7.1.5From commit messages
n7.1.5
Fixed 10
- avformat/dashdec, dashenc, hlsenc: respect io_open set in AVFormatContext and use correct close function for custom io.
- avformat/demux: use correct close function for custom io.
- avformat/oggparsecelt and oggparsevorbis: bound extra_headers and prevent integer overflow when summing header lengths.
- avformat/mov_chan: keep the layout untouched on chan/chnl box failure and don't abort on unsupported or invalid chnl boxes.
- avcodec/vvc: multiple fixes including not using large array on stack, checking frame to be non-NULL, ensuring every CTU belongs to a slice, returning error if CTU size > 128, adding support for output_corrupt/showall flags, and fixing issues with inverse LMCS idx, slice map construction, subpicture overlaps, divide-by-zero in LMCS param derivation, and error handling.
- avcodec/cbs_h266: stricter validation for subpicture's max width and height, fix wrong condition for chroma MTT depth in PH, tighten sh_num_tiles_in_slice_minus1 upper bound, and fix pps_exp_slice_height_in_ctus_minus1 range.
- avcodec/hdrdec: fix pixel count decrement in RLE decompress loop.
- avformat/mov: fix negative index given to can_seek_to_key_sample().
- avformat and avcodec: multiple security and stability fixes including bounds checks in oggparsevorbis, rtpenc_aac, rtpenc_xiph, hls, soxdec, mxfdec, cook, ftp (CR/LF and IAC character injection prevention), matroskadec, iamf_parse, jpeglsdec, rtmppkt, magicyuv, h264_slice, aac/aacdec, vc2enc_dwt, fastaudio, and adpcm.
- avfilter/drawtext: prevent double-free and glyph caching issues, and plug error-path leaks in measure_text/draw_text.