)]}'
{
  "commit": "ffef33501bab42a931e210eb9ce3431246bc167a",
  "tree": "ff26f550f031df7ca40d063b95e12579690fa9be",
  "parents": [
    "d9959715554d7e3dfd9d2402964a582039499f22"
  ],
  "author": {
    "name": "krishna28238-arch",
    "email": "krishna28238@gmail.com",
    "time": "Fri Sep 25 21:46:09 2026 +0530"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Fri Sep 25 18:16:09 2026 +0200"
  },
  "message": "Return an error when tone mapping a gain map that was not decoded (#3377)\n\navifRGBImageApplyGainMap() dereferences gainMap-\u003eimage without checking\nit for null. With the default avifDecoder::imageContentToDecode, the\ngain map metadata is read but gainMap-\u003eimage is left null, so tone\nmapping a normally decoded image through avifImageApplyGainMap() crashes\n(null pointer dereference, CWE-476).\n\nReject a missing gain map image upfront, next to the other input\nvalidation, and return AVIF_RESULT_INVALID_ARGUMENT, as\navifRGBImageComputeGainMap() already does for the same situation. The\ngain map is then consistently rejected, including calls that would not\nneed its pixels (e.g. a target headroom equal to the base headroom).\n\n---------\n\nCo-authored-by: krishna28238-arch \u003ckrishna28238-arch@users.noreply.github.com\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1b3df43f19cd013584afcd68a635a38365deae5b",
      "old_mode": 33188,
      "old_path": "src/gainmap.c",
      "new_id": "a8d628855d5b34544db0af4bee8504382d714556",
      "new_mode": 33188,
      "new_path": "src/gainmap.c"
    },
    {
      "type": "modify",
      "old_id": "71f823471b0279409b1c6cb7504df69ae60f066e",
      "old_mode": 33188,
      "old_path": "tests/gtest/avifgainmaptest.cc",
      "new_id": "a26b8b3fb5ad26763897d83bbae8942ceb5e6885",
      "new_mode": 33188,
      "new_path": "tests/gtest/avifgainmaptest.cc"
    }
  ]
}