Commit 44537e795f for ffmpeg

commit 44537e795f0b99ca0b96710d27f052628cea08e1
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Sat Oct 24 06:38:34 2026 +0200

    avcodec/proresenc_anatoliy: compute the packet size bound in 64 bits

    Signed integer overflow Replicated through UnModified FFmpeg with UBSAN

    Fixes: signed integer overflow

    Found during triage of the security report EMbkV19WJjmA
    Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

diff --git a/libavcodec/proresenc_anatoliy.c b/libavcodec/proresenc_anatoliy.c
index da2deb274f..d8c5a48300 100644
--- a/libavcodec/proresenc_anatoliy.c
+++ b/libavcodec/proresenc_anatoliy.c
@@ -734,7 +734,7 @@ static int prores_encode_frame(AVCodecContext *avctx, AVPacket *pkt,
     uint8_t *buf;
     int compress_frame_size, pic_size, ret, is_top_field_first = 0;
     uint8_t frame_flags;
-    int frame_size = FFALIGN(avctx->width, 16) * FFALIGN(avctx->height, 16)*16 + 500 + FF_INPUT_BUFFER_MIN_SIZE; //FIXME choose tighter limit
+    int64_t frame_size = (int64_t)FFALIGN(avctx->width, 16) * FFALIGN(avctx->height, 16)*16 + 500 + FF_INPUT_BUFFER_MIN_SIZE; //FIXME choose tighter limit


     if ((ret = ff_alloc_packet(avctx, pkt, frame_size + FF_INPUT_BUFFER_MIN_SIZE)) < 0)