Builder ffmpegsos-solaris10-i386 Build #14003

Results:

Failed

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-ffmpegsos-solaris10-i386' triggered this build

Steps and Logfiles:

1. git updating ( 3 secs )
   1. stdio
2. shell  
   1. - no logs -
3. shell_1  
   1. - no logs -
4. shell_2  
   1. - no logs -
5. shell_3  
   1. - no logs -
6. shell_4  
   1. - no logs -
7. shell_5  
   1. - no logs -

Build Properties:

Forced Build Properties:

Responsible Users:

1. David Korczynski

   davidohnoyoudont@adalogics.com
2. Michael Niedermayer

   michaelohnoyoudont@niedermayer.cc

Timing:

All Changes:

:

1. Change #269455

   Category	ffmpeg
   Changed by	David Korczynski <davidohnoyoudont@adalogics.com>
   Changed at	Wed 03 Jun 2026 22:33:19
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	6d8f7882ae6e7b7b86697474ee1a3755dfba1858

   Comments

   avcodec/adpcm: require block_align to be a multiple of channels in ADPCM_PSXC init
   The ADPCM_PSXC block loop in adpcm_decode_frame() (libavcodec/adpcm.c:
   2770) iterates 'block < avpkt->size / block_align' times and, for
   each block, consumes
       channels * (1 + (block_align - 1) / channels)
   input bytes via the *unchecked* bytestream2_get_byteu() reader. The
   loop divides avpkt->size by block_align, so the loop bound is sound
   only when the per-block consumption equals block_align — i.e. when
   block_align is an exact multiple of channels. For any other
   combination (e.g. block_align=9 with channels=8), each block consumes
   more than block_align bytes; iterating avpkt->size/block_align
   blocks then walks the input bytestream past avpkt->data +
   avpkt->size, producing the heap-buffer-overflow READ at
   libavcodec/bytestream.h:99 reported as ANT-2026-04052.
   
   adpcm_decode_init() previously only enforced 'channels > 0' and
   'block_align > 0' for PSXC. Tighten the init check to additionally
   require 'block_align % channels == 0', which is the precise
   invariant the decode loop depends on.
   
   Reproducer: a crafted WAV header declaring channels=8, block_align=9
   with the decoder forced via 'ffmpeg -c:a adpcm_psxc -i evil.wav'.
   
   Found-by: Anthropic agents; validated and reported by Ada Logics.
   
   Signed-off-by: David Korczynski <david@adalogics.com>

   Changed files

   • libavcodec/adpcm.c

2. Change #269457

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Wed 03 Jun 2026 22:34:28
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	3669a742dda9404af26c3ec10b6dd2237a6fa7c5

   Comments

   avcodec/jpeglsdec: only apply color transform to decoded rows
   Fixes: Timeout
   Fixes: 503996733/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MJPEG_DEC_fuzzer-4948713016721408
   Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavcodec/jpeglsdec.c

3. Change #269459

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Wed 03 Jun 2026 22:35:41
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	cdba2d76dcba2bb8295fb2bb2cc8bda8ccb24b29

   Comments

   avcodec/cri: propagate max_pixels to the JPEG tile decoder
   Fixes: 489941776/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CRI_fuzzer-4845035614175232
   Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavcodec/cri.c

4. Change #269460

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Wed 03 Jun 2026 22:35:41
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	c1d3e8c46f435bf5748df67a0e55c4dac287b12c

   Comments

   avcodec/imm5: propagate max_pixels to the H264/HEVC sub-decoders
   Fixes: 501794495/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IMM5_fuzzer-5192457796255744
   Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavcodec/imm5.c

5. Change #269461

   Category	ffmpeg
   Changed by	Michael Niedermayer <michaelohnoyoudont@niedermayer.cc>
   Changed at	Wed 03 Jun 2026 22:35:41
   Repository	https://git.ffmpeg.org/ffmpeg.git
   Project	ffmpeg
   Branch	master
   Revision	47f3996bdd1069b4e46dfcc7ad6c887c2af408e0

   Comments

   avcodec/tdsc: propagate max_pixels to the JPEG tile decoder
   Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

   Changed files

   • libavcodec/tdsc.c