| d55059d | Michael Niedermayer | 21 March 2014, 04:53:28 UTC | update for 0.9.4 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 04:53:28 UTC |
| 3926ebc | Michael Niedermayer | 10 January 2013, 23:54:12 UTC | vorbisdec: Check bark_map_size. This fixes potential divisions by zero and out of array accesses. Reported-by: Dale Curtis <dalecurtis@chromium.org> Found-by: inferno@chromium.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2c16bf2de07c68513072bf3cc96401d2c6291a3e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 85162a6 | Michael Niedermayer | 18 February 2014, 01:53:14 UTC | avcodec/snow: split block clipping checks Fixes out of array read Fixes: d4476f68ca1c1c57afbc45806f581963-asan_heap-oob_2266b27_8607_cov_4044577381_snow_chroma_bug.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 61d59703c91869f4e5cdacd8d6be52f8b89d4ba4) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 573d5fd | Michael Niedermayer | 16 February 2014, 22:08:52 UTC | avcodec/msrle: use av_image_get_linesize() to calculate the linesize Fixes out of array access Fixes: 14a74a0a2dc67ede543f0e35d834fbbe-asan_heap-oob_49572c_556_cov_215466444_44_001_engine_room.mov Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit c919e1ca2ecfc47d796382973ba0e48b8f6f92a2) Conflicts: libavcodec/msrle.c (cherry picked from commit bc1c8ec5e65098fd2ccd8456f667151dfc9cda42) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| d234e1d | Michael Niedermayer | 13 February 2014, 12:59:51 UTC | avformat/mpegtsenc: Check data array size in mpegts_write_pmt() Prevents out of array writes Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 842b6c14bcfc1c5da1a2d288fd65386eb8c158ad) Conflicts: libavformat/mpegtsenc.c (cherry picked from commit e87de3f50b765134588d0b048c32ed4b8acc16fb) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 954ce59 | Michael Niedermayer | 07 February 2014, 14:07:23 UTC | avcodec/wmalosslessdec: fix mclms_coeffs* array size Fixes corruption of context Fixes: 8835659dde6a4f7dcdf341de6a45c6c8-signal_sigsegv_1dce67b_4564_cov_2504444599_classical_22_16_1_14000_v3c_0_extend_0_29.wma Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ec9578d54d09b64bf112c2bf7a34b1ef3b93dbd3) Conflicts: libavcodec/wmalosslessdec.c (cherry picked from commit 5d683807be71002a6c3facef3e26350762a760e2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 356f863 | Michael Niedermayer | 14 April 2012, 12:49:22 UTC | wmalosslessdec: make mclms arrays big enough for whats written into them. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a0abefb0af64a311b15141062c77dd577ba590a3) Conflicts: libavcodec/wmalosslessdec.c | 21 March 2014, 03:23:59 UTC |
| 605c3f0 | Michael Niedermayer | 01 February 2014, 18:04:37 UTC | avcodec/vc1: reset fcm/field_mode in non advanced header parsing Fixes NULL pointer dereference Fixes: signal_sigsegv_1ab8bf4_2847_cov_4254117347_SA10091.vc1 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b51e9354772de446e8196dabf9aad1567b22f74d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| e0f351a | Michael Niedermayer | 20 January 2014, 17:08:18 UTC | avcodec/vmnc: Check that rectangles are within the picture Prevents out of array accesses with CODEC_FLAG_EMU_EDGE Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6ba02602aa7fc7d38db582e75b8b093fb3c1608d) Conflicts: libavcodec/vmnc.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7c17207ab9acfaa934e8feb8fba90765c9d0b989) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| c44ac4d | Michael Niedermayer | 17 January 2014, 19:09:48 UTC | dnxhdenc: fix mb_rc size Fixes out of array access with RC_VARIANCE set to 0 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f1caaa1c61310beba705957e6366f0392a0b005b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 84e1aa7 | Michael Niedermayer | 30 October 2013, 22:27:28 UTC | avcodec/jpeglsdec: check err value for ls_get_code_runterm() Fixes infinite loop Fixes Ticket3086 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit cc0e47b55096361723b364afa43b79a3f5619cdc) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| ea23dcc | Michael Niedermayer | 21 October 2013, 14:21:14 UTC | avfilter/ff_insert_pad: fix order of operations Fixes out of bounds access Fixes CID732170 Fixes CID732169 No filter is known to use this function in a way so the issue can be reproduced. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ab2bfb85d49b2f8aa505816f93e75fd18ad0a361) Conflicts: libavfilter/avfilter.c (cherry picked from commit 86591b244f3a27293153896813f5569b49b2f5c0) Conflicts: libavfilter/avfilter.c (cherry picked from commit 400c4f8fa3fd58951dc3f356b2b00484e3363694) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 87d335c | Michael Niedermayer | 26 September 2013, 19:03:48 UTC | avcodec/parser: reset indexes on realloc failure Fixes Ticket2982 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f31011e9abfb2ae75bb32bc44e2c34194c8dc40a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 21 March 2014, 03:23:59 UTC |
| 320df1c | Martin Storsjö | 20 December 2013, 13:02:35 UTC | arm: Don't clobber callee saved registers in scalarproduct q4-q7/d8-d15 are supposed to not be clobbered by the callee. CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit d307e408d4a9ada22df443cc38be77cc5e492694) | 21 December 2013, 09:00:28 UTC |
| b6f5a54 | Michael Niedermayer | 26 October 2013, 23:03:19 UTC | avformat/utils: do not override pts in h264 when they are provided from the demuxer Fixes Ticket2143 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1e5271a9fd6ddcceb083f2185a4bbd8d44c9a813) | 27 October 2013, 18:54:37 UTC |
| ff3e385 | Michael Niedermayer | 25 October 2013, 18:03:29 UTC | avcodec/h264: reduce noisiness of "mmco: unref short failure" Do not consider it an error if we have no frames and should discard one. This condition can easily happen when decoding is started from an I frame Fixes Ticket2811 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 08a89761964bdd0a023eff6d37a1131fb7e1d7a0) Conflicts: libavcodec/h264_refs.c | 25 October 2013, 23:29:28 UTC |
| 1b3803e | Michael Niedermayer | 09 October 2013, 21:52:54 UTC | avcodec/h264_refs: modify key frame detection heuristic to detect more cases Fixes Ticket2968 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5ac6b6028f17b64723884c9fa72cfcbd369a1ba2) Conflicts: libavcodec/h264_refs.c | 24 October 2013, 09:52:05 UTC |
| dae552f | Michael Niedermayer | 22 September 2013, 22:08:48 UTC | cmdutils: update year to 2013 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 22:08:48 UTC |
| 5198623 | Michael Niedermayer | 22 September 2013, 20:35:52 UTC | update for 0.9.3 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 22:02:30 UTC |
| a638894 | Michael Niedermayer | 09 September 2013, 15:58:18 UTC | avcodec/ffv1enc: update buffer check for 16bps Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3728603f1854b5c79d1a64dd3b41b80640ef1e7f) Conflicts: libavcodec/ffv1enc.c (cherry picked from commit c900c6e5c26cd86cf34f9c8d4347cedbd01f3935) | 22 September 2013, 22:02:30 UTC |
| a62852b | Michael Niedermayer | 30 August 2013, 21:40:47 UTC | avcodec/dsputil: fix signedness in sizeof() comparissions Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 454a11a1c9c686c78aa97954306fb63453299760) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 22:02:30 UTC |
| 40d4e82 | Michael Niedermayer | 30 August 2013, 21:14:32 UTC | avcodec/pngdsp: fix (un)signed type in end comparission Fixes out of array accesses Fixes Ticket2919 Found_by: ami_stuff Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 86736f59d6a527d8bc807d09b93f971c0fe0bb07) Conflicts: libavcodec/pngdsp.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 22:02:30 UTC |
| 14f140f | Michael Niedermayer | 20 May 2013, 02:00:30 UTC | matroska_read_seek: Fix used streams for subtitle index compensation Might fix Ticket1907 (I have no testcase so i cant test) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4758e32a6c48044f77102a49110c79b4f338f648) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| a4b4be7 | Michael Niedermayer | 24 August 2013, 01:19:40 UTC | jpeg2000: check log2_cblk dimensions Fixes out of array access Fixes Ticket2895 Found-by: Piotr Bandurski <ami_stuff@o2.pl> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9a271a9368eaabf99e6c2046103acb33957e63b7) Conflicts: libavcodec/jpeg2000dec.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Conflicts: libavcodec/j2kdec.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| 4490b3d | Michael Niedermayer | 21 August 2013, 23:07:32 UTC | avcodec/rpza: Perform pointer advance and checks before using the pointers Fixes out of array accesses Fixes Ticket2850 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3819db745da2ac7fb3faacb116788c32f4753f34) Conflicts: libavcodec/rpza.c | 22 September 2013, 20:52:12 UTC |
| edb4aad | Michael Niedermayer | 20 August 2013, 21:18:48 UTC | avcodec/flashsv: check diff_start/height Fixes out of array accesses Fixes Ticket2844 Found-by: ami_stuff Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 880c73cd76109697447fbfbaa8e5ee5683309446) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| e4ad9e9 | Michael Niedermayer | 29 June 2013, 17:48:17 UTC | update all trac links to use the trac subdomain Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| de2eb6d | Michael Niedermayer | 17 March 2013, 23:00:02 UTC | rmdec: flush audio packet on seeking Fixes Ticket1605 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 519ebb5ee5b89b8ecc80b4a4540fcbeb65cda172) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| 50b2601 | Michael Niedermayer | 13 February 2013, 02:32:23 UTC | doc/APIchanges: List merge commit hashes and version numbers Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| c681cf3 | Michael Niedermayer | 14 February 2013, 20:13:32 UTC | apichanges: fix 2 wrong hashes Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2f3bc5122822687dc388f7352c92cf6db456cf7c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| 32a8162 | Diego Biurrun | 14 January 2013, 19:38:33 UTC | configure: Make warnings from -Wreturn-type fatal errors These warnings have no false positives and point to serious bugs. (cherry picked from commit 99853cb8d4237b810b2fffb4a34f66fd0064ef72) Conflicts: configure Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| 21dd8f5 | Michael Niedermayer | 29 January 2013, 18:22:33 UTC | huffyuvdec: Skip len==0 cases Fixes vlc decoding for hypothetical files that would contain such cases. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0dfc01c2bbf4b71bb56201bc4a393321e15d1b31) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5ff41ffeb4cb9ea6df49757dc859619dc3d3ab4f) Conflicts: libavcodec/huffyuv.c (cherry picked from commit 9bc70fe1ae50fd2faa0b9429d47cfbda01a92ebc) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:52:12 UTC |
| 03e2e95 | Michael Niedermayer | 29 January 2013, 17:29:41 UTC | huffyuvdec: Check init_vlc() return codes. Prevents out of array writes Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f67a0d115254461649470452058fa3c28c0df294) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 95ab8d33e1a680f30a5a9605175112008ab81afc) Conflicts: libavcodec/huffyuv.c (cherry picked from commit 277def59fce10d91e3113e5c0f63e22bc4abfa88) Conflicts: libavcodec/huffyuv.c | 22 September 2013, 20:52:12 UTC |
| 8c0261d | Xi Wang | 23 January 2013, 02:40:05 UTC | rtmp: fix buffer overflows in ff_amf_tag_contents() A negative `size' will bypass FFMIN(). In the subsequent memcpy() call, `size' will be considered as a large positive value, leading to a buffer overflow. Change the type of `size' to unsigned int to avoid buffer overflow, and simplify overflow checks accordingly. Signed-off-by: Xi Wang <xi.wang@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4e692374f7962ea358c329de38c380103f8991b6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:34:14 UTC |
| 4b7036c | Xi Wang | 22 January 2013, 22:49:29 UTC | rtmp: fix multiple broken overflow checks Sanity checks like `data + size >= data_end || data + size < data' are broken, because `data + size < data' assumes pointer overflow, which is undefined behavior in C. Many compilers such as gcc/clang optimize such checks away. Use `size < 0 || size >= data_end - data' instead. Signed-off-by: Xi Wang <xi.wang@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 902cfe2f74d777a7dc20ac68f2393b9f84b790c1) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 22 September 2013, 20:34:14 UTC |
| cf701b0 | Michael Niedermayer | 31 August 2013, 01:08:25 UTC | avformat/avidec: match first index and first packet size=0 handling Fixes Ticket2861 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 227a0eb5a92409572f2cecde6137529b83e7d495) Conflicts: libavformat/avidec.c | 31 August 2013, 07:31:37 UTC |
| d0a225d | Michael Niedermayer | 08 July 2013, 19:46:20 UTC | mpeg12dec: avoid reinitialization on PS changes when possible. Fixes Ticket2574 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 970c8df73528659925819dec31c4c8c0887f0321) Conflicts: libavcodec/mpeg12dec.c | 08 July 2013, 22:55:55 UTC |
| d6641c0 | Michael Niedermayer | 05 July 2013, 01:27:07 UTC | mpegts: only reopen pmt_cb filter if its different from the previous. Fixes Ticket2632 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b009267910df10c004b5f340a090d45da29089a0) | 07 July 2013, 17:01:35 UTC |
| 0ca658a | Michael Niedermayer | 01 July 2013, 21:38:08 UTC | rmdec: Pass AVIOContext to rm_read_metadata() Fix null pointer dereference Fixes Ticket2588 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit bf87908cd8da31e8f8fe75c06577170928ea70a8) Conflicts: libavformat/rmdec.c | 07 July 2013, 17:01:25 UTC |
| 340c184 | Michael Niedermayer | 20 June 2013, 23:11:45 UTC | avformat/libmodplug: Reduce the probe score for small input This ensures that theres enough data for mpeg_probe() to recognize mpeg-ps Fixes Ticket2583 Based on code by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit c605adbf562fbf535e83ae427bb681bc45e440c8) | 20 June 2013, 23:19:33 UTC |
| ffe831f | Carl Eugen Hoyos | 19 June 2013, 14:31:10 UTC | Autodetect idcin only if audio properties allow decoding. Fixes ticket #2688. (cherry picked from commit 06bede95fcea47d2e51e8ff248c15311f335b898) | 19 June 2013, 21:49:26 UTC |
| 92abb12 | Michael Niedermayer | 12 June 2013, 22:01:13 UTC | alacenc: Fix missing sign_extend() Fixes ticket #2497 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 8aea2f05dc56f7e7d60767dd27ba8e846a05e8ae) | 12 June 2013, 22:17:43 UTC |
| 8e7e12d | Michael Niedermayer | 30 May 2013, 16:30:42 UTC | h264_cavlc: fix reading skip run Fixes Ticket2606 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 826b3a75cd295c03720e00d3de83e1abcbedd4b9) Conflicts: libavcodec/h264_cavlc.c | 30 May 2013, 21:30:43 UTC |
| 0147e9f | Michael Niedermayer | 20 May 2013, 19:42:06 UTC | smacker: remove av_clip_int16() Fixes Ticket2425 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2211c76287e073a9e176fde7dbb9a63ceb2af8d1) | 20 May 2013, 22:14:34 UTC |
| b22cc0c | Michael Niedermayer | 17 May 2013, 20:03:14 UTC | avidec: dont randomly skip packets for offseting the index Fixes Ticket2490 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6c593f1b671b7725b8c36f92f7c0a23ccf8e7628) | 17 May 2013, 21:00:16 UTC |
| 6642804 | Carl Eugen Hoyos | 05 May 2013, 17:29:00 UTC | Fix type of shared flac table ff_flac_blocksize_table[]. Fixes ticket #2533. (cherry picked from commit a07ac1f7888fd08e42da2bed0421e74f1cfac177) | 05 May 2013, 18:39:38 UTC |
| 38cd7f6 | Carl Eugen Hoyos | 30 March 2013, 07:41:46 UTC | Write broken aac frames to mov files instead of skipping them. Fixes decoding with picky media players. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b448c0a68d0cc7dfef736267dfdaed0e213c020b) Conflicts: libavformat/movenc.c | 02 April 2013, 10:57:35 UTC |
| 402bc31 | Carl Eugen Hoyos | 26 March 2013, 14:16:07 UTC | Only test the first frame for missing aac_adtstoasc bistream filter. Many players ignore broken aac frames, so don't abort mov or flv muxing when encountering one, just print a warning instead. Fixes ticket #2380. (cherry picked from commit 1741fece7073f51efdd837a4f307ea2cdf3d1cfb) Conflicts: libavformat/flvenc.c libavformat/movenc.c | 27 March 2013, 00:09:02 UTC |
| 8b59707 | Carl Eugen Hoyos | 16 March 2013, 19:13:44 UTC | Do not (re-)set libx264 parameter b_tff if interlaced encoding was not requested. Reconfiguring can break x264 lossless encoding. Fixes ticket #2165. (cherry picked from commit 75c7e4583f4fd727d236a12763a265502fe00988) | 18 March 2013, 01:23:20 UTC |
| dcdeeea | Carl Eugen Hoyos | 02 February 2013, 21:36:25 UTC | Require at least three frames to autodetect loas. (cherry picked from commit a60530e3ee1d9532c026a52b03661f88e163d647) | 02 March 2013, 01:05:27 UTC |
| cbadebd | Nicolas George | 27 February 2013, 18:19:15 UTC | lavf/avio: check for : in filenames for protocols. If the first "special" character in a filename is a comma, it can introduce protocol options, but only if there is a colon at the end. Otherwise, it is just a filename with a comma. Fix trac ticket #2303. (cherry picked from commit d9fad53f4b447db1e436dcf3fc4a57e604616e6c) | 01 March 2013, 08:01:56 UTC |
| 9f0bf48 | Michael Niedermayer | 06 February 2013, 00:25:52 UTC | ffmpeg: dont allow -flags to override -pass Fixes Ticket2154 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ccf9dd00da055e94117b56cead4af80ff331b00e) Conflicts: ffmpeg_opt.c | 06 February 2013, 09:29:50 UTC |
| 9103d77 | Carl Eugen Hoyos | 24 January 2013, 01:30:40 UTC | matroskaenc: add codec_tag lists back. This reverts 312645e : "Do not set codec_tag property for matroska muxers." Also adds dummy codec_tag lists with codecs supported in mkv but not in wav / avi. Fixes ticket #2169. (cherry picked from commit df39c3ce385c02cbd8046298578ea7454c0a0f81) Conflicts: libavformat/matroskaenc.c | 24 January 2013, 01:46:38 UTC |
| 8b48e2c | Piotr Bandurski | 06 January 2013, 00:56:23 UTC | tiffdec: Use the correct height field. Fixes Ticket913 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4784a135b2b0fe4d1b4c6256bd37265fc45aed3d) Conflicts: libavcodec/tiff.c | 06 January 2013, 23:38:13 UTC |
| 42abae1 | Clément Bœsch | 30 December 2012, 05:53:48 UTC | lavc/ass_split: check for NULL pointer in ff_ass_split_override_codes(). This is consistent with the other ff_ass_split_* functions. It also fixes a crash when trying to split a dialog with text=NULL (which seems to happen when the text of the dialog is empty); basically, this commit fixes crashes when trying to encode an empty text subtitle dialog (see subrip and mov_text encoders). Fixes Ticket2048. (cherry picked from commit c83002a4f8042ccfa0688a9a18e8fa0369c1fda8) | 01 January 2013, 17:23:54 UTC |
| 436c011 | Michael Niedermayer | 22 November 2012, 22:08:01 UTC | avidec: try to support oddly muxed MMES stream Fixes ticket1804 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit be89693ddc5a8cdeaf3edf48fb584d6adca54de0) | 09 December 2012, 23:58:35 UTC |
| ec6271c | Michael Niedermayer | 23 November 2012, 22:35:16 UTC | riff: ignore ff_read_riff_info() failure. Some files simply contain invalid info tags. Fixes unrelated bug posted into Ticket1821 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 09456d0df13404f004ab3a341d9ac21b7e5e6d6d) | 09 December 2012, 23:50:06 UTC |
| 455b98b | Michael Niedermayer | 18 October 2012, 02:58:20 UTC | riff: retry reading metadata without padding if it fails with Fixes Ticket1821 Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d0c27e88d2bb495d61bd32f41769f767a0c2a802) | 09 December 2012, 23:50:04 UTC |
| e9aeab3 | jamal | 03 August 2012, 20:13:27 UTC | build: Fix some paths in uninstall-libs Folder and file names weren't being separated with a slash. This resulted in .dll.a, .lib and .def files not being removed on uninstall. Signed-off-by: Alexander Strasser <eclipse7@gmx.net> (cherry picked from commit 49440853d0c1e740daee0e2df1e65d5e67b1ad6b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 14 September 2012, 12:19:46 UTC |
| f7d7b01 | Carl Eugen Hoyos | 12 September 2012, 11:08:27 UTC | Fix muxing mjpeg in swf. (cherry picked from commit 7680d99b4302e476076cc1b8f2567f47c2aaef4d) | 13 September 2012, 07:22:09 UTC |
| 3c3ee65 | Ronald S. Bultje | 24 June 2012, 10:17:13 UTC | dxva2: include dxva.h if found Apparently, some build environments require dxva.h even for dxva2, while others lack this header entirely. Including it conditionally allows building in both cases. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit fa84506177f0246b30d4ea6a99ee5d419f3e4550) Conflicts: configure Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 13 September 2012, 02:44:19 UTC |
| f6ebfeb | Carl Eugen Hoyos | 31 August 2012, 12:17:18 UTC | Clarify that -passlogfile has a different syntax when used with -vcodec libx264. | 31 August 2012, 12:17:18 UTC |
| 5d6982c | Michael Niedermayer | 31 March 2012, 19:42:50 UTC | indeo4: check that num_mbs matches Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d3db8988d5befd8702a748cf1957415677bfe75c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:31:07 UTC |
| e11fa08 | Michael Niedermayer | 17 March 2012, 19:45:45 UTC | dsp: fix diff_bytes_mmx() with small width Fixes Ticket1068 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 73089eccd3e48539555349b36d8aabbf1cea416e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:27:33 UTC |
| 4702154 | Michael Niedermayer | 02 May 2012, 23:27:16 UTC | update for 0.9.2 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:27:16 UTC |
| e390a9d | Janne Grunau | 05 January 2012, 21:12:35 UTC | electronicarts: check bytes per sample for validity Prevents division by zero. | 02 May 2012, 23:23:02 UTC |
| e70d202 | Michael Niedermayer | 22 March 2012, 22:43:37 UTC | vqavideodev: Check image dimensions Fixes out of heap array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3583c8706df0abbfa3ecdd6730f4f3d72a01fe6d) Independently-Found-by: Fabian Yamaguchi Fixes: CVE-2012-0947 Conflicts: libavcodec/vqavideo.c | 02 May 2012, 22:29:18 UTC |
| 9de0c8c | Michael Niedermayer | 16 March 2012, 14:10:33 UTC | sonic: update to new API Fixes Ticket1075 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6f9803e5e02c557e1003cface9f3084a7e1e43e4) Conflicts: libavcodec/sonic.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 22:28:35 UTC |
| db041fd | Michael Niedermayer | 03 March 2012, 02:37:52 UTC | qpeg: Fix out of array writes. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 22:28:35 UTC |
| 7a87741 | Fabian Greffrath | 03 March 2012, 01:35:27 UTC | srtdec: fix a format string vulnerability. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit aaa1173de775b9b865a714abcc270816d2f59dff) | 02 May 2012, 22:28:35 UTC |
| cf9b04c | ami_stuff | 22 March 2012, 18:28:52 UTC | Replace SSE2 instruction in scalarproduct_float_sse() by SSE equivalent. Fixes an AAC decoding issue with the sample from ticket #213 on machines with SSE but without SSE2. Based on 89411a by Reimar. (cherry picked from commit f6b78638086beae9bcab672d4c9de1790be5a928) | 04 April 2012, 07:16:02 UTC |
| 5667eaf | Stefano Sabatini | 28 March 2012, 22:17:23 UTC | lavfi/fade: fix black level for non studio-level pixel formats Fix trac ticket #1139, regression introduced in 8c1fb50d077d5f954. (cherry picked from commit 95ce0ddcfe99182365e0e57f5f41d7f1a01c57eb) | 04 April 2012, 06:45:16 UTC |
| 89f2d6c | Michael Niedermayer | 04 April 2012, 01:43:23 UTC | h264: fix seeking in low delay streams without IDR Fixes Ticket1165 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3360b8517a1f478c4102072e5eadd8ba78be0538) | 04 April 2012, 06:41:14 UTC |
| 32a79b5 | Franz Brauße | 30 March 2012, 18:40:14 UTC | smacker audio: sign-extend the initial 16-bit predicted value Fixes Bug #265 Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 12cbbbb4abda2de0ea123282ccf7ebee61517f7d) | 01 April 2012, 12:00:13 UTC |
| 515b7f0 | Tomas Härdin | 20 March 2012, 10:03:48 UTC | mxfdec: Only parse next partition pack if parsing forward This fixes ticket #1099. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 393b81f0934866bd7fff0a2b113623dd9ee6808f) | 21 March 2012, 12:26:13 UTC |
| 63945e2 | Michael Niedermayer | 16 January 2012, 21:26:52 UTC | indeo4: fix LE reader define for backport Fixes Ticket920 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 16 January 2012, 21:26:52 UTC |
| ad6eefc | Carl Eugen Hoyos | 12 January 2012, 15:53:42 UTC | Fix compilation with yasm-0.6.2. | 12 January 2012, 15:53:42 UTC |
| 601e648 | Michael Niedermayer | 05 January 2012, 02:00:56 UTC | Update for 0.9.1 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 02:02:35 UTC |
| e540446 | John Brooks | 11 December 2011, 09:37:21 UTC | vc1dec: fix invalid memory access for small video dimensions For small video dimensions, these calculations of the upper bound for pixel access may have a negative result. Using an unsigned comparison to bound a potentially negative value only works if the greater operand is non-negative. Fixed by doing edge emulation when the upper bound is probably negative, everywhere that this pattern appears. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com> (cherry picked from commit d209c27b09234cc40bbdbd680aa502b493edf595) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 01:23:08 UTC |
| fc9c5ad | John Brooks | 04 January 2012, 06:27:35 UTC | rv34: fix invalid memory access for small video dimensions For small video dimensions calculations of the upper bound for pixel access may result in negative value. Using an unsigned comparison works only if the greater operand is non-negative. This is fixed by doing edge emulation explicitly for such conditions. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com> (cherry picked from commit aacf6b3a2fd8bc8603e3deaa6e612ea03cf08707) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 01:23:02 UTC |
| 68f1212 | Michael Niedermayer | 04 January 2012, 23:51:12 UTC | Revert "rmdec: Avoid allocating huge packets" This reverts commit 66f71f3b5e2e7b6e5049bd9831c371e16aff8a53. This causes regressions with RDT. (cherry picked from commit c4eec85a1fa768025f88261995af08f1dba9685d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:13 UTC |
| 0a5bca9 | Michael Niedermayer | 04 January 2012, 23:49:02 UTC | lavf: use avg_frame_rate and packet number to exit find_stream_info qatar does this too but clobbers the AVPacket.duration by approximate values. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ad8e3304f701820f927527d8f0d11679738636df) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:12 UTC |
| 0f61521 | Michael Niedermayer | 04 January 2012, 23:22:19 UTC | lavf: revert commit bb99ae3ae924c942a634bec7711ec7ee11c38eb9 Author: Michael Niedermayer <michaelni@gmx.at> Date: Thu Nov 3 22:38:10 2011 +0100 lavf: fix null pointer dereference in rdt Signed-off-by: Michael Niedermayer <michaelni@gmx.at> This is no longer needed and causes various problems with RTSP Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1171d938af219aa1217a472391bc392f6e698386) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:11 UTC |
| 58afa73 | Michael Niedermayer | 04 January 2012, 20:55:52 UTC | vorbis: make sure ch is non zero before calling vorbis_residue_decode This possibly makes part of the CVE-2011-3895 fix unneeded. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ff7f198d7f9504f71676327be0be47661cfe39d6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:02 UTC |
| 68ee434 | Chris Evans | 04 January 2012, 20:53:35 UTC | vorbis: An additional defense in the Vorbis codec. BUG=101458 Review URL: http://codereview.chromium.org/8414025 Fixes second part of CVE-2011-3895 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f74ce3a60d6ef49080df85c44b54280357109f56) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:00 UTC |
| 80440c5 | Chris Evans | 04 January 2012, 20:51:18 UTC | vorbis: Fix decoder bug. BUG=101458 Review URL: http://codereview.chromium.org/8413019 This fixes part of 2011-3895 bigned-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 68226ed9ecef675895dc55a0c58d587014639a0e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:00 UTC |
| 89bd49b | Michael Niedermayer | 04 January 2012, 18:22:20 UTC | vorbisdec: Make sure blocksize is not set to an invalid value. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 405e99bdfdb363e8dfda275faad9d4fdc9646434) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:59 UTC |
| d7e5301 | Michael Niedermayer | 04 January 2012, 16:29:34 UTC | vorbis: Fix last quarter of CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:58 UTC |
| 6a3fed8 | Chris Evans | 04 January 2012, 16:24:15 UTC | ogg: Avoid the possibility to read out-of-bounds of a static global array in Vorbis decoding. BUG=100543 Review URL: http://codereview.chromium.org/8365014 This fixes 25% of CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7149fce2cac0474a5fbc5b47add1158cd8bb283e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:56 UTC |
| 49b8709 | Chris Evans | 04 January 2012, 15:33:34 UTC | mkv: Fix a bug where a pointer was cached to an array that might later move due to a realloc() BUG=100492 Review URL: http://codereview.chromium.org/8366004 Fixes: 1 of 2 for CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f35e037c93cf7d25e65b4a2ed3674358f05e4bed) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:55 UTC |
| 1bd1103 | Philippe Saint-Pierre | 04 January 2012, 20:00:06 UTC | Fix possible infinite loop decoding als. Reviewed-by: Thilo Borgmann (cherry picked from commit f0f2babca23a3d099bcd5a1e18cf5d0eae2f4ef3) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:53 UTC |
| 66569b3 | Michael Niedermayer | 03 January 2012, 05:53:18 UTC | jpegdec: Fix vlc table check for progressive jpegs. Fixes Ticket834 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 15b219fae9da1691dfb264f51637805e1ca63d1a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 9f9b638 | Michael Niedermayer | 04 January 2012, 03:02:22 UTC | electronicarts: Pass error through ea_read_header(). Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f37174bc1913d534913e8825f1609a637cc4b364) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 32b62c7 | Oana Stratulat | 04 January 2012, 01:13:27 UTC | electronicarts: Fix division by zero. Fixes Ticket #793 Signed-off-by: Oana Stratulat <oanaandreeastratulat@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0d3a51e5d279dd2a56c81ba7a81a70128c5a7545) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 9f561ec | Carl Eugen Hoyos | 04 January 2012, 19:34:45 UTC | Revert "wavpack: Clip samples after shifting" This reverts commit 8d055e9079f151f13d34e8e04f4aa7ca0273c448. The original commit introduced ticket #871, do not import the problem into the release branch. | 04 January 2012, 19:34:45 UTC |
| 103cb46 | Stefano Sabatini | 24 December 2011, 15:17:18 UTC | vf_drawtext: select YUV color for drawbox() in case YUV colorspace is used Fix box alpha rendering when a YUV colorspace is selected, in particular fix trac ticket #763. (cherry picked from commit 1858a5c25ee1ccb8089339d20138116a46cc6c77) | 03 January 2012, 23:25:55 UTC |
| 7e97d98 | Hendrik Leppkes | 16 December 2011, 21:41:29 UTC | wavpack: determine sample_fmt before requesting a buffer Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 14165fe1256e0f11ba3d9cf574492ae528e5c9cf) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:53:17 UTC |
| 632fd58 | Michael Bradshaw | 02 December 2011, 21:39:26 UTC | Added yuva420p decoding support for libopenjpeg Signed-off-by: Michael Bradshaw <mbradshaw@sorensonmedia.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2ba3416362345f275c63e70f44f4cfbf9b66fb35) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:44 UTC |
| 68874c4 | Michael Bradshaw | 01 December 2011, 04:44:41 UTC | Added RGBA and YUV440 decoding support for libopenjpeg decoder Reviewed-by: Jean First <jeanfirst@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3f07ef1dfff036a6b35c1605e6346bad2e17da68) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:39 UTC |
| a598f0a | Michael Bradshaw | 03 December 2011, 19:14:03 UTC | Fixed openjpeg decoding bug with width/linesize issue The original code wasn't taking into account the fact that linesize may not equal the frame's width. This is to correct that. Signed-off-by: Michael Bradshaw <mbradshaw@sorensonmedia.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d1669e5fe3d61dc4181f96138eb4355aaaf231ea) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:21 UTC |
