Builder ffmpegsos-solaris10-sparc Build #13806

Results:

Failed

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-sparc' triggered this build

Steps and Logfiles:

1. git updating ( 1 mins, 5 secs )
   1. stdio
2. shell  
   1. - no logs -
3. shell_1  
   1. - no logs -
4. shell_2  
   1. - no logs -
5. shell_3  
   1. - no logs -
6. shell_4  
   1. - no logs -
7. shell_5  
   1. - no logs -

Build Properties:

Forced Build Properties:

Responsible Users:

1. Joshua Rogers

   MegaManSecohnoyoudont@users.noreply.github.com
2. Michael Niedermayer

   michaelohnoyoudont@niedermayer.cc

Timing:

All Changes:

:

1. Change #277886

   Category	ffmpeg
   Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
   Changed at	Wed 12 Aug 2026 01:34:09
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	983dae9c19f46c87d597598c0fd2f2fcee0ad2f8

   Comments

   avformat/rtpenc_av1: bound OBU size in the keyframe search loop
   The is_keyframe sequence-header search loop advanced buf_ptr/rem_size by
   num_lebs + obu_size without bounding obu_size against the remaining data
   (unlike the main packetization loop). A crafted obu_size (~0x80000010)
   wraps the signed rem_size back positive, so the next iteration
   dereferences a pointer past the packet. Consume the LEB bytes first, then
   reject an OBU larger than the remaining size. Out-of-bounds read reachable
   from a crafted AV1 packet muxed to RTP.
   
   Fixes: out of array read

   Changed files

   • libavformat/rtpenc_av1.c

2. Change #277887

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Wed 12 Aug 2026 01:34:41
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	d862937c5a9bd6099e46f551846e91a048ed65a1

   Comments

   avformat/rtpenc_av1: Check num_lebs
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavformat/rtpenc_av1.c

3. Change #277888

   Category	ffmpeg
   Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
   Changed at	Wed 12 Aug 2026 01:34:41
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	b4c199c5906ff53368926c2a5839881f41957e7f

   Comments

   avformat/rtpenc_av1: do not narrow the OBU size to (long)
   (long)obu_size sign-flips values in 0x80000000..0xfffffffd on ILP32/LLP64
   targets (32-bit long, e.g. 64-bit Windows), bypassing the size check.
   Compare as uint32_t; frame_size is non-negative at this point.
   
   No PoC as the used setup was 64bit specific

   Changed files

   • libavformat/rtpenc_av1.c