CVE-2025-61147: check for valid integer command line parameters
authorDebian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
committerAron Xu <aron@debian.org>
Thu, 6 Aug 2026 05:05:03 +0000 (13:05 +0800)
commit3c265295be594f3b992c0e84672e8d5bccc335a1
treeadf9ff628158c8ff5f869e9d496916f7f2ae3661
parent7380c2b2dcb8e002abf3908f6ea9cf96370c9d2b
CVE-2025-61147: check for valid integer command line parameters

Origin: upstream, https://github.com/strukturag/libde265/commit/8b17e0930f77db07f55e0b89399a8f054ddbecf7
Bug: https://github.com/strukturag/libde265/issues/484
Bug-Debian: https://bugs.debian.org/1129257
Applied-Upstream: 1.0.18

Invalid numeric arguments (e.g. for --framedrop) made dec265 crash with a
segmentation fault in decoder_context::compute_framedrop_table().

Gbp-Pq: Name CVE-2025-61147.patch
CMakeLists.txt
dec265/dec265.cc