Commit c77edecb53 for ffmpeg

commit c77edecb537e98e6c71ca9b1eac252c2b6144bda
Author: Michael Niedermayer <michael@niedermayer.cc>
Date:   Mon Oct 19 02:15:48 2026 +0200

    avformat/rtpenc: Reject packet sizes too small for one iLBC frame

    Fixes: heap-buffer-overflow
    Fixes: sbHrRrZhcbbZ

    Out of array write Replicated through UnModified FFmpeg with ASAN

    Found during triage of the security report TwYfznAFyatl (#22717)

diff --git a/libavformat/rtpenc.c b/libavformat/rtpenc.c
index 8f14fee073..1c91e32fbe 100644
--- a/libavformat/rtpenc.c
+++ b/libavformat/rtpenc.c
@@ -308,6 +308,10 @@ static int rtp_write_header(AVFormatContext *s1)
             goto fail;
         }
         s->max_frames_per_packet = s->max_payload_size / st->codecpar->block_align;
+        if (!s->max_frames_per_packet) {
+            av_log(s1, AV_LOG_ERROR, "RTP max payload size too small for iLBC\n");
+            goto fail;
+        }
         break;
     case AV_CODEC_ID_AMR_NB:
     case AV_CODEC_ID_AMR_WB: