user_shaders: reject nonsense COMPONENTS values

N-R-K · kasper93 · commit 1bf50fc71cb4 · 2026-04-17T20:02:09.000+02:00
negative values in specific causes out of bound accesses.
diff --git a/video/out/gpu/user_shaders.c b/video/out/gpu/user_shaders.c
@@ -266,6 +266,10 @@ static bool parse_hook(struct mp_log *log, struct bstr *body,
                 mp_err(log, "Error while parsing COMPONENTS!\n");
                 return false;
             }
+            if (out->components < 0 || out->components > 4) {
+                mp_err(log, "Invalid COMPONENTS: %d\n", out->components);
+                return false;
+            }
             continue;
         }
 

Original file line number	Diff line number	Diff line change
`@@ -266,6 +266,10 @@ static bool parse_hook(struct mp_log log, struct bstr body,`
`266`	`266`	`mp_err(log, "Error while parsing COMPONENTS!\n");`
`267`	`267`	`return false;`
`268`	`268`	`}`
	`269`	`+ if (out->components < 0 \|\| out->components > 4) {`
	`270`	`+ mp_err(log, "Invalid COMPONENTS: %d\n", out->components);`
	`271`	`+ return false;`
	`272`	`+ }`
`269`	`273`	`continue;`
`270`	`274`	`}`
`271`	`275`