)]}'
{
  "commit": "eb565694d376eabcf5bf452bc786e9839b25ed98",
  "tree": "78b3492c92e28d005988cba023e643d9274782a2",
  "parents": [
    "9d654e391a75268869e488831099a5f86cfb2fb9"
  ],
  "author": {
    "name": "Wan-Teh Chang",
    "email": "wtc@google.com",
    "time": "Thu Jun 18 08:32:09 2026 -0700"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Thu Jun 18 08:32:09 2026 -0700"
  },
  "message": "avifImageYUVAnyToRGBAnySlow: Fix integer overflows\n\nFix the integer overflows in avifImageYUVAnyToRGBAnySlow() by declaring\na few local variables as size_t or ptrdiff_t.\n\nDeclare yuvChannelBytes, yRowBytes, uRowBytes, vRowBytes, aRowBytes as\nsize_t. These variables are multiplied by index variables of the\nuint32_t type. In addition, yuvChannelBytes, uRowBytes, and vRowBytes\nare cast to ptrdiff_t or multiplied by -1.\n\nDeclare uAdjCol, vAdjCol, uAdjRow, vAdjRow as ptrdiff_t. These variables\nmay store positive or negative values, and are added to a pointer.\n\nAlso remove two pairs of unnecessary parentheses.\n\nAcknowledgments: This pull request replaces the following pull requests\nthat attempt to fix this issue:\n  - https://github.com/AOMediaCodec/libavif/pull/3063 by rootvector2\n  - https://github.com/AOMediaCodec/libavif/pull/3202 by rootvector2\n  - https://github.com/AOMediaCodec/libavif/pull/3213 by metsw24-max\n  - https://github.com/AOMediaCodec/libavif/pull/3260 by MXguru1",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "aff25da25255fbd644388dbe0ef3853e2bdccadb",
      "old_mode": 33188,
      "old_path": "src/reformat.c",
      "new_id": "d1a511b87b1305fc5371f9f4ad440d54473b7df3",
      "new_mode": 33188,
      "new_path": "src/reformat.c"
    }
  ]
}