Commit ec887b13a8 for ffmpeg

commit ec887b13a88afbaf44fb28c3045bda5d434da8dc
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Tue Nov 3 01:22:44 2026 +0100

    avcodec/g726: check init_get_bits8() for failure

    Fixes: pvCZj7vpETa5
    Fixes: AISLE-2026-0150-00809
    Fixes: null pointer dereference
    Null pointer dereference Replicated through UnModified FFmpeg with ASAN
    (AVI file with one 268435392 byte G.726 audio chunk)

    Found-by: Joshua Rogers (AISLE)

diff --git a/libavcodec/g726.c b/libavcodec/g726.c
index d793dec281..699b674232 100644
--- a/libavcodec/g726.c
+++ b/libavcodec/g726.c
@@ -462,6 +462,9 @@ static int g726_decode_frame(AVCodecContext *avctx, AVFrame *frame,
     GetBitContext gb;
     int out_samples, ret;

+    if ((ret = init_get_bits8(&gb, buf, buf_size)) < 0)
+        return ret;
+
     out_samples = buf_size * 8 / c->code_size;

     /* get output buffer */
@@ -470,8 +473,6 @@ static int g726_decode_frame(AVCodecContext *avctx, AVFrame *frame,
         return ret;
     samples = (int16_t *)frame->data[0];

-    init_get_bits(&gb, buf, buf_size * 8);
-
     while (out_samples--)
         *samples++ = g726_decode(c, c->little_endian ?
                                     get_bits_le(&gb, c->code_size) :