Builder ffmpeg-solaris10-i386 Build #13832

Results:

Failed shell_2 shell_3 shell_4 shell_5

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpeg-solaris10-i386' triggered this build

Steps and Logfiles:

1. git update ( 5 secs )
   1. stdio
2. shell 'gsed -i ...' ( 0 secs )
   1. stdio
3. shell_1 'gsed -i ...' ( 0 secs )
   1. stdio
4. shell_2 'gsed -i ...' failed ( 0 secs )
   1. stdio
5. shell_3 './configure --samples="../../../ffmpeg/fate-suite" ...' failed ( 9 secs )
   1. stdio
   2. config.log
6. shell_4 'gmake fate-rsync' failed ( 0 secs )
   1. stdio
7. shell_5 '../../../ffmpeg/fate.sh ../../../ffmpeg/fate_config.sh' failed ( 0 secs )
   1. stdio
   2. configure.log
   3. compile.log
   4. test.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Franciszek Kalinowski

   franek.kalinowskiohnoyoudont@isec.pl

Timing:

All Changes:

:

1. Change #268278

   Category	ffmpeg
   Changed by	Franciszek Kalinowski <franek.kalinowskiohnoyoudont@isec.pl>
   Changed at	Mon 25 May 2026 17:09:20
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	69bdb05f36e0a66b2a8a799b1596db4c92e2cb4d

   Comments

   avcodec/pngdec: bound decompressed zTXt/iCCP size (decompression-bomb guard)
   decode_zbuf() inflates zTXt (compressed text) and iCCP (ICC profile) chunk
   payloads into an AVBPrint created with AV_BPRINT_SIZE_UNLIMITED and never
   checks the decompressed size. A ~100 KB zTXt chunk of compressed zeros
   expands to 100 MB; larger ratios or multiple chunks can exhaust memory.
   
   Abort with AVERROR_INVALIDDATA once the decompressed output crosses a hard
   cap (16 MiB).
   
   Verified with a crafted PNG (1 KB compressed -> 100 MB decompressed): without
   the patch the chunk fully decompresses, taking >100 MB; with the patch the
   inflate loop aborts and the decoder logs "Compressed PNG chunk expands
   beyond 16777216 bytes" / "Broken zTXt chunk" while the rest of the image
   decodes normally.
   
   Reported by Franciszek Kalinowski (isec.pl / striga.ai) and Bartosz Smigielski.

   Changed files

   • libavcodec/pngdec.c