Commit dff38f9d46 for ffmpeg

commit dff38f9d4694941a432127a9c3cb25ba8ad15b17
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Mon Oct 19 22:08:13 2026 +0200

    avcodec/prores_raw: release a hwaccel picture left over by a failed frame

    A failing hwaccel call returned with the picture still allocated and the
    next frame failed the assertion in ff_hwaccel_frame_priv_alloc(). Release
    the picture before allocating the next one, as proresdec does.

    Fixes: 233BfozgW6QZ
    Fixes: assertion failure
    Assertion failure Replicated through Modified FFmpeg with a failure injected
    into the Vulkan hwaccel, with -threads 1

    Found during triage/review of the security report AISLE-2026-R0043

diff --git a/libavcodec/prores_raw.c b/libavcodec/prores_raw.c
index fb43fa44e5..b0197021dd 100644
--- a/libavcodec/prores_raw.c
+++ b/libavcodec/prores_raw.c
@@ -543,6 +543,7 @@ static int decode_frame(AVCodecContext *avctx,

     s->frame = frame;

+    av_refstruct_unref(&s->hwaccel_picture_private);
     ret = ff_hwaccel_frame_priv_alloc(avctx, &s->hwaccel_picture_private);
     if (ret < 0)
         return ret;