/vvc: defer output errors until the current frame is submitted

2026-10-31 09:02:36 +00:00

dsp_template.c

…

dsp.c

…

dsp.h

…

filter_template.c

…

filter.c

…

filter.h

…

inter_template.c

…

inter.c

…

inter.h

…

intra_template.c

…

intra_utils.c

…

intra.c

…

intra.h

…

itx_1d.c

…

itx_1d.h

…

Makefile

…

mvs.c

…

mvs.h

…

ps.c

…

ps.h

avcodec/vvc/ps: widen the per slice CTU offset and count to 32 bits

2026-10-29 01:42:24 +00:00

refs.c

avcodec/vvc/refs: reject slices with more active reference indices than list entries

2026-11-03 16:16:16 +00:00

refs.h

…

sei.c

…

sei.h

…

thread.c

…

thread.h

…