libva-v4l2-request-fourier: bump pin to 2860d75 (#13 bounds-check fix) #66
Reference in New Issue
Block a user
Delete Branch "claude-noether/marfrit-packages:bump-libva-fourier-2860d75-issue-13"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Bumps both the Arch PKGBUILD and the Debian build-deb.sh pins to libva-v4l2-request-fourier@2860d75 — PR #14 merge in the fork, which closes issue #13 (
codec_store_buffer: VASliceDataBufferType memcpy has no bounds check vs source_data capacity).Fix in upstream PR #14: guards the three append sites in
codec_store_buffer'sVASliceDataBufferTypebranch (H.264 Annex-B start code, VP8 uncompressed-header pad, slice payload) against the OUTPUT pool slot's fixedsizeimage; returnsVA_STATUS_ERROR_ALLOCATION_FAILEDwith arequest_logline instead ofmemcpy'ing past the mmap on a resolution upshift mid-stream.This is the memory-safety floor; the root-cause refactor (re-init OUTPUT pool / re-create surfaces on resolution change, or grow
source_dataon demand) is tracked as the follow-up backlog item.Dual-pin per
feedback_marfrit_packages_dual_pin—check-already-published.shkeys off both1.0.0.r388.2860d75(Arch repo) and1.0.0+r388+g2860d75(Debian pool); bumping only one short-circuits CI on the other side.Test plan
libva-v4l2-request-fourier-aarch64job builds + publishes the Arch package.libva-v4l2-request-fourier-debianjob builds + publishes the Debian package.apt installon higgs picks up1.0.0+r388+g2860d75-1(manual or via unattended-upgrades).vainfostill enumerates all 8 codec profiles via daedalus_v4l2 slot.VA_STATUS_ERROR_ALLOCATION_FAILEDto libavcodec andrequest_logshows the overflow delta.