| 5d6982c | Michael Niedermayer | 31 March 2012, 19:42:50 UTC | indeo4: check that num_mbs matches Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d3db8988d5befd8702a748cf1957415677bfe75c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:31:07 UTC |
| e11fa08 | Michael Niedermayer | 17 March 2012, 19:45:45 UTC | dsp: fix diff_bytes_mmx() with small width Fixes Ticket1068 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 73089eccd3e48539555349b36d8aabbf1cea416e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:27:33 UTC |
| 4702154 | Michael Niedermayer | 02 May 2012, 23:27:16 UTC | update for 0.9.2 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 23:27:16 UTC |
| e390a9d | Janne Grunau | 05 January 2012, 21:12:35 UTC | electronicarts: check bytes per sample for validity Prevents division by zero. | 02 May 2012, 23:23:02 UTC |
| e70d202 | Michael Niedermayer | 22 March 2012, 22:43:37 UTC | vqavideodev: Check image dimensions Fixes out of heap array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3583c8706df0abbfa3ecdd6730f4f3d72a01fe6d) Independently-Found-by: Fabian Yamaguchi Fixes: CVE-2012-0947 Conflicts: libavcodec/vqavideo.c | 02 May 2012, 22:29:18 UTC |
| 9de0c8c | Michael Niedermayer | 16 March 2012, 14:10:33 UTC | sonic: update to new API Fixes Ticket1075 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6f9803e5e02c557e1003cface9f3084a7e1e43e4) Conflicts: libavcodec/sonic.c Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 22:28:35 UTC |
| db041fd | Michael Niedermayer | 03 March 2012, 02:37:52 UTC | qpeg: Fix out of array writes. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 02 May 2012, 22:28:35 UTC |
| 7a87741 | Fabian Greffrath | 03 March 2012, 01:35:27 UTC | srtdec: fix a format string vulnerability. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit aaa1173de775b9b865a714abcc270816d2f59dff) | 02 May 2012, 22:28:35 UTC |
| cf9b04c | ami_stuff | 22 March 2012, 18:28:52 UTC | Replace SSE2 instruction in scalarproduct_float_sse() by SSE equivalent. Fixes an AAC decoding issue with the sample from ticket #213 on machines with SSE but without SSE2. Based on 89411a by Reimar. (cherry picked from commit f6b78638086beae9bcab672d4c9de1790be5a928) | 04 April 2012, 07:16:02 UTC |
| 5667eaf | Stefano Sabatini | 28 March 2012, 22:17:23 UTC | lavfi/fade: fix black level for non studio-level pixel formats Fix trac ticket #1139, regression introduced in 8c1fb50d077d5f954. (cherry picked from commit 95ce0ddcfe99182365e0e57f5f41d7f1a01c57eb) | 04 April 2012, 06:45:16 UTC |
| 89f2d6c | Michael Niedermayer | 04 April 2012, 01:43:23 UTC | h264: fix seeking in low delay streams without IDR Fixes Ticket1165 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3360b8517a1f478c4102072e5eadd8ba78be0538) | 04 April 2012, 06:41:14 UTC |
| 32a79b5 | Franz Brauße | 30 March 2012, 18:40:14 UTC | smacker audio: sign-extend the initial 16-bit predicted value Fixes Bug #265 Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 12cbbbb4abda2de0ea123282ccf7ebee61517f7d) | 01 April 2012, 12:00:13 UTC |
| 515b7f0 | Tomas Härdin | 20 March 2012, 10:03:48 UTC | mxfdec: Only parse next partition pack if parsing forward This fixes ticket #1099. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 393b81f0934866bd7fff0a2b113623dd9ee6808f) | 21 March 2012, 12:26:13 UTC |
| 63945e2 | Michael Niedermayer | 16 January 2012, 21:26:52 UTC | indeo4: fix LE reader define for backport Fixes Ticket920 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 16 January 2012, 21:26:52 UTC |
| ad6eefc | Carl Eugen Hoyos | 12 January 2012, 15:53:42 UTC | Fix compilation with yasm-0.6.2. | 12 January 2012, 15:53:42 UTC |
| 601e648 | Michael Niedermayer | 05 January 2012, 02:00:56 UTC | Update for 0.9.1 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 02:02:35 UTC |
| e540446 | John Brooks | 11 December 2011, 09:37:21 UTC | vc1dec: fix invalid memory access for small video dimensions For small video dimensions, these calculations of the upper bound for pixel access may have a negative result. Using an unsigned comparison to bound a potentially negative value only works if the greater operand is non-negative. Fixed by doing edge emulation when the upper bound is probably negative, everywhere that this pattern appears. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com> (cherry picked from commit d209c27b09234cc40bbdbd680aa502b493edf595) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 01:23:08 UTC |
| fc9c5ad | John Brooks | 04 January 2012, 06:27:35 UTC | rv34: fix invalid memory access for small video dimensions For small video dimensions calculations of the upper bound for pixel access may result in negative value. Using an unsigned comparison works only if the greater operand is non-negative. This is fixed by doing edge emulation explicitly for such conditions. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com> (cherry picked from commit aacf6b3a2fd8bc8603e3deaa6e612ea03cf08707) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 01:23:02 UTC |
| 68f1212 | Michael Niedermayer | 04 January 2012, 23:51:12 UTC | Revert "rmdec: Avoid allocating huge packets" This reverts commit 66f71f3b5e2e7b6e5049bd9831c371e16aff8a53. This causes regressions with RDT. (cherry picked from commit c4eec85a1fa768025f88261995af08f1dba9685d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:13 UTC |
| 0a5bca9 | Michael Niedermayer | 04 January 2012, 23:49:02 UTC | lavf: use avg_frame_rate and packet number to exit find_stream_info qatar does this too but clobbers the AVPacket.duration by approximate values. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ad8e3304f701820f927527d8f0d11679738636df) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:12 UTC |
| 0f61521 | Michael Niedermayer | 04 January 2012, 23:22:19 UTC | lavf: revert commit bb99ae3ae924c942a634bec7711ec7ee11c38eb9 Author: Michael Niedermayer <michaelni@gmx.at> Date: Thu Nov 3 22:38:10 2011 +0100 lavf: fix null pointer dereference in rdt Signed-off-by: Michael Niedermayer <michaelni@gmx.at> This is no longer needed and causes various problems with RTSP Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1171d938af219aa1217a472391bc392f6e698386) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 05 January 2012, 00:06:11 UTC |
| 58afa73 | Michael Niedermayer | 04 January 2012, 20:55:52 UTC | vorbis: make sure ch is non zero before calling vorbis_residue_decode This possibly makes part of the CVE-2011-3895 fix unneeded. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ff7f198d7f9504f71676327be0be47661cfe39d6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:02 UTC |
| 68ee434 | Chris Evans | 04 January 2012, 20:53:35 UTC | vorbis: An additional defense in the Vorbis codec. BUG=101458 Review URL: http://codereview.chromium.org/8414025 Fixes second part of CVE-2011-3895 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f74ce3a60d6ef49080df85c44b54280357109f56) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:00 UTC |
| 80440c5 | Chris Evans | 04 January 2012, 20:51:18 UTC | vorbis: Fix decoder bug. BUG=101458 Review URL: http://codereview.chromium.org/8413019 This fixes part of 2011-3895 bigned-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 68226ed9ecef675895dc55a0c58d587014639a0e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:19:00 UTC |
| 89bd49b | Michael Niedermayer | 04 January 2012, 18:22:20 UTC | vorbisdec: Make sure blocksize is not set to an invalid value. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 405e99bdfdb363e8dfda275faad9d4fdc9646434) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:59 UTC |
| d7e5301 | Michael Niedermayer | 04 January 2012, 16:29:34 UTC | vorbis: Fix last quarter of CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:58 UTC |
| 6a3fed8 | Chris Evans | 04 January 2012, 16:24:15 UTC | ogg: Avoid the possibility to read out-of-bounds of a static global array in Vorbis decoding. BUG=100543 Review URL: http://codereview.chromium.org/8365014 This fixes 25% of CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7149fce2cac0474a5fbc5b47add1158cd8bb283e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:56 UTC |
| 49b8709 | Chris Evans | 04 January 2012, 15:33:34 UTC | mkv: Fix a bug where a pointer was cached to an array that might later move due to a realloc() BUG=100492 Review URL: http://codereview.chromium.org/8366004 Fixes: 1 of 2 for CVE-2011-3893 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f35e037c93cf7d25e65b4a2ed3674358f05e4bed) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:55 UTC |
| 1bd1103 | Philippe Saint-Pierre | 04 January 2012, 20:00:06 UTC | Fix possible infinite loop decoding als. Reviewed-by: Thilo Borgmann (cherry picked from commit f0f2babca23a3d099bcd5a1e18cf5d0eae2f4ef3) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:53 UTC |
| 66569b3 | Michael Niedermayer | 03 January 2012, 05:53:18 UTC | jpegdec: Fix vlc table check for progressive jpegs. Fixes Ticket834 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 15b219fae9da1691dfb264f51637805e1ca63d1a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 9f9b638 | Michael Niedermayer | 04 January 2012, 03:02:22 UTC | electronicarts: Pass error through ea_read_header(). Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f37174bc1913d534913e8825f1609a637cc4b364) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 32b62c7 | Oana Stratulat | 04 January 2012, 01:13:27 UTC | electronicarts: Fix division by zero. Fixes Ticket #793 Signed-off-by: Oana Stratulat <oanaandreeastratulat@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0d3a51e5d279dd2a56c81ba7a81a70128c5a7545) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 04 January 2012, 21:18:01 UTC |
| 9f561ec | Carl Eugen Hoyos | 04 January 2012, 19:34:45 UTC | Revert "wavpack: Clip samples after shifting" This reverts commit 8d055e9079f151f13d34e8e04f4aa7ca0273c448. The original commit introduced ticket #871, do not import the problem into the release branch. | 04 January 2012, 19:34:45 UTC |
| 103cb46 | Stefano Sabatini | 24 December 2011, 15:17:18 UTC | vf_drawtext: select YUV color for drawbox() in case YUV colorspace is used Fix box alpha rendering when a YUV colorspace is selected, in particular fix trac ticket #763. (cherry picked from commit 1858a5c25ee1ccb8089339d20138116a46cc6c77) | 03 January 2012, 23:25:55 UTC |
| 7e97d98 | Hendrik Leppkes | 16 December 2011, 21:41:29 UTC | wavpack: determine sample_fmt before requesting a buffer Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 14165fe1256e0f11ba3d9cf574492ae528e5c9cf) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:53:17 UTC |
| 632fd58 | Michael Bradshaw | 02 December 2011, 21:39:26 UTC | Added yuva420p decoding support for libopenjpeg Signed-off-by: Michael Bradshaw <mbradshaw@sorensonmedia.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2ba3416362345f275c63e70f44f4cfbf9b66fb35) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:44 UTC |
| 68874c4 | Michael Bradshaw | 01 December 2011, 04:44:41 UTC | Added RGBA and YUV440 decoding support for libopenjpeg decoder Reviewed-by: Jean First <jeanfirst@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3f07ef1dfff036a6b35c1605e6346bad2e17da68) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:39 UTC |
| a598f0a | Michael Bradshaw | 03 December 2011, 19:14:03 UTC | Fixed openjpeg decoding bug with width/linesize issue The original code wasn't taking into account the fact that linesize may not equal the frame's width. This is to correct that. Signed-off-by: Michael Bradshaw <mbradshaw@sorensonmedia.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d1669e5fe3d61dc4181f96138eb4355aaaf231ea) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:52:21 UTC |
| 80695c9 | Michael Niedermayer | 02 January 2012, 18:06:46 UTC | jpegdec: non interleaved rgb ljpeg support. Fixes Ticket856 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 45552371e3434fb7aa4d0bc566fd4ef954f9af14) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:51:48 UTC |
| 17c3ec7 | Michael Niedermayer | 02 January 2012, 16:03:24 UTC | jpegdec: 9-16 bit yuv/gray ljpeg support. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 465eb0eb48a14f5308d7fa52c388e7be7170cc3e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:51:42 UTC |
| e8c8b27 | Michael Niedermayer | 02 January 2012, 16:02:41 UTC | jpegdec: Only enable rgb mode when there are 3 components. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 24964f21e4976edab156dc934c3b5ec3746b16eb) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:51:28 UTC |
| 4eff392 | Justin Ruggles | 31 December 2011, 20:47:30 UTC | bmv audio: implement new audio decoding API (cherry picked from commit 8893fbdf7a5b941ce353fd560817ae6a2c34cfff) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:50:30 UTC |
| e5ae872 | Paul B Mahol | 01 January 2012, 12:16:42 UTC | y41p encoder and decoder y41p is a packed 12-bit 4:1:1 YUV format used by Brooktree. Fixes issue 1123 / ticket #102. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit dfa77dead2c97ec84092066102b14a2524d4d88b) Conflicts: Changelog libavcodec/version.h Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:50:03 UTC |
| 3fe4055 | Jean First | 01 January 2012, 21:08:17 UTC | j2kdec: av_log formatting use %tx instead of %x Signed-off-by: Jean First <jeanfirst@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b1031562351d81fb56f9338df5876dc2153d9f26) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:48:40 UTC |
| 86fbd61 | Carl Eugen Hoyos | 01 January 2012, 04:04:25 UTC | Update copyright year. (cherry picked from commit 8dc973e6d1442e6427dfcb9817f9d15695555465) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:47:12 UTC |
| f6e3607 | Michael Niedermayer | 01 January 2012, 02:46:06 UTC | mpegpsenc: Fix integer overflow of the muxrate calculation. this should fix the failure of h264-bsf-mp4toannexb on freebsd/openbsd Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 490c97bdf5ed1c6f05abe4446e67e598881fc53f) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:47:01 UTC |
| b8cc9e2 | Reimar Döffinger | 30 December 2011, 09:42:55 UTC | Avoid uninitialized data in lcldec when ofs is 0 in MSZH. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de> (cherry picked from commit 42a1f1d7a8cf67eed68db596d6a1e53c0c36e4ab) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:44:47 UTC |
| 4ae111c | Michael Niedermayer | 31 December 2011, 14:27:51 UTC | lavf: ffio_limit(), treat avio_size()==0 as error. This works around issues arising from inputs that claim to have a filesize of 0. Reported-by: buzz_ Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e6362f3a3cfbabf457fc7ebb2205cbfc043501ee) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:44:34 UTC |
| 0bf48d2 | Michael Niedermayer | 31 December 2011, 02:39:22 UTC | flvdec: Check avpriv_mpeg4audio_get_config() return value before using its output. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5500e65342a2afc5caa8fe38496aa1a3b1f28cbc) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:43:43 UTC |
| 2dcacbb | Jean First | 30 December 2011, 20:08:01 UTC | cache: use av_freep instead of av_free in cache_open Signed-off-by: Jean First <jeanfirst@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 576ada791a5085b7427c9062ba4f65e811914bd0) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:43:26 UTC |
| 0064fcb | Michael Niedermayer | 29 December 2011, 20:26:30 UTC | mlp_parser: Fix infinite loop with 0 bytes_left. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e146ad95d79b1a6e6b9e566366b832825c79679f) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:43:02 UTC |
| a426965 | Reimar Döffinger | 30 December 2011, 09:37:33 UTC | Avoid av_memcpy_backptr hang without extra branch. This only happens for a "back" value of 0 which is invalid anyway, but lcldec does not properly validate input. Also extend the documentation to specify valid values. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de> (cherry picked from commit 874da652b307fe0d2bec08fc5916a9a82537f40c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:42:12 UTC |
| 3ccbd6b | Michael Niedermayer | 30 December 2011, 04:12:38 UTC | ljpegdec: fix point transform injection. Fix Ticket842 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b0143da80656f286b3e2363f3ddb6f81c4a0fbf5) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:41:59 UTC |
| fa97a80 | Michael Niedermayer | 29 December 2011, 22:22:41 UTC | flvdec: Check index for being valid Fixes seeking in Enigma_Principles_of_Lust.flv Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit df0bff6643cadbd9c07bbe2b0536a7c9d0dfe0c6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:41:40 UTC |
| 53c4304 | Michael Niedermayer | 29 December 2011, 20:31:22 UTC | nsvdec: Check av_malloc(string_size) This can easily be NULL as string_size can be 2g in a damaged file. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b9e0e9537a3ec4af1630e9f1b8d0ce68885cac16) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:41:16 UTC |
| f246d46 | Michael Niedermayer | 29 December 2011, 01:34:43 UTC | indeo5: Fix null pointer dereferences of ref_mb Reviewed-by: Derek Buitenhuis <derek.buitenhuis@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f41a6c8f3aeb51332bb359038cb504d3fb562a52) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:40:58 UTC |
| 9477363 | Michael Niedermayer | 29 December 2011, 02:42:15 UTC | h264_mp4toannexb_filter: pass error code through. Bug-Found-by and Suggested bugfix: Tanami, Ohad Reviewed-by: Derek Buitenhuis <derek.buitenhuis@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7ae251b4d8a18bc63734e58f1baafac634c67e01) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:40:49 UTC |
| e115297 | Michael Niedermayer | 29 December 2011, 04:05:52 UTC | issdemux: Check packet_size for validity Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit bf5cc805190b5811b786a454f01cccf9a7e366b9) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:40:24 UTC |
| 7cd9732 | Michael Niedermayer | 29 December 2011, 04:16:34 UTC | qpeg: Check for overread in qpeg_decode_intra. Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e7c1e38ba632f7315e332dd350b38f782f428884) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:40:17 UTC |
| acdc505 | Michael Niedermayer | 28 December 2011, 20:31:00 UTC | indeo5: fix division by 0 in ff_ivi_init_tiles() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 92e2b59dec8c0124a209ce24f23450df9607d9d8) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:39:40 UTC |
| f09bbd3 | Michael Niedermayer | 28 December 2011, 19:13:00 UTC | indeo5: Fix crash due to partially initialized gop vars. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d46bc4133c104188dd6719365605e42bd1b5e2ff) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:38:58 UTC |
| 690fda3 | Michael Niedermayer | 28 December 2011, 18:50:29 UTC | indeo5: fix null pointer crash with ref_mb Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4b35ee0b7c0c4cbac3541a25a5e8c00b657c8f95) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:38:35 UTC |
| 0280cf9 | Michael Niedermayer | 28 December 2011, 18:05:16 UTC | vcr1dec: Check that there is sufficient input data. Fixes crash. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 8e09482e4d27d65bbce2ce5c2f4392216011ed09) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:38:22 UTC |
| a47c277 | Michael Niedermayer | 28 December 2011, 17:33:29 UTC | v410dec: Check for sufficient input data. Fixes crash Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 11ca3416f92744f376c08e5f31bcbe5d9b44acb2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:38:16 UTC |
| b0355d3 | Kostya Shishkov | 06 December 2011, 13:50:32 UTC | Indeo 4 decoder Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com> (cherry picked from commit adfe0c942e71545f003f9c4d148fbf5d220681bc) Conflicts: Changelog libavcodec/version.h Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:38:07 UTC |
| e9ce8a4 | Carl Eugen Hoyos | 28 December 2011, 04:59:39 UTC | Fix a crash when reading gray pam files. Fixes ticket #837. (cherry picked from commit 190a0998c353879c8f79f47678752dbb8fa62bb2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:36:22 UTC |
| e9378b4 | Stefano Sabatini | 27 December 2011, 14:15:02 UTC | lavfi: add missing check in avfilter_filter_samples() Avoid out-of-buffer data access when nb_channels is 8. (cherry picked from commit ae21776207e8a2bbe268e7c9e203f7599dd87ddb) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:35:42 UTC |
| 6caca26 | Michael Niedermayer | 25 December 2011, 11:31:23 UTC | shorten: validate values in fmt chunk search Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5e9a56a0350c518cd4b38845aff49d41a9c952ae) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:33:21 UTC |
| 446d11f | Michael Niedermayer | 25 December 2011, 11:28:50 UTC | shorten: Fix invalid free() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 18bcfc912e48bf77a5202a0e24a3b884b9b2ff2c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:33:15 UTC |
| a80205f | Michael Niedermayer | 25 December 2011, 03:49:23 UTC | segafilm: fail earlier in case theres not enough bytestream left for a audio packet. This prevents a potentially large memory allocation. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1795fed7bc7a8b8109757cb5f27198c5b05698b5) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:32:39 UTC |
| 0231a68 | Michael Niedermayer | 25 December 2011, 03:48:26 UTC | avio: Fix ffio_limit() when due to seeking past the end less than 0 bytes remain. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 27d323577c19af218f8a5ac33364f213b623a023) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:32:28 UTC |
| 7c67d9c | Michael Niedermayer | 25 December 2011, 03:15:56 UTC | golomb: Fix infinite loop in svq3_get_ue_golomb() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 964506bb979e8c972833c7421a39f3275d3cd3c0) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:32:19 UTC |
| 49db360 | Michael Niedermayer | 24 December 2011, 23:10:27 UTC | ws_snd1: Fix wrong samples count and crash. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5257743aee0c3982f0079e6553aabc6aa39401d2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:32:14 UTC |
| 4247663 | Michael Niedermayer | 24 December 2011, 22:21:40 UTC | asfdec: fix endless loop on EOF Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0d4404ed65e6ebfdf5e3c09f9e3a2a41dde18e4a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:32:04 UTC |
| 462ecdb | Michael Niedermayer | 24 December 2011, 21:06:25 UTC | sierravmd: limit packetsize to the amount that could be read. Fixes huge allocations. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 47c4713a23d271eedd2eb2c02daa70cb0ea4e0ac) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:57 UTC |
| 6210d62 | Michael Niedermayer | 24 December 2011, 21:03:59 UTC | vmdav: check that theres enough space for a chunk remaining. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2278ecc434d390bccd32a083a12ab964a6b7b0ce) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:46 UTC |
| a1666ae | Michael Niedermayer | 24 December 2011, 20:26:52 UTC | rmdec: Avoid allocating huge packets Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 66f71f3b5e2e7b6e5049bd9831c371e16aff8a53) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:35 UTC |
| f690457 | Michael Niedermayer | 24 December 2011, 19:27:54 UTC | mpeg4videodec: Fix division by zero in mpeg4_decode_sprite_trajectory() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit fc5c49ab3247533e0a5cb203cf7122143389eb5c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:24 UTC |
| adf0c1c | Michael Niedermayer | 24 December 2011, 18:57:18 UTC | rpl: Fix near infinite loop in index reading due to missing eof check. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 43abef9fde0cf87153cc9031cad61f75b02cfa01) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:16 UTC |
| 3073564 | Michael Niedermayer | 24 December 2011, 05:17:12 UTC | j2kdec: Fix crash in get_qcx Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 282bb02839b1ce73963c8e3ee46804f1ade8b12a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:31:06 UTC |
| 5e3389b | Michael Niedermayer | 24 December 2011, 04:06:20 UTC | j2kdec: Check curtileno for validity Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3eedf9f716733b3b4c5205726d2c1ca52b3d3d78) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:30:59 UTC |
| f41e935 | Michael Niedermayer | 24 December 2011, 04:03:04 UTC | j2kdec: Check for interger overflow in tile array allocation Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3132999fdb57d8d3ba5e08a4dc1b3661e885c04d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:30:47 UTC |
| 897088d | Michael Niedermayer | 24 December 2011, 03:59:25 UTC | j2kdec: fix division by zero, check tile dimensions for validity Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 628c9dcca3fb3f46f960f0df8236591653c6e512) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:30:32 UTC |
| 7dbdf02 | Michael Niedermayer | 24 December 2011, 02:55:58 UTC | lzo: fix memcpy_backptr() with 0 offset Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 58c41799ab6b52df86b6afe23304f34b62741326) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:30:25 UTC |
| f217712 | Jean First | 22 December 2011, 21:26:21 UTC | libopenjpeg: support decoding with bits per pixel greater than 8 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Approved-by: Alex Zhukov (cherry picked from commit 0d4a77472ad8a4d194e93379a992f66c33fbf144) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:30:08 UTC |
| a9de82a | Michael Niedermayer | 23 December 2011, 22:59:10 UTC | avio: fix handling of , in urls Fixes Ticket805 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ad9e0ed170234bc6c5660f96752777965081163e) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:29:21 UTC |
| 340fee0 | Carl Eugen Hoyos | 23 December 2011, 10:39:41 UTC | Release buffers after encoding svq1. Fixes ticket #820. (cherry picked from commit 8e88145d0b43a4572c1c13431c4f7ba644547c80) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:27:59 UTC |
| a554673 | Carl Eugen Hoyos | 23 December 2011, 10:38:37 UTC | Fix a possible endless loop when decoding aac. Fixes ticket #789. (cherry picked from commit e5de9289232c5b14572fa13e2435f9adb0b0f1ec) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:27:49 UTC |
| 3aa8966 | Alexander Strange | 12 December 2011, 23:13:39 UTC | h264: Fix a possible overread in decode_nal_units() Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit bc6a3bd4a544608211f006e2d2868cbed4e1fde6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:27:36 UTC |
| ed0dc01 | Michael Niedermayer | 23 December 2011, 04:58:32 UTC | h264: Decode short VUI without error Fixes 47j9R7PXBep.mov Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit ae7a6441df26b5dd921af95677ec5e6dd35dc970) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:27:02 UTC |
| 4a4e4b8 | Sergey Radionov | 23 December 2011, 03:37:48 UTC | w32thread: call ResetEvent() in pthread_cond_broadcast(). Also add "volatile" to broadcast flag (since it is used from multiple threads). Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit 01eb9805f37835e20501134ae26e379140fe3239) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:26:47 UTC |
| 3363644 | Michael Niedermayer | 23 December 2011, 00:51:47 UTC | udp: support non blocking reads with fifo Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9f50dafe9025555f11e66e3b09cf3db2cd53cfb2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:26:26 UTC |
| 3710f0b | Michael Niedermayer | 23 December 2011, 00:17:18 UTC | udp: Replace double select() by select+mutex+cond. When no data was available both the buffer thread as well as the main thread would block in select(), when data becomes available both should move forward and as data is read in the buffer thread the main thread would block in select() later the read data was put in the fifo but the main thread still would be blocked in select() until either the timeout or another packet would come in. This is solved in this commit by using a mutex and a condition variable Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit bc900501e0e2002e40d2d0c87b5a98b913b2d1a2) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:26:20 UTC |
| 12d0e44 | Michael Niedermayer | 23 December 2011, 00:41:15 UTC | udp: return circular buffer error if such error happened. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3dcbafc777513621e423c2f23b1725559230383d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:26:06 UTC |
| 857d64a | Michael Niedermayer | 22 December 2011, 23:18:36 UTC | fifo: Make writes atomic. Prior to this a X bytes write could be seen as less than X bytes being available if the check was done at an unfortunate moment. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9eb0d8bab1c475edf73c36146d1c3d31ea47f997) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:25:53 UTC |
| a644934 | Gaurav Narula | 12 December 2011, 14:54:54 UTC | kvmc: fix invalid reads Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit ad3161ec1d70291efcf40121d703ef73c0b08e5b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:25:47 UTC |
| 89cf156 | Paul B Mahol | 21 December 2011, 19:27:53 UTC | adpcm: fix IMA SMJPEG decoding Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit 01a01bf8bdafab1c81c3039850aba042b247626f) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:25:03 UTC |
| 4f94de8 | Janne Grunau | 21 December 2011, 12:07:54 UTC | pthreads: reset active_thread_type when slice thread_init returrns early (cherry picked from commit f77f640b3035d357a6c6ffcea243c7ea0d8ebc67) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 21:24:57 UTC |
| 9665ccd | Justin Ruggles | 21 December 2011, 21:09:11 UTC | ra144enc: zero the reflection coeffs if the filter is unstable fixes use of uninitialized values if the filter is still unstable after using the previous frame lpc coefficients. (cherry picked from commit 9a3f10695a011861dcf5a649e3e72580b1a4eed4) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 20:51:53 UTC |
| 8dce2dd | Paul B Mahol | 19 December 2011, 00:16:11 UTC | lavf: Add SMJPEG demuxer. Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a4209ad6313b8b40fed2bfc7e3865cf54d4c1022) Conflicts: Changelog doc/general.texi libavformat/version.h Signed-off-by: Michael Niedermayer <michaelni@gmx.at> | 03 January 2012, 20:51:53 UTC |
