Import Debian changes 1.22.0-4+deb12u4

debian/changelog

+gst-plugins-bad1.0 (1.22.0-4+deb12u4) bookworm-security; urgency=medium
+
+  * GST-2023-0011
+
+ -- Moritz Mühlenhoff <jmm@debian.org>  Thu, 21 Dec 2023 00:04:36 +0100
+
 gst-plugins-bad1.0 (1.22.0-4+deb12u3) bookworm-security; urgency=high
 
   * Non-maintainer upload by the Security Team.

debian/patches/sa-2023-0011.patch

+https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/a46737a73155fe1c19fa5115df40da35426f9fb5
+
+--- gst-plugins-bad1.0-1.22.0.orig/gst-libs/gst/codecparsers/gstav1parser.h
++++ gst-plugins-bad1.0-1.22.0/gst-libs/gst/codecparsers/gstav1parser.h
+@@ -71,9 +71,8 @@ G_BEGIN_DECLS
+ #define GST_AV1_MAX_TILE_COUNT                 512
+ #define GST_AV1_MAX_OPERATING_POINTS    \
+   (GST_AV1_MAX_NUM_TEMPORAL_LAYERS * GST_AV1_MAX_NUM_SPATIAL_LAYERS)
+-#define GST_AV1_MAX_SPATIAL_LAYERS             2  /* correct? */
+-#define GST_AV1_MAX_TEMPORAL_GROUP_SIZE        8  /* correct? */
+-#define GST_AV1_MAX_TEMPORAL_GROUP_REFERENCES  8  /* correct? */
++#define GST_AV1_MAX_TEMPORAL_GROUP_SIZE        255
++#define GST_AV1_MAX_TEMPORAL_GROUP_REFERENCES  7
+ #define GST_AV1_MAX_NUM_Y_POINTS               16
+ #define GST_AV1_MAX_NUM_CB_POINTS              16
+ #define GST_AV1_MAX_NUM_CR_POINTS              16
+@@ -968,9 +967,9 @@ struct _GstAV1MetadataScalability {
+   gboolean spatial_layer_dimensions_present_flag;
+   gboolean spatial_layer_description_present_flag;
+   gboolean temporal_group_description_present_flag;
+-  guint16 spatial_layer_max_width[GST_AV1_MAX_SPATIAL_LAYERS];
+-  guint16 spatial_layer_max_height[GST_AV1_MAX_SPATIAL_LAYERS];
+-  guint8 spatial_layer_ref_id[GST_AV1_MAX_SPATIAL_LAYERS];
++  guint16 spatial_layer_max_width[GST_AV1_MAX_NUM_SPATIAL_LAYERS];
++  guint16 spatial_layer_max_height[GST_AV1_MAX_NUM_SPATIAL_LAYERS];
++  guint8 spatial_layer_ref_id[GST_AV1_MAX_NUM_SPATIAL_LAYERS];
+   guint8 temporal_group_size;
+ 
+   guint8 temporal_group_temporal_id[GST_AV1_MAX_TEMPORAL_GROUP_SIZE];
+--- gst-plugins-bad1.0-1.22.0.orig/gst/videoparsers/gstav1parse.c
++++ gst-plugins-bad1.0-1.22.0/gst/videoparsers/gstav1parse.c
+@@ -1271,7 +1271,7 @@ gst_av1_parse_handle_sequence_obu (GstAV
+   }
+ 
+   val = (self->parser->state.operating_point_idc >> 8) & 0x0f;
+-  for (i = 0; i < (1 << GST_AV1_MAX_SPATIAL_LAYERS); i++) {
++  for (i = 0; i < GST_AV1_MAX_NUM_SPATIAL_LAYERS; i++) {
+     if (val & (1 << i))
+       self->highest_spatial_id = i;
+   }

debian/patches/series

@@ -6,3 +6,4 @@ mxfdemux-Fix-integer-overflow-causing-out-of-bounds-.patch
 mxfdemux-Check-number-of-channels-for-AES3-audio.patch
 codecparsers-av1-Clip-max-tile-rows-and-cols-values.patch
 mxfdemux-Store-GstMXFDemuxEssenceTrack-in-their-own-.patch
+sa-2023-0011.patch