From: Víctor Manuel Jáquez Leal <vjaquez@igalia.com>
Date: Wed, 11 Feb 2026 21:07:49 +0000 (+0100)
Subject: [PATCH] libs: jpegparser: boundary checks before copying it
X-Git-Tag: archive/raspbian/1.26.2-3+rpi1+deb13u1^2~2
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=13fbd2c37cd4ac93caaa440364ff09fddf620938;p=gst-plugins-bad1.0.git

[PATCH] libs: jpegparser: boundary checks before copying it


Gbp-Pq: Name CVE-2026-3082.patch
---

diff --git a/gst-libs/gst/codecparsers/gstjpegparser.c b/gst-libs/gst/codecparsers/gstjpegparser.c
index 0cb5d0b7..fd66f6cf 100644
--- a/gst-libs/gst/codecparsers/gstjpegparser.c
+++ b/gst-libs/gst/codecparsers/gstjpegparser.c
@@ -77,6 +77,10 @@ ensure_debug_category (void)
 
 #define READ_BYTES(reader, buf, length) G_STMT_START {          \
     const guint8 *vals;                                         \
+    if (length > sizeof (buf)) {                                \
+      GST_WARNING ("data size is bigger than its storage");     \
+      goto failed;                                              \
+    }                                                           \
     if (!gst_byte_reader_get_data (reader, length, &vals)) {    \
       GST_WARNING ("failed to read bytes, size:%d", length);    \
       goto failed;                                              \