Builder ffmpegsos-solaris10-sparc Build #13432

Results:

Failed shell_2 shell_3 shell_4 shell_5

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git update ( 8 secs )
   1. stdio
2. shell 'gsed -i ...' ( 0 secs )
   1. stdio
3. shell_1 'gsed -i ...' ( 0 secs )
   1. stdio
4. shell_2 'gsed -i ...' failed ( 0 secs )
   1. stdio
5. shell_3 './configure --samples="../../../ffmpeg/fate-suite" ...' failed ( 7 secs )
   1. stdio
   2. config.log
6. shell_4 'gmake fate-rsync' failed ( 0 secs )
   1. stdio
7. shell_5 '../../../ffmpeg/fate.sh ../../../ffmpeg/fate_config_sos.sh' failed ( 3 secs )
   1. stdio
   2. configure.log
   3. compile.log
   4. test.log

Build Properties:

Forced Build Properties:

Responsible Users:

1. Franciszek Kalinowski

   franek.kalinowskiohnoyoudont@isec.pl
2. Michael Niedermayer

   michaelohnoyoudont@niedermayer.cc

Timing:

All Changes:

:

1. Change #267900

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Thu 21 May 2026 03:08:30
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	59367afc3d4d86dbe2123c5ff750be7f54f6da7a

   Comments

   avcodec/jpeg2000dec: compute mask in decode_clnpass() like in decode_sigpass()
   Fixes: integer overflow
   
   Found by: Jiale Yao
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavcodec/jpeg2000dec.c

2. Change #267901

   Category	ffmpeg
   Changed by	Franciszek Kalinowski <franek.kalinowskiohnoyoudont@isec.pl>
   Changed at	Thu 21 May 2026 03:09:37
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	a44cae9025e96be2c220a64ef98a678fe6e0df77

   Comments

   avformat/rtpenc_aac: reject packets smaller than the ADTS header
   When extradata_size == 0, ff_rtp_send_aac() does `size -= 7` to skip the
   ADTS header without checking size >= 7. A short packet makes size negative,
   and the value is later passed to memcpy() as size_t, reading past the buffer
   end. Bail out instead.
   
   The vulnerable branch is not reached when using the built-in AAC encoder
   (which always emits extradata), but an application that feeds raw
   ADTS-stripped AAC packets through the libavformat RTP muxer can hit it. The
   fix is a one-line lower-bound check and compiles/runs cleanly; see audit
   PoC for the static analysis and reachable-by-API write-up.
   
   Reported by Franciszek Kalinowski (isec.pl / striga.ai) and Bartosz Smigielski.

   Changed files

   • libavformat/rtpenc_aac.c