Builder ffmpegsos-solaris10-i386 Build #13908

Results:

Failed shell_2 shell_3 shell_4 shell_5

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-i386' triggered this build

Steps and Logfiles:

1. git update ( 5 secs )
   1. stdio
2. shell 'gsed -i ...' ( 0 secs )
   1. stdio
3. shell_1 'gsed -i ...' ( 0 secs )
   1. stdio
4. shell_2 'gsed -i ...' failed ( 0 secs )
   1. stdio
5. shell_3 './configure --samples="../../../ffmpeg/fate-suite" ...' failed ( 7 secs )
   1. stdio
   2. config.log
6. shell_4 'gmake fate-rsync' failed ( 0 secs )
   1. stdio
7. shell_5 '../../../ffmpeg/fate.sh ../../../ffmpeg/fate_config_sos.sh' failed ( 0 secs )
   1. stdio
   2. configure.log
   3. compile.log
   4. test.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Franciszek Kalinowski

   franek.kalinowskiohnoyoudont@isec.pl

Timing:

All Changes:

:

1. Change #267965

   Category	ffmpeg
   Changed by	Franciszek Kalinowski <franek.kalinowskiohnoyoudont@isec.pl>
   Changed at	Thu 21 May 2026 16:19:54
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	87439ed6195ed1eb079bc41f3a7a196438275aac

   Comments

   avformat/oggparsecelt: bound extra_headers to avoid an effectively infinite loop
   celt_header() reads a uint32 `extra_headers` field from the CELT identification
   header and stores `1 + extra_headers` into the signed int extra_headers_left.
   With extra_headers = 0x7FFFFFFE this becomes INT_MAX and the OGG parser
   consumes every subsequent page as a CELT "extra header" without ever reaching
   audio data, hanging on any streaming input. A value of 0xFFFFFFFE wraps the
   signed addition negative, with the same family of consequences.
   
   Reject any extra_headers count above a small fixed cap (16, well above any
   real CELT-over-Ogg stream).
   
   Verified with the audit PoC (a crafted file plus an infinite-page FIFO):
   without the patch, ffmpeg consumes pages forever; with the patch it logs
   "Too many CELT extra headers (...)" and exits in ~70 ms with
   AVERROR_INVALIDDATA.
   
   Reported by Franciszek Kalinowski (isec.pl / striga.ai) and Bartosz Smigielski.

   Changed files

   • libavformat/oggparsecelt.c