Commit 1206df65e5 for ffmpeg
commit 1206df65e54b6e9c01459c7cd9a95f9bde2736d7
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Tue Nov 3 01:22:44 2026 +0100
avcodec/vble: check init_get_bits8() for failure
Fixes: 218yj1AmW5fg
Fixes: AISLE-2026-0150-00071
Fixes: null pointer dereference
Null pointer dereference Replicated through UnModified FFmpeg with ASAN
(AVI file with one 268435452 byte VBLE frame)
Found-by: Joshua Rogers (AISLE)
diff --git a/libavcodec/vble.c b/libavcodec/vble.c
index c48feb9a59..e8173badfa 100644
--- a/libavcodec/vble.c
+++ b/libavcodec/vble.c
@@ -136,7 +136,8 @@ static int vble_decode_frame(AVCodecContext *avctx, AVFrame *pic,
if (version != 1)
av_log(avctx, AV_LOG_WARNING, "Unsupported VBLE Version: %d\n", version);
- init_get_bits(&gb, src + 4, (avpkt->size - 4) * 8);
+ if ((ret = init_get_bits8(&gb, src + 4, avpkt->size - 4)) < 0)
+ return ret;
/* Unpack */
if (vble_unpack(ctx, &gb) < 0) {