Package: libvpx / 1.16.0-3

Metadata

Package Version Patches format
libvpx 1.16.0-3 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001 Relax ABI check.patch | (download)

vpx/src/vpx_decoder.c | 2 1 + 1 - 0 !
vpx/src/vpx_encoder.c | 4 2 + 2 - 0 !
2 files changed, 3 insertions(+), 3 deletions(-)

 relax abi check

We have symbol files and version dependencies to properly track this.

0002 Do not undefine _FORTIFY_SOURCE.patch | (download)

build/make/configure.sh | 4 0 + 4 - 0 !
1 file changed, 4 deletions(-)

 do not undefine _fortify_source


0003 write_superframe_index return 0 if buffer is full.patch | (download)

vp9/vp9_cx_iface.c | 20 16 + 4 - 0 !
1 file changed, 16 insertions(+), 4 deletions(-)

 write_superframe_index: return 0 if buffer is full

write_superframe_index() should return the number of bytes written to
ctx->pending_cx_data. If ctx->pending_cx_data is full,
write_superframe_index() doesn't write the optional superframe index, so
it should return 0 in this case. Add an assertion that would have
detected this bug. Add and clarify comments for code related to this
bug.

Also fix the buffer full check. The check should not assume that
ctx->pending_cx_data is equal to ctx->cx_data, and the check had an
off-by-one error.

The bug was introduced when write_superframe_index() was added in the
following CLs:
https://chromium-review.googlesource.com/c/webm/libvpx/+/44659
https://chromium-review.googlesource.com/c/webm/libvpx/+/45268

Bug: oss-fuzz:476466137