Commit bc6140f397 for ffmpeg
commit bc6140f3972b740c6304addaefe5bbbb6046b856
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Tue Oct 6 07:41:44 2026 +0200
avformat/rdt: Check that the stream has an RMStream
Fixes: NULL pointer dereference
Fixes: PXsIMPp0wPaW
Fixes: AISLE-2026-0111-00472
NULL pointer dereference Replicated through UnModified FFmpeg (ffprobe) with ASAN,UBSAN
Found-by: Joshua Rogers <joshua.rogers@aisle.com>
diff --git a/libavformat/rdt.c b/libavformat/rdt.c
index 77048d59c8..725793eb01 100644
--- a/libavformat/rdt.c
+++ b/libavformat/rdt.c
@@ -301,6 +301,9 @@ rdt_parse_packet (AVFormatContext *ctx, PayloadContext *rdt, AVStream *st,
{
int seq = 1, res;
+ if (st->index >= rdt->nb_rmst || !rdt->rmst[st->index])
+ return AVERROR_INVALIDDATA;
+
if (rdt->audio_pkt_cnt == 0) {
FFIOContext pb;
int pos, rmflags;