| 16ea6af | Michael Niedermayer | 06 November 2011, 19:57:55 UTC | 0.5: some updates. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 19:57:55 UTC |
| 8bd3748 | Michael Niedermayer | 27 October 2011, 13:26:45 UTC | resample: Fix array size Found-by: Jim Radford Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3e7db0a9ee758bf0570a141be1fea64f8d9c03db) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit edf3c5a3ebeee8df55c6a05f88a682091f10a364) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| d39cc3c | Michael Niedermayer | 27 October 2011, 12:34:45 UTC | resample2: fix potential overflow Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a39b5e8b323785695fb0e3c0f30bd9e24287db87) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| e124c3c | Michael Niedermayer | 27 October 2011, 12:31:53 UTC | resample: Fix overflow Found-by: Jim Radford Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6ae93d030476ddd7fa2ab4d9d2dd25df85725390) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 8acc054 | Ronald S. Bultje | 14 October 2011, 22:03:55 UTC | matroskadec: fix out of bounds write Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit 723229c11f1400e6a09c8a1c9c27193f376eb1d1) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d51c7b4cbe022f6b3b026735dc7e29eb50bbf129) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 36e4be0 | Michael Niedermayer | 11 October 2011, 20:03:19 UTC | mem: fix memalign hack av_realloc() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit fc11927890f38445a950b453d24928525da0e61a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5ae87280e219e843c71201c580780e8e30083559) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| c603cf5 | Laurent Aimar | 08 October 2011, 21:40:36 UTC | qtrle: check for out of bound writes. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7fb92be7e50ea4ba5712804326c6814ae02dd190) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a65045915f5b4ec6da73df54d1914b320a861223) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| e1a46ef | Laurent Aimar | 08 October 2011, 21:01:33 UTC | qtrle: check for invalid line offset Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a4ed7c3fe9f99b89f86b65710d8855dc572f1a25) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 67c46b9b3027fdd9fd737e21a80d3326748b1c15) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 23aaa82 | Laurent Aimar | 08 October 2011, 21:40:37 UTC | vqa: fix double free on corrupted streams Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e3123856c79c36507772ada1bcda6cfe36a1e297) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 58087a4 | Justin Ruggles | 14 September 2011, 15:16:42 UTC | mpc7: return error if packet is too small. (cherry picked from commit 8290d1f38b438f1b070de67645c8b4a42014c7ac) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 490617b6ffa13f8e49a196a752f927d5ebad6e2b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 8d1fa1c | Justin Ruggles | 13 September 2011, 22:53:18 UTC | mpc7: check output buffer size before decoding (cherry picked from commit c8b5c4d27409dfdcec80868686b173ba446c998b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b833859daa4eb8fe0ec9117859b21a734905b895) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 2eb5f77 | Laurent Aimar | 04 October 2011, 20:13:58 UTC | h264: do not let invalid values in h->ref_count after a decoder reset. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0333d234b0355b375762447e93674e3fe3c5bff1) (cherry picked from commit f74d1c6de7ef810544edae947db1eb1e2c7b6361) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| ddbbe50 | Laurent Aimar | 02 October 2011, 14:06:38 UTC | h264: fix the check for invalid SPS:num_ref_frames. This patch set the limit to 16. For information, thoses previous commits: 41f7e2d11d2dca23842ee89d530ca9fa15cec9d8 5cbb0e70a0a2ee99eb3cb09e837b9a1f7355b9bc assumed it was either 30 or 32. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit bcf881a6858760ecbd9ff4352a38813dc4232dd6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| d1a5b53 | Laurent Aimar | 02 October 2011, 14:06:37 UTC | h264: do not let invalid values in h->ref_count on ff_h264_decode_ref_pic_list_reordering() errors. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2428b53f6d306d8d71dec34fa7b0af733d76cfac) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 8e6173c | Laurent Aimar | 01 October 2011, 22:38:27 UTC | Check for out of bound accesses in the 4xm decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9c661e952fbcbf044709f9a7031c68cc4860336b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 1a6f024 | Laurent Aimar | 30 September 2011, 22:43:05 UTC | Prevent block size from inreasing in the shorten decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b399cbfba5d901608c18e1a2d48a24c30541a634) (cherry picked from commit 55a96a984ec65736475a8577a158abc5c48fd50a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 3699a46 | Laurent Aimar | 30 September 2011, 22:45:05 UTC | Check for out of bound writes in the QDM2 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4a7876c6e4e62e94d51e364ba99aae4da7671238) (cherry picked from commit b08df314dca6946ed644caacb9d3a533a054c0f6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 62da920 | Laurent Aimar | 30 September 2011, 22:44:55 UTC | Check for out of bound writes in the avs demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5d44c061cf511d97be5fac8d76be2f3915c6e798) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 2e1e3c1 | Laurent Aimar | 30 September 2011, 22:44:54 UTC | Check for corrupted data in avs demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1cce7def0a8eff2e7db294b7d195a0fb1a5043b0) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:12 UTC |
| 635256a | Laurent Aimar | 29 September 2011, 22:05:53 UTC | Fix out of bound writes in fix_bitshift() of the shorten decoder. The data pointers s->decoded[*] already take into account s->nwrap. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f42b3195d3f2692a4dfc0a8668bb4ac35301f2ed) (cherry picked from commit 107ea3057eb8de8a38c45c2f7181c42ea694b187) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:11 UTC |
| 240546a | Laurent Aimar | 29 September 2011, 22:05:51 UTC | Check for out of bounds writes in the Delphine Software International CIN decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3035c4034b6af3ad47f921e3385196e1b9d44ddf) (cherry picked from commit 6e774cf67e6f30feb9b3dec11713d6b6dc0b521c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:11 UTC |
| 07df40d | Laurent Aimar | 24 September 2011, 21:16:18 UTC | Check for invalid update parameters in vmd video decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e7aed1280ea14b60fceae04d71dfd03e1daf2d04) (cherry picked from commit 1ed90c84f6ab75af91b08436cefb8ea464f8495b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 18:49:11 UTC |
| b24c2e5 | Laurent Aimar | 21 September 2011, 18:46:33 UTC | Release old pictures after a resolution change in vp5/6 decoder Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit dba20b84784a7931b7eac50ced1d43e86801bde9) (cherry picked from commit c9c6e5f4e8680b7b7801dd6943590ae9cd6bfd89) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 17:40:47 UTC |
| 25bc110 | Laurent Aimar | 21 September 2011, 18:46:29 UTC | Check output buffer size in nellymoser decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 741ec30bd2385f794efa9fafa84d39a917f2574e) (cherry picked from commit 533dbaa55b7d45d5ca76f9ed46f5690282f86ea9) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 17:40:19 UTC |
| 8ef917c | Michael Niedermayer | 17 September 2011, 19:53:21 UTC | check all svq3_get_ue_golomb() returns. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 979bea13003ef489d95d2538ac2fb1c26c6f103b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 17:34:49 UTC |
| 1883249 | Michael Niedermayer | 17 September 2011, 17:40:25 UTC | rv34: check for size mismatch Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 35f38b3ab9d755aede5bce8abbe1cb9c07027f8a) (cherry picked from commit ed9e561490d70e317659f9e406c7920242e509eb) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 17:32:40 UTC |
| 648dc68 | Laurent Aimar | 17 September 2011, 14:56:33 UTC | Reject audio tracks with invalid interleaver parameters in RM demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4907f813581acd6cf68f1be9eb163464503e8208) (cherry picked from commit 24e0a9e451e1aae427307a919d78f6790f4e413c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 17:32:11 UTC |
| 10da0ed | Michael Niedermayer | 06 November 2011, 00:34:54 UTC | Merge remote-tracking branch 'qatar/release/0.5' into release/0.5 * qatar/release/0.5: update version Release notes and changelog for 0.5.5 Fix ff_imdct_calc_sse() on gcc-4.6 Make DECLARE_ALIGNED macros work with external array specifiers Fix MMX rgb24 to yuv conversion with gcc 4.6 Merged-by: Michael Niedermayer <michaelni@gmx.at> | 06 November 2011, 00:35:41 UTC |
| d6bf799 | Reinhard Tartler | 05 November 2011, 11:57:22 UTC | update version | 05 November 2011, 11:57:22 UTC |
| 0f2735e | Reinhard Tartler | 05 November 2011, 11:53:16 UTC | Release notes and changelog for 0.5.5 | 05 November 2011, 11:53:16 UTC |
| 9463a28 | Alex Converse | 30 January 2011, 09:04:41 UTC | Fix ff_imdct_calc_sse() on gcc-4.6 Gcc 4.6 only preserves the first value when using an array with an "m" constraint. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 770c410fbb8e1b87ce8ad7f3d7eddaa55e2b8295) Conflicts: libavcodec/x86/fft_sse.c Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 05 November 2011, 10:29:12 UTC |
| 1330a8a | Måns Rullgård | 21 January 2010, 12:59:22 UTC | Make DECLARE_ALIGNED macros work with external array specifiers The macro implementation might need the name of the variable being declared for compiler-specific syntax. Moving array specifiers outside the macro invocation allows this to work. Originally committed as revision 21363 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit 8a24e98d506f0f44ec58e06291fa0fce703fb6a8) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 05 November 2011, 10:29:12 UTC |
| 8135c35 | Mans Rullgard | 13 February 2011, 00:19:06 UTC | Fix MMX rgb24 to yuv conversion with gcc 4.6 When built with gcc 4.6, the MMX rgb24 to yuv conversion gives wrong output. The compiler produces this warning: libswscale/swscale_template.c:1885:5: warning: use of memory input without lvalue in asm operand 4 is deprecated Changing the memory operand to a register makes it work. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit f344903ca5ce28a833fdd656bc1ed5b16d97e7e9) Conflicts: libswscale/swscale_template.c Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 05 November 2011, 08:04:11 UTC |
| 38423fe | Michael Niedermayer | 12 September 2011, 21:45:21 UTC | smacker: add forgotten * found by fenrir Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f98edc73c599badaa0c075fbffb519a150d03d80) | 03 November 2011, 02:52:55 UTC |
| 7113259 | Laurent Aimar | 12 September 2011, 19:09:57 UTC | segafilm: Fix potential division by 0 on corrupted segafilm streams in the demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 November 2011, 02:52:55 UTC |
| d6f8b65 | Laurent Aimar | 12 September 2011, 18:58:35 UTC | segafilm: Check for memory allocation failures in segafilm demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7cbe02575868e7d25acf3d319ece664702700f0a) | 03 November 2011, 02:52:55 UTC |
| d8439f0 | Kostya Shishkov | 12 September 2011, 09:39:53 UTC | rv34: check that subsequent slices have the same type as first one. This prevents some crashes when corrupted bitstream reports e.g. P-type slice in I-frame. Official RealVideo decoder demands all slices to be of the same type too. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 23a1f0c59241465ba30103388029a7afc0ead909) | 03 November 2011, 02:52:55 UTC |
| eb6b0ed | Laurent Aimar | 11 September 2011, 17:17:43 UTC | Fixed invalid read access on extra data in cinepak decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit dc255275f6293a060518271a151e1ce75499e874) | 03 November 2011, 02:33:47 UTC |
| 6108f04 | Laurent Aimar | 11 September 2011, 16:51:52 UTC | Fixed segfault on corrupted smacker streams in the demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d0121e8d969cde74fa7dbd96d3602109b051e701) | 03 November 2011, 02:33:41 UTC |
| b261ebf | Laurent Aimar | 11 September 2011, 16:54:01 UTC | Fixed segfaults on corruped smacker streams in the decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d07ac1853da29ea696243160e02154ebf758d1ee) | 03 November 2011, 02:33:35 UTC |
| 03db051 | Laurent Aimar | 07 September 2011, 19:43:03 UTC | Fixed segfault with wavpack decoder on corrupted decorrelation terms sub-blocks. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 8bfea4ab4e2cb32bc7bf6f697ee30a238c65d296) | 03 November 2011, 02:32:50 UTC |
| cc88568 | Laurent Aimar | 10 September 2011, 11:28:13 UTC | Fixed deference of NULL pointer in motionpixels decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 824f98f442996eaee9204b132752cf5114fc94cf) | 03 November 2011, 02:32:23 UTC |
| 1415ebf | Chris Rankin | 07 September 2011, 09:17:30 UTC | qcelpdec: fix the return value of qcelp_decode_frame(). (cherry picked from commit 04c13dca8812e8302686887b6e8201d4ad25b7d8) | 03 November 2011, 02:31:25 UTC |
| 4e0315b | Reimar Döffinger | 17 July 2011, 13:22:36 UTC | Check extradata size on resolution change. Ignore resolution change if resolution not defined in extradata. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de> (cherry picked from commit 09c5f990bc7629dfbee8c760fd485936c60a7b40) | 03 November 2011, 02:30:35 UTC |
| a9ded3d | Laurent Aimar | 19 September 2011, 20:48:53 UTC | rv34: Check for invalid slice offsets Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 4cc7732386eb36661ed22d1200339b38a5fa60bc) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:29:32 UTC |
| ef93642 | Laurent Aimar | 17 September 2011, 21:43:58 UTC | rv34: Avoid NULL dereference on corrupted bitstream rv34_decode_slice() can return without allocating any pictures. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit d0f6ab0298f2309c6104626787ed73416298b019) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:29:21 UTC |
| 9cda3d7 | Laurent Aimar | 17 September 2011, 22:03:08 UTC | rv10: Reject slices that does not have the same type as the first one This prevents crashes with some corrupted bitstreams. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 4a29b471869353c3077fb4b25b6518eb1047afb7) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:29:12 UTC |
| 52b8edc | Laurent Aimar | 11 September 2011, 21:26:12 UTC | oggdec: fix out of bound write in the ogg demuxer Between ogg_save() and ogg_restore() calls, the number of streams could have been reduced. Signed-off-by: Luca Barbato <lu_zero@gentoo.org> (cherry picked from commit 0e7efb9d23c3641d50caa288818e8c27647ce74d) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:28:27 UTC |
| f936799 | Laurent Aimar | 12 September 2011, 21:49:36 UTC | Check for invalid VLC value in smacker decoder. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 6489455495fc5bfbebcfe3f57e5d4fdd6a781091) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:27:53 UTC |
| f6d3dfe | Laurent Aimar | 12 September 2011, 21:46:49 UTC | Check and propagate errors when VLC trees cannot be built in smacker decoder. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 9676ffba8346791f494451e68d2a3b37a2918a9b) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:27:46 UTC |
| 2e17744 | Laurent Aimar | 12 September 2011, 18:50:34 UTC | Fixed off by one packet size allocation in the smacker demuxer. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit a92d0fa5d234582583d41b67dddecffc2c819573) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:27:39 UTC |
| 19431d4 | Laurent Aimar | 11 September 2011, 17:17:40 UTC | ape demuxer: fix segfault on memory allocation failure. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 273aab99bf7be2bcda95dd64101c2317ee0fcb99) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:27:24 UTC |
| ecd6fa1 | Laurent Aimar | 12 September 2011, 18:50:13 UTC | Check for invalid packet size in the smacker demuxer. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit e055932f5636a82275837968eea9c8fcb5bca474) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:27:16 UTC |
| 7cb35d4 | Alex Converse | 09 September 2011, 21:50:33 UTC | cljr: init_get_bits size in bits instead of bytes (cherry picked from commit 0c1f5b93d9b97c4cc3684ba91a040e90bfc760d2) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:26:33 UTC |
| 457f869 | Alex Converse | 09 September 2011, 20:26:49 UTC | indeo2: fail if input buffer too small (cherry picked from commit b7ce4f1d1c3add86ece7ca595ea6c4a10b471055) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:26:19 UTC |
| 70f01f1 | Alex Converse | 09 September 2011, 20:24:19 UTC | indeo2: init_get_bits size in bits instead of bytes (cherry picked from commit 68ca330cbd479111db9cb7649d7530ad59f04cc8) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 03 November 2011, 02:26:11 UTC |
| 80fb9f2 | Michael Niedermayer | 10 August 2011, 15:29:51 UTC | cavsdec: avoid possible crash with crafted input Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9f06c1c61e876e930753da200bfe835817e30a53) | 03 November 2011, 02:22:37 UTC |
| 46f9a62 | Carl Eugen Hoyos | 01 July 2011, 00:38:28 UTC | Fix possible double free when encoding using xvid. (cherry picked from commit 315f0e3fd8dcbd1362276b7407dad2e97cccc4b7) | 03 November 2011, 02:17:19 UTC |
| e9210b4 | Michael Niedermayer | 03 November 2011, 01:22:07 UTC | Merge remote-tracking branch 'qatar/release/0.5' into release/0.5 * qatar/release/0.5: Fix memory (re)allocation in matroskadec.c, related to MSVR-11-0080. cavs: fix some crashes with invalid bitstreams mjpeg: Detect overreads in mjpeg_decode_scan() and error out. Merged-by: Michael Niedermayer <michaelni@gmx.at> | 03 November 2011, 01:23:42 UTC |
| 4f07a3a | Michael Niedermayer | 28 July 2011, 12:59:54 UTC | Fix memory (re)allocation in matroskadec.c, related to MSVR-11-0080. Whitespace of the patch cleaned up by Aurel Some of the issues have been reported by Steve Manzuik / Microsoft Vulnerability Research (MSVR) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 956c901c68eff78288f40e3c8f41ee2fa081d4a8) Further suggestions from Kostya <kostya.shishkov@gmail.com> have been implemented by Reinhard Tartler <siretart@tauware.de> Signed-off-by: Reinhard Tartler <siretart@tauware.de> (cherry picked from commit 77d2ef13a8fa630e5081f14bde3fd20f84c90aec) NB: MSVR-11-0080 doesn't seem to exist. This issue seems to be known as MSVR11-011 instead. Fixes: CVE-2011-3504 Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 02 November 2011, 20:49:55 UTC |
| 04888ed | Mans Rullgard | 10 August 2011, 17:52:11 UTC | cavs: fix some crashes with invalid bitstreams This removes all valgrind-reported invalid writes with one specific test file. Fixes http://www.ocert.org/advisories/ocert-2011-002.html Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 4a71da0f3ab7f5542decd11c81994f849d5b2c78) Fixes CVE-2011-3362, CVE-2011-3973, CVE-2011-3974 Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 02 November 2011, 20:14:57 UTC |
| 24cd7c5 | Michael Niedermayer | 25 March 2011, 01:24:32 UTC | Fix apparently exploitable race condition. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 26 April 2011, 10:30:57 UTC |
| 8210ee2 | Michael Niedermayer | 21 April 2011, 20:04:21 UTC | AMV: Fix possibly exploitable crash. Reported-at: Thu, 21 Apr 2011 14:38:25 +0000 Reported-by: Dominic Chell <Dominic.Chell@ngssecure.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 26 April 2011, 10:12:11 UTC |
| eed5697 | Michael Niedermayer | 21 April 2011, 20:03:24 UTC | mjpeg: Detect overreads in mjpeg_decode_scan() and error out. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Ronald S. Bultje <rbultje@google.com> Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 26 April 2011, 07:40:06 UTC |
| 52ee20f | Reinhard Tartler | 17 March 2011, 12:10:27 UTC | update release date | 17 March 2011, 12:10:27 UTC |
| f17b892 | Reinhard Tartler | 17 March 2011, 12:09:40 UTC | document APE patch | 17 March 2011, 12:09:40 UTC |
| 18c5fe9 | Kostya | 15 March 2011, 09:19:43 UTC | Do not attempt to decode APE file with no frames This fixes invalid reads/writes with this sample: http://packetstorm.linuxsecurity.com/1103-exploits/vlc105-dos.txt (cherry picked from commit 8312e3fc9041027a33c8bc667bb99740fdf41dd5) | 16 March 2011, 12:27:01 UTC |
| c5898d7 | Diego Biurrun | 06 March 2011, 10:02:36 UTC | Fix a bunch of typos in the release documentation. | 06 March 2011, 10:02:36 UTC |
| 2c4d6ae | Reinhard Tartler | 20 February 2011, 21:12:52 UTC | Bump version number for 0.5.4 release. | 20 February 2011, 21:13:05 UTC |
| 31c8dce | Reinhard Tartler | 18 February 2011, 16:06:06 UTC | release notes for 0.5.4 | 20 February 2011, 08:44:18 UTC |
| 2adad90 | Reinhard Tartler | 18 February 2011, 16:06:06 UTC | Amend Changelog for 0.5.4 | 20 February 2011, 08:38:11 UTC |
| 808f9ce | Kostya Shishkov | 24 November 2009, 06:05:41 UTC | Call avcodec_set_dimensions() instead of simply setting avctx->width/height when frame dimensions change in RV3/4. Originally committed as revision 20595 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit d90aeeaf569e4a08c30b3d1d09c3cff3a86eb431) | 19 February 2011, 16:07:58 UTC |
| 8069e2f | Reimar Döffinger | 19 February 2011, 10:33:01 UTC | Fix invalid reads in VC1 decoder Patch discussed and taken from https://roundup.ffmpeg.org/issue2584 (cherry picked from commit 2bbec1eda46d907605772a8b6e8263caa4bc4c82) Change related to CVE-2011-0723 | 19 February 2011, 16:07:57 UTC |
| f749439 | Ronald S. Bultje | 09 November 2009, 22:10:43 UTC | Make get_bits_left() available for use in libavcodec (was previously held private in dv.c for some reason). See "[PATCH] get_bits_left()" thread. Originally committed as revision 20490 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit c47ca25e74bbe465cdc8b99d4f6ab4f0ad5e4229) | 19 February 2011, 16:07:57 UTC |
| 04847a0 | Reinhard Tartler | 13 February 2011, 22:34:41 UTC | Update Changelog for 0.5.4 release. | 13 February 2011, 22:35:38 UTC |
| 329e816 | Frank Barchard | 13 February 2011, 20:38:45 UTC | Check rangebits to avoid a possible crash. Fixes issue 2548 (and Chrome issue 68115 and unknown CERT issues). Originally committed as revision 26365 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit 13184036a6b1b1d4b61c91118c0896e9ad4634c3) Addresses: CVE-2011-0480 Conflicts: libavcodec/vorbis_dec.c | 13 February 2011, 20:41:38 UTC |
| d6860fb | Jason Garrett-Glaser | 13 February 2011, 19:41:13 UTC | Fix crashes in vorbis decoding found by zzuf Fixes issue 2322. Originally committed as revision 25591 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit 3dde66752d59dfdd0f3727efd66e7202b3c75078) Addresses: CVE-2010-4704 | 13 February 2011, 19:45:18 UTC |
| e332c41 | Reinhard Tartler | 10 February 2011, 13:09:35 UTC | also ignore *.so for vhook plugins | 10 February 2011, 13:09:35 UTC |
| 11f6eeb | Janne Grunau | 18 January 2011, 19:44:24 UTC | consolidate .gitignore patters into a single file Signed-off-by: Janne Grunau <janne-ffmpeg@jannau.net> (cherry picked from commit 2c3589bfda036c7827ded0bf38b16dfe7630bae1) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 10 February 2011, 13:02:23 UTC |
| 9109a58 | Janne Grunau | 17 January 2011, 14:49:11 UTC | convert svn:ignore properties to .gitignore files Signed-off-by: Janne Grunau <janne-ffmpeg@jannau.net> (cherry picked from commit 348b8218f7a59374355c966dbe3b851a7275f952) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 10 February 2011, 13:01:36 UTC |
| 44511b1 | Kostya Shishkov | 22 November 2009, 07:48:35 UTC | Update dimensions in AVCodecContext when RV3/4 frame dimensions change Originally committed as revision 20572 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit ec10d2d53999f6edf7d7b5ac88df263eccfb1fb0) Fixes heap corruption crashes Addresses: CVE-2011-0722 Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 February 2011, 05:42:29 UTC |
| 48b086b | Michael Niedermayer | 22 April 2009, 01:54:05 UTC | Update safety check as the maximum pixel size is no longer 4. New max size is 16bit * 4 samples (RGBA). Originally committed as revision 18655 to svn://svn.ffmpeg.org/ffmpeg/trunk (cherry picked from commit 445f0a8b666a34e6402f6ae96c6804c8bc024baa) Addresses: CVE-2010-3908 Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 February 2011, 05:41:58 UTC |
| c9864ad | Reinhard Tartler | 18 October 2010, 19:43:55 UTC | release notes for 0.5.3 Originally committed as revision 25523 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 18 October 2010, 19:43:55 UTC |
| 7d10059 | Diego Biurrun | 18 October 2010, 19:40:09 UTC | Bump version number for 0.5.3 release. Originally committed as revision 25522 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 18 October 2010, 19:40:09 UTC |
| 69e8b43 | Diego Biurrun | 18 October 2010, 19:38:02 UTC | Update Changelog for 0.5.3 release. Originally committed as revision 25521 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 18 October 2010, 19:38:02 UTC |
| 2f504d7 | Reinhard Tartler | 03 October 2010, 14:51:50 UTC | Fix several security issues in flicvideo.c This fixes CVE-2010-3429 backport r25223 by michael Originally committed as revision 25325 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 03 October 2010, 14:51:50 UTC |
| 2dea9a1 | Reinhard Tartler | 03 October 2010, 14:50:04 UTC | unbreak compilation and finish backport r24280 by mstorsjo Originally committed as revision 25324 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 03 October 2010, 14:50:04 UTC |
| 84e6629 | Reinhard Tartler | 22 July 2010, 11:58:26 UTC | aviobuf: Do short seeks forward by reading and skipping data instead of a proper seek This improves performance on e.g. seekable http. backport r24280 by mstorsjo Originally committed as revision 24428 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 22 July 2010, 11:58:26 UTC |
| fc038df | Reinhard Tartler | 31 May 2010, 13:06:51 UTC | configure: improve temp file creation and cleanup backport r17752 by mru Originally committed as revision 23393 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 31 May 2010, 13:06:51 UTC |
| 021054a | Diego Biurrun | 24 May 2010, 21:58:47 UTC | release notes for 0.5.2 Originally committed as revision 23300 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 24 May 2010, 21:58:47 UTC |
| ee20f19 | Diego Biurrun | 24 May 2010, 21:55:01 UTC | Bump version number for 0.5.2 release. Originally committed as revision 23299 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 24 May 2010, 21:55:01 UTC |
| 2fcb56d | Diego Biurrun | 24 May 2010, 21:41:51 UTC | Update Changelog for 0.5.2 release. Originally committed as revision 23298 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 24 May 2010, 21:41:51 UTC |
| 96ca078 | Reinhard Tartler | 24 March 2010, 19:35:30 UTC | Check validity of channels & samplerate. This may be security relevant. Based on 2 patches by chrome. backport r19975 by michael Originally committed as revision 22658 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 24 March 2010, 19:35:30 UTC |
| 7fd4cbb | Reinhard Tartler | 12 March 2010, 20:35:04 UTC | fix compilation issue on powerpc unlike the ARCH_ macros, COMPILE_ALTIVEC needs to be tested more carefully Originally committed as revision 22488 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 12 March 2010, 20:35:04 UTC |
| 557e065 | Reinhard Tartler | 10 March 2010, 20:55:07 UTC | Fix compilation on powerpc with --disable-altivec in case altivec is disabled, even compilation of code using altivec keywords or asm must be avoided. backport r30869 from mplayer repo by siretart Originally committed as revision 22436 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 10 March 2010, 20:55:07 UTC |
| 4612437 | Diego Biurrun | 06 March 2010, 19:50:56 UTC | Mention LGPL libswscale in the Changelog. Originally committed as revision 22253 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 06 March 2010, 19:50:56 UTC |
| fe95afe | Diego Biurrun | 06 March 2010, 19:40:37 UTC | libswscale is no longer GPL; update help comment accordingly. Originally committed as revision 22250 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 06 March 2010, 19:40:37 UTC |
| 775aa5f | Andres Mejia | 06 March 2010, 16:57:43 UTC | Add Hurd to OS list and disable dv1394 in the Hurd case. patch by Andres Mejia, mcitadel gmail com backport r18938 by diego Originally committed as revision 22237 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 06 March 2010, 16:57:43 UTC |
| 578c328 | Diego Biurrun | 03 March 2010, 08:25:10 UTC | Add point release date. Originally committed as revision 22163 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 03 March 2010, 08:25:10 UTC |
| c46038f | Reinhard Tartler | 02 March 2010, 16:03:06 UTC | fix 'seektest' again backport r19270 by rbultje: Remove any reference to ASFContext.packet_size and replace it with AVFormatContext.packet_size. See "[PATCH] asf*.c/h: use AVFormatContext->packet_size instead of own copy" thread on ML. and r19361 by reimar: Check for packet_length 0, it is already treated as invalid by the padding check, but that resulted in a confusing/wrong error message. Originally committed as revision 22147 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5 | 02 March 2010, 16:03:06 UTC |
