Commit 29cc4d8113 for ffmpeg

commit 29cc4d81134fa11fc887ba200a1d129ece025e94
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Sun Oct 4 23:11:24 2026 +0200

    avcodec/ratecontrol: reject invalid picture numbers in the pass-2 log

    Found during triage/review of the security report lAyRPnaxSAiw

diff --git a/libavcodec/ratecontrol.c b/libavcodec/ratecontrol.c
index 08563ea35b..a3ada799b5 100644
--- a/libavcodec/ratecontrol.c
+++ b/libavcodec/ratecontrol.c
@@ -607,9 +607,11 @@ av_cold int ff_rate_control_init(MPVMainEncContext *const m)
                 next++;
             }
             e = sscanf(p, " in:%d ", &picture_number);
-
-            av_assert0(picture_number >= 0);
-            av_assert0(picture_number < rcc->num_entries);
+            if (e != 1 || picture_number < 0 || picture_number >= rcc->num_entries) {
+                av_log(avctx, AV_LOG_ERROR,
+                       "statistics are damaged at line %d, parser out=%d\n", i, e);
+                return -1;
+            }
             rce = &rcc->entry[picture_number];

             e += sscanf(p, " in:%*d out:%*d type:%d q:%f itex:%d ptex:%d "