Skip to content

multiple security and robustness issues and adds release automation - #226

Merged
kpchoi merged 6 commits into
mainfrom
kp_handling_issues_20260713
Jul 15, 2026
Merged

multiple security and robustness issues and adds release automation#226
kpchoi merged 6 commits into
mainfrom
kp_handling_issues_20260713

Conversation

@kpchoi

@kpchoi kpchoi commented Jul 15, 2026

Copy link
Copy Markdown
Collaborator

Bug Fixes

  • Prevent signed integer overflow in VLC exp-golomb decoding by using unsigned arithmetic
  • Add buffer overflow protection in bitstream reading
  • Validate TransCoeff range in DC and AC coefficient parsing
  • Fix buffer size validation in decoder with s64 casting to prevent overflow

Release Automation

  • Add GitHub Actions workflow to automatically generate SHA256SUMS for releases
  • Add GitHub Actions workflow to verify release tag version matches oapv.h version numbers

Issues Resolved
kpchoi added 6 commits July 13, 2026 18:15
@kpchoi
Compute required buffer size in s64 to avoid overflow in dec_frm_prepare
d448f93 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
Avoid signed-overflow UB in dec_vlc_read exp-golomb accumulation
580bd9b 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
Prevent buffer overflow in read_bitstream by checking read_size limit
da5e524 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
Add GitHub Actions workflow to generate SHA256SUMS for releases
bf69ada 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
Validate TransCoeff range in DC and AC coefficient parsing
f0b19e6 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
Add GitHub Actions workflow to verify release version matches oapv.h
44412f4 
Signed-off-by: KP Choi <kp5.choi@samsung.com>
@kpchoi
kpchoi requested review from cpncf, mss-park and ssantihub July 15, 2026 03:42
@tuzm24
tuzm24 self-requested a review July 15, 2026 05:58
tuzm24
tuzm24 approved these changes Jul 15, 2026
View reviewed changes

@tuzm24 tuzm24 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
@kpchoi
kpchoi merged commit b5cc54b into main Jul 15, 2026
7 checks passed
@jsperrier1 jsperrier1 mentioned this pull request Jul 17, 2026
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants

@kpchoi @tuzm24