Builder ffmpegsos-solaris10-i386 Build #13805

Results:

Failed shell_2 shell_3 shell_4 shell_5

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-i386' triggered this build

Steps and Logfiles:

1. git update ( 5 secs )
   1. stdio
2. shell 'gsed -i ...' ( 0 secs )
   1. stdio
3. shell_1 'gsed -i ...' ( 0 secs )
   1. stdio
4. shell_2 'gsed -i ...' failed ( 0 secs )
   1. stdio
5. shell_3 './configure --samples="../../../ffmpeg/fate-suite" ...' failed ( 7 secs )
   1. stdio
   2. config.log
6. shell_4 'gmake fate-rsync' failed ( 0 secs )
   1. stdio
7. shell_5 '../../../ffmpeg/fate.sh ../../../ffmpeg/fate_config_sos.sh' failed ( 0 secs )
   1. stdio
   2. configure.log
   3. compile.log
   4. test.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. depthfirst-dev[bot]

   1012587+depthfirst-dev[bot]ohnoyoudont@users.noreply.github.com

Timing:

All Changes:

:

1. Change #266019

   Category	ffmpeg
   Changed by	depthfirst-dev[bot] <1012587+depthfirst-dev[bot]ohnoyoudont@users.noreply.github.com>
   Changed at	Thu 30 Apr 2026 21:19:07
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	68ea660d83f27c1f45be12af21e30858d3a2cbeb

   Comments

   avformat/mov: reject dimg references with zero entries
   Reject dimg entries with a zero reference count in mov_read_iref_dimg().
   This is the earliest point where the parser learns how many input images
   a derived HEIF item references, so it is the right place to enforce the
   invariant.
   
   If entries == 0 is accepted here, the value is stored in HEIFGrid.nb_tiles,
   later propagated by read_image_iovl() into AVStreamGroupTileGrid.nb_tiles,
   and finally consumed in istg_parse_tile_grid(), which assumes at least one
   tile and reads tg->offsets[tg->nb_tiles - 1]. With zero tiles, that
   assumption breaks and leads to the out-of-bounds access seen in ASan.
   
   Fixing the problem at the parser boundary is preferable to adding a later
   workaround because it prevents creation of an invalid derived-image state
   and stops that malformed state from reaching downstream consumers.
   
   This is also consistent with the HEIF specification. Both iovl and grid
   derived images are formed from one or more input images, and for grid the
   dimg reference count must equal rows * columns; since rows and columns are
   encoded as *_minus_one + 1, that count cannot be zero. A zero dimg entry
   count is therefore invalid input and should be rejected when parsed.

   Changed files

   • libavformat/mov.c