From bba9bf7e7e3d14092d97a4812382cbb88b565748 Mon Sep 17 00:00:00 2001
From: Zhao Zhili <zhilizhao@tencent.com>
Date: Wed, 1 Apr 2026 21:07:21 +0800
Subject: [PATCH] avcodec/libdav1d: fix null pointer dereference in LCEVC side
 data handling

ff_frame_new_side_data() may set sd to NULL and return 0 when
side_data_pref() determines that existing side data should be
preferred.

Signed-off-by: Zhao Zhili <zhilizhao@tencent.com>
---
 libavcodec/libdav1d.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavcodec/libdav1d.c b/libavcodec/libdav1d.c
index d9755a45b2..ae810b7abd 100644
--- a/libavcodec/libdav1d.c
+++ b/libavcodec/libdav1d.c
@@ -459,6 +459,8 @@ FF_ENABLE_DEPRECATION_WARNINGS
                                          bytestream2_get_bytes_left(&gb), &sd);
             if (res < 0)
                 return res;
+            if (!sd)
+                break;
 
             bytestream2_get_bufferu(&gb, sd->data, sd->size);
             break;