Commit 291abf6d93 for ffmpeg
commit 291abf6d931665f33e86cf2da2a5deb5f6ca6acb
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Wed Oct 7 00:08:31 2026 +0200
avformat/hashenc: Do not hash IAMF parameter side data
Fixes: address dependent output
Fixes: bH0O2TMvkU1D
Address dependent hash Replicated through UnModified FFmpeg
Found during triage of the security report AISLE-2026-0111-00173
diff --git a/libavformat/hashenc.c b/libavformat/hashenc.c
index 0cb7c6147d..095f1b3073 100644
--- a/libavformat/hashenc.c
+++ b/libavformat/hashenc.c
@@ -130,7 +130,9 @@ static void hash_print_sidedata(struct AVFormatContext *s,
uint32_t data = AV_RL32(sd[i].data + j);
av_hash_update(c->hashes->hash, (uint8_t *)&data, sizeof(uint32_t));
}
- } else
+ } else if (sd[i].type != AV_PKT_DATA_IAMF_MIX_GAIN_PARAM &&
+ sd[i].type != AV_PKT_DATA_IAMF_DEMIXING_INFO_PARAM &&
+ sd[i].type != AV_PKT_DATA_IAMF_RECON_GAIN_INFO_PARAM)
av_hash_update(c->hashes->hash, sd[i].data, sd[i].size);
snprintf(buf, sizeof(buf) - (AV_HASH_MAX_SIZE * 2 + 1),
", %8zu, ", sd[i].size);