{"object_kind":"push","event_name":"push","before":"2c2808fab1ae27284b51cfabe644836f5b4a93f9","after":"b8e29d471b053f97b61c9639ba75ed084df77faa","ref":"refs/heads/master","ref_protected":true,"checkout_sha":"b8e29d471b053f97b61c9639ba75ed084df77faa","message":null,"user_id":3060,"user_name":"Wim Taymans","user_username":"wtaymans","user_email":"","user_avatar":"https://secure.gravatar.com/avatar/ee99737f7492c79c3a9be75f2e2437f2c944c95fca1480fafcd7ce3bf8c85784?s=80&d=identicon","project_id":4753,"project":{"id":4753,"name":"pipewire","description":"Multimedia processing graphs","web_url":"https://gitlab.freedesktop.org/pipewire/pipewire","avatar_url":"https://gitlab.freedesktop.org/uploads/-/system/project/avatar/4753/pipewire.png","git_ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","git_http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git","namespace":"PipeWire","visibility_level":20,"path_with_namespace":"pipewire/pipewire","default_branch":"master","ci_config_path":"","homepage":"https://gitlab.freedesktop.org/pipewire/pipewire","url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git"},"commits":[{"id":"5bfc3e6b038ac4ec9de604bd10717bdef8b41915","message":"spa: v4l2: avoid integer wraparound to out of bounds read\n\nI'm not sure if untrusted input can reach this point.\n","title":"spa: v4l2: avoid integer wraparound to out of bounds read","timestamp":"2025-07-15T10:13:17+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/5bfc3e6b038ac4ec9de604bd10717bdef8b41915","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["spa/plugins/v4l2/v4l2-utils.c"],"removed":[]},{"id":"7ac94f1a69609db6362b8dd29f70b83ec086e972","message":"pod: ensure strings are NUL-terminated before calling strlen()\n\nSPA_TYPE_String needs to be NUL-terminated, so check that in\nspa_pod_compare_value().\n","title":"pod: ensure strings are NUL-terminated before calling strlen()","timestamp":"2025-07-15T10:13:17+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/7ac94f1a69609db6362b8dd29f70b83ec086e972","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["spa/include/spa/pod/compare.h"],"removed":[]},{"id":"fb315b905062149083ea6572d9a50d145e88a74e","message":"*: Missing bounds checks in POD handling\n\nThere were missing bounds checks for ill-formed POD all over the place.\n","title":"*: Missing bounds checks in POD handling","timestamp":"2025-07-15T10:13:17+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/fb315b905062149083ea6572d9a50d145e88a74e","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["spa/include/spa/debug/format.h","spa/include/spa/pod/compare.h","spa/include/spa/pod/simplify.h","spa/plugins/videoconvert/videoconvert-ffmpeg.c","src/modules/module-protocol-pulse/collect.c","src/modules/module-protocol-pulse/format.c","src/tools/pw-dump.c"],"removed":[]},{"id":"edef57f6c3bfc74148164ab2760cd68982183a73","message":"pod: avoid modulo by 0\n\na % b is undefined behavior if b is 0.\n","title":"pod: avoid modulo by 0","timestamp":"2025-07-15T10:13:18+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/edef57f6c3bfc74148164ab2760cd68982183a73","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["spa/include/spa/pod/compare.h"],"removed":[]},{"id":"d37bdf5cbf8a72ec046eca70076cc2787491ffb8","message":"pod: check for NULL strings in tag utils\n\nSPA_POD_String allows SPA_TYPE_None PODs and turns them to NULL, so\ncheck for them.\n","title":"pod: check for NULL strings in tag utils","timestamp":"2025-07-15T10:13:18+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/d37bdf5cbf8a72ec046eca70076cc2787491ffb8","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["spa/include/spa/param/tag-utils.h"],"removed":[]},{"id":"b04da87e380080dc568d7646d910011245c260a9","message":"pod: check that choices are not empty\n\nBefore using the contents of a choice, check that it is not empty to\navoid reading out of bounds.\n","title":"pod: check that choices are not empty","timestamp":"2025-07-15T10:13:18+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/b04da87e380080dc568d7646d910011245c260a9","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["pipewire-v4l2/src/pipewire-v4l2.c","spa/include/spa/debug/format.h","spa/include/spa/pod/compare.h","spa/include/spa/pod/filter.h","spa/include/spa/pod/simplify.h","spa/plugins/videoconvert/videoconvert-ffmpeg.c","spa/tests/benchmark-pod.c"],"removed":[]},{"id":"b8e29d471b053f97b61c9639ba75ed084df77faa","message":"module-rtp: Fix bounds checks in MIDI parsing\n\nThese are potential security problems.\n","title":"module-rtp: Fix bounds checks in MIDI parsing","timestamp":"2025-07-15T10:46:10+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/b8e29d471b053f97b61c9639ba75ed084df77faa","author":{"name":"Demi Marie Obenour","email":"demiobenour@gmail.com"},"added":[],"modified":["src/modules/module-rtp/midi.c","src/modules/module-rtp/rtp.h"],"removed":[]}],"total_commits_count":7,"push_options":{},"repository":{"name":"pipewire","url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","description":"Multimedia processing graphs","homepage":"https://gitlab.freedesktop.org/pipewire/pipewire","git_http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git","git_ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","visibility_level":20}}