Commit 839c93f261 for ffmpeg

commit 839c93f261cd3e1719edfac4244a2d0055ce8841
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Tue Nov 3 01:22:43 2026 +0100

    avcodec/jvdec: check init_get_bits8() for failure

    Fixes: gBKyT14GTvie
    Fixes: AISLE-2026-0150-00317
    Fixes: null pointer dereference
    Null pointer dereference Replicated through API with ASAN (one 268435460
    byte packet sent to the jv decoder; the JV demuxer limits video_size to 24
    bits)

    Found-by: Joshua Rogers (AISLE)

diff --git a/libavcodec/jvdec.c b/libavcodec/jvdec.c
index d8c78cd18f..f2d7a15f0d 100644
--- a/libavcodec/jvdec.c
+++ b/libavcodec/jvdec.c
@@ -166,7 +166,8 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *rframe,

         if (video_type == 0 || video_type == 1) {
             GetBitContext gb;
-            init_get_bits(&gb, buf, 8 * video_size);
+            if ((ret = init_get_bits8(&gb, buf, video_size)) < 0)
+                return ret;

             if ((ret = ff_reget_buffer(avctx, s->frame, 0)) < 0)
                 return ret;