ec30f20 (Mar 2026) fixed a u32 multiplication overflow in SeqParameterSet::pic_size_in_map_units(). v0.8.0 on crates.io still ships the unpatched code — debug builds panic, release builds silently wrap.
Surfaced by libFuzzer on a downstream consumer. Would you consider cutting a patch release (0.8.1) so we don't have to route via [patch.crates-io] to pick up the fix?
I've prepared a regression test that verifies the fix; happy to open a PR with it if useful (or fold it into a release-prep PR).
ec30f20(Mar 2026) fixed au32multiplication overflow inSeqParameterSet::pic_size_in_map_units().v0.8.0on crates.io still ships the unpatched code — debug builds panic, release builds silently wrap.Surfaced by libFuzzer on a downstream consumer. Would you consider cutting a patch release (
0.8.1) so we don't have to route via[patch.crates-io]to pick up the fix?I've prepared a regression test that verifies the fix; happy to open a PR with it if useful (or fold it into a release-prep PR).