libva-v4l2-request-fourier: bump pin to 2860d75 (#13 bounds-check fix) #66

Merged
marfrit merged 1 commits from claude-noether/marfrit-packages:bump-libva-fourier-2860d75-issue-13 into main 2026-05-21 10:38:03 +00:00
Owner

Bumps both the Arch PKGBUILD and the Debian build-deb.sh pins to libva-v4l2-request-fourier@2860d75 — PR #14 merge in the fork, which closes issue #13 (codec_store_buffer: VASliceDataBufferType memcpy has no bounds check vs source_data capacity).

Fix in upstream PR #14: guards the three append sites in codec_store_buffer's VASliceDataBufferType branch (H.264 Annex-B start code, VP8 uncompressed-header pad, slice payload) against the OUTPUT pool slot's fixed sizeimage; returns VA_STATUS_ERROR_ALLOCATION_FAILED with a request_log line instead of memcpy'ing past the mmap on a resolution upshift mid-stream.

This is the memory-safety floor; the root-cause refactor (re-init OUTPUT pool / re-create surfaces on resolution change, or grow source_data on demand) is tracked as the follow-up backlog item.

Dual-pin per feedback_marfrit_packages_dual_pincheck-already-published.sh keys off both 1.0.0.r388.2860d75 (Arch repo) and 1.0.0+r388+g2860d75 (Debian pool); bumping only one short-circuits CI on the other side.

Test plan

  • Gitea Actions libva-v4l2-request-fourier-aarch64 job builds + publishes the Arch package.
  • Gitea Actions libva-v4l2-request-fourier-debian job builds + publishes the Debian package.
  • apt install on higgs picks up 1.0.0+r388+g2860d75-1 (manual or via unattended-upgrades).
  • vainfo still enumerates all 8 codec profiles via daedalus_v4l2 slot.
  • mpv --hwdec=vaapi-copy on a 1080p H.264 source against a 720p-default daedalus session no longer SIGSEGVs in memcpy; surfaces VA_STATUS_ERROR_ALLOCATION_FAILED to libavcodec and request_log shows the overflow delta.
Bumps both the Arch PKGBUILD and the Debian build-deb.sh pins to libva-v4l2-request-fourier@2860d75 — PR #14 merge in the fork, which closes issue #13 (`codec_store_buffer: VASliceDataBufferType memcpy has no bounds check vs source_data capacity`). Fix in upstream PR #14: guards the three append sites in `codec_store_buffer`'s `VASliceDataBufferType` branch (H.264 Annex-B start code, VP8 uncompressed-header pad, slice payload) against the OUTPUT pool slot's fixed `sizeimage`; returns `VA_STATUS_ERROR_ALLOCATION_FAILED` with a `request_log` line instead of `memcpy`'ing past the mmap on a resolution upshift mid-stream. This is the memory-safety floor; the root-cause refactor (re-init OUTPUT pool / re-create surfaces on resolution change, or grow `source_data` on demand) is tracked as the follow-up backlog item. Dual-pin per `feedback_marfrit_packages_dual_pin` — `check-already-published.sh` keys off both `1.0.0.r388.2860d75` (Arch repo) and `1.0.0+r388+g2860d75` (Debian pool); bumping only one short-circuits CI on the other side. ## Test plan - [ ] Gitea Actions `libva-v4l2-request-fourier-aarch64` job builds + publishes the Arch package. - [ ] Gitea Actions `libva-v4l2-request-fourier-debian` job builds + publishes the Debian package. - [ ] `apt install` on higgs picks up `1.0.0+r388+g2860d75-1` (manual or via unattended-upgrades). - [ ] `vainfo` still enumerates all 8 codec profiles via daedalus_v4l2 slot. - [ ] mpv --hwdec=vaapi-copy on a 1080p H.264 source against a 720p-default daedalus session no longer SIGSEGVs in memcpy; surfaces `VA_STATUS_ERROR_ALLOCATION_FAILED` to libavcodec and `request_log` shows the overflow delta.
marfrit added 1 commit 2026-05-21 10:19:26 +00:00
Bumps both the Arch PKGBUILD and the Debian build-deb.sh pins to PR
#14 merge — codec_store_buffer bounds-checks for VASliceDataBufferType.
Picks up the SIGSEGV fix for mpv --hwdec=vaapi-copy on resolution
upshift mid-stream (issue #13).

Dual-pin so check-already-published.sh detects both pool ABIs as
needing a fresh build.
marfrit merged commit e15b887d8d into main 2026-05-21 10:38:03 +00:00
marfrit deleted branch bump-libva-fourier-2860d75-issue-13 2026-05-21 10:38:03 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: marfrit/marfrit-packages#66