sort by:
Revision Author Date Message Commit Date
9b6080f mxfdec: Fix some buffer overreads caused by the misuse of AVPacket related functions. (cherry picked from commit 0c46e958d1fd3817b8e9fa048d0450d509c80378) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:02:29 UTC
190807a 4xm: fix signed overflow Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 84dda407628e298f33d610e9e04a8b2945d24665) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:02:17 UTC
33029d7 wmavoice: fix a signed overflow Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit ba3f07d0611d9a6c10eaa90b3c058ecdffe76676) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:02:13 UTC
c419500 mpegvideo_enc: fix a signed overflow Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 05795f35be4b479bfa8d60ed3eb13e0f89e439c0) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:02:08 UTC
f65e396 crc: fix signed overflow This fixes a signed overflow from i << 24 when i == 255 by making i unsigned. The result of the shift is already assigned to an variable of unsigned type. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 8b19ae07616bbd18969b94cbf5d74308a8f2bbdf) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:02:03 UTC
115d88c h264pred: use unsigned types for pixel values, fix signed overflows Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 60f10e0ad37418cc697765d85b0bc22db70f726a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:48 UTC
a650459 qtrle: check for out of bound writes. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7fb92be7e50ea4ba5712804326c6814ae02dd190) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:23 UTC
adb12c4 xxan: check for out of bound accesses Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a68a6a4fb19caecc91d5f7fe3ef4f83f6d3c4586) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:15 UTC
ca58b21 txd: check for out of bound reads. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e182de9a98272fbe4f368000911191aaeb0d6fb3) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:11 UTC
67c46b9 qtrle: check for invalid line offset Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a4ed7c3fe9f99b89f86b65710d8855dc572f1a25) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:07 UTC
7ab0b6b vqavideo: check for out of bound reads. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6d45702f7f257c1cfcd3ce3287bf258854528a4a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:01:04 UTC
b832e53 vqa: fix double free on corrupted streams Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e3123856c79c36507772ada1bcda6cfe36a1e297) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:58 UTC
2fdbc1d vqavideo: check for invalid/unsupported version Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b226af39107f09cd650875388250f4968eea54db) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:54 UTC
5415c48 eamad: release the reference frame on video size changes Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6c1fb3e7631178c2a45c6c41b9b8d9ee3a5298fc) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:49 UTC
79bafbb eamad: check for out of bound reads when doing MC Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit da35797359cec148f3fe59894c62727b0422d75a) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:43 UTC
7b3c851 eamad: avoid NULL derefence when missing the reference frame. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6e20554a6d33e92b81dc3cfed6082e03bff2a7f8) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:38 UTC
1b6e643 eatgv: fix pointer arithmetic overflows. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6bfe0d4c3d7de11e859ea6720b011cf5fdf5ef03) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:34 UTC
4474051 eatgv: fix out of bound reads on corrupted motions vectors. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 09302a897d1990b1338f049fcd29638d736b8823) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:29 UTC
1646d2d eamad: clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 74b9c598396f76407c6b3841c10bc67ddddb2a98) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:23 UTC
edc9422 lavf: fix signed overflow in avformat_find_stream_info() On the first iteration through this code, last_dts is always INT64_MIN (AV_NOPTS_VALUE) and the subtraction overflows in an invalid manner. Although the result is only used if the input values are valid, performing the subtraction is still not allowed in a strict environment. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit a31e9f68a426f634e002282885c6c2eb1bfbea44) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:18 UTC
f7be632 vp8: fix signed overflows In addition to avoiding undefined behaviour, an unsigned type makes more sense for packing multiple 8-bit values. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit bb59156606e00057a706ed30165bc7329db3823f) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:12 UTC
4ba0e03 motion_est: fix some signed overflows Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit e708afd3c026a9eb547dab07781320a7e2564312) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:09 UTC
37ce6ba dca: fix signed overflow in shift Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 559c244d42be7a02c23976216b47fd63b80d6c7f) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 04 November 2011, 00:00:04 UTC
c2c83dc aacdec: fix undefined shifts Since nnz can be zero, this is needed to avoid a shift by 32. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit d12294304acd82cb219e3f66ca9cd6efb2194fa4) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:59:58 UTC
4c5cdb4 put_bits: fix invalid shift by 32 in flush_put_bits() If flush_put_bits() is called when the 32-bit buffer is empty, e.g. after writing a multiple of 32 bits, and invalid shift by 32 is performed. Since flush_put_bits() is called infrequently, this additional check should have negligible performance impact. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit ac6eab1496aad6f8b09deabbef4fe5fd829e142d) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:59:53 UTC
06b15b3 h264: fix the size of PPS::chroma_qp_table Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e588a5c2d418fdcf08ece076a2642de44f444d55) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:59:41 UTC
614ef0d h264: fix fill_colmap() to not store entries mbaff style when the reference is not mbaff at all Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a3ba542af39ba4425cbb44d2a0ae09c212b40001) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:59:34 UTC
5d2b600 mpegvideo: fix position of bottom edge. It was wrong in colorspaces where horizontal and vertical chroma subsampling are not the same, e.g. 422. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:58:35 UTC
b491c15 h254: explicitly initialize bit depth/chroma idc Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:53:56 UTC
2809f4a qcelp: check output buffer size before decoding (cherry picked from commit e43dd3d2a8e106169e707484090a2d973ece2184) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:43:10 UTC
c2d017e sipr: fix the output data size check and only calculate it once. (cherry picked from commit 1b5a189f06879338088809b3049ea7620f4e7e78) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:42:59 UTC
4f45967 ff_dv_frame_profile2: Check input buffer size. Based on code by DivX, Inc. / drffmpeg Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 51b0694bc051cda2bfed048a35e694d1047c6ef0) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:42:46 UTC
78eab18 qdm2: check output buffer size before decoding (cherry picked from commit 7d49f79f1cd47783a963a757a6563b9cac29db62) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:42:37 UTC
902e959 MAINTAINERS: new ffplay maintainer Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit cffd20b90ee6f35e37cdb51dd94e6b2174fd31b6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:40:43 UTC
d33a1d6 riff: map 0x0038 to amrnb, works on http://video.mopoto.com/4/40/407/40709.avi (cherry picked from commit 3ebab62fc67591fd9313fad32892d7d32e805422) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:40:21 UTC
fc8c0ee mpc8: check output buffer size before decoding (cherry picked from commit 5674d4b0a35a34b75e3533a8580e0b5a0a8895a7) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:40:13 UTC
490617b mpc7: return error if packet is too small. (cherry picked from commit 8290d1f38b438f1b070de67645c8b4a42014c7ac) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:40:03 UTC
b833859 mpc7: check output buffer size before decoding (cherry picked from commit c8b5c4d27409dfdcec80868686b173ba446c998b) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 03 November 2011, 23:39:47 UTC
7d52ed6 vaapi: fix VC-1 decoding (reconstruct bitstream TTFRM correctly). (cherry picked from commit 825dd135d829d85778e6c37f685a6088fef01b2e) 12 October 2011, 09:27:11 UTC
f74d1c6 h264: do not let invalid values in h->ref_count after a decoder reset. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0333d234b0355b375762447e93674e3fe3c5bff1) 11 October 2011, 19:34:15 UTC
e49abd1 libx264: Fix loop failure due to bufsize becoming 0 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 751a4efd4d754b15ebc6027b09051f27860bb1e8) 11 October 2011, 19:34:15 UTC
414409e configure: remove bashism equality check for target_os. (cherry picked from commit e39be59b85de63e036bd6db9b79a9a9f29a838f7) 11 October 2011, 19:34:15 UTC
09a2884 H264: hotfix for speedloss on frame threading and h264 files with slices. This fix is not ideal as it still limits the multithreading on field pictures to the 2nd field only. Ill try to fix it properly to allow both fields to decode concurrently but this needs more work. This bug exists since and was caused by: commit ea6331f8bbaf3343faec6ffe77a6218a016a3af5 Author: Ronald S. Bultje <rsbultje@gmail.com> Date: Mon Jun 20 10:24:33 2011 -0400 h264-mt: fix deadlock in packets with multiple slices (e.g. MP4). (cherry picked from commit eaa21b6870ba8bba4b0370e91f1941307c1c9681) 11 October 2011, 19:34:14 UTC
b981c5d mpegtsenc: Lift limit on PMT PID Fixes Ticket518 (cherry picked from commit bf5c3bac51e422580aad011fcd927c818542f054) 11 October 2011, 19:34:14 UTC
60171d8 Do not set codec_tag property for matroska muxers. Fixes ticket #8, #537. 09 October 2011, 18:07:41 UTC
a39b603 lavf/utils: fix overestimation of the rational number density. Fixes Ticket498 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 08 October 2011, 23:14:21 UTC
09d8f51 Update for 0.8.5 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 02 October 2011, 20:02:45 UTC
b89a0c9 h264: fix intra 16x16 mode check when using mbaff and constrained_intra_pred. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a4fd95b5d511384ed3ce388d8d20a16b1c4c0530) 02 October 2011, 19:30:21 UTC
efedf09 h264: check for invalid bit depth value. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit c2b7f7748be447e1446f63b13da472ba7e00f329) 02 October 2011, 19:30:14 UTC
46edaba h264: add entries for 11 and 12 bits in ff_h264_chroma_qp[][] Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 27d3361e34cf19ad5c0bfb7cfacae0db99b26064) 02 October 2011, 19:30:08 UTC
bfd7238 h264: fix the check for invalid SPS:num_ref_frames. This patch set the limit to 16. For information, thoses previous commits: 41f7e2d11d2dca23842ee89d530ca9fa15cec9d8 5cbb0e70a0a2ee99eb3cb09e837b9a1f7355b9bc assumed it was either 30 or 32. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit bcf881a6858760ecbd9ff4352a38813dc4232dd6) 02 October 2011, 19:29:58 UTC
cf00529 h264: do not let invalid values in h->ref_count on ff_h264_decode_ref_pic_list_reordering() errors. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 2428b53f6d306d8d71dec34fa7b0af733d76cfac) 02 October 2011, 19:29:51 UTC
6b99872 Reject video with non multiple of 16 width/height in the 4xm decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit db5b4875514eb7740844f514dbf236c9179a6a93) 02 October 2011, 19:29:45 UTC
55a0708 4xm decoder: fix data size for i2 frames. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 0a19b4b0bae772cac7f8341e94c319c96356ee69) 02 October 2011, 03:48:40 UTC
54a1e7b 4xm decoder: print some error messages in case of errors. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1008f639e2ebaa2b3d48ac765ca49c8869042d75) 02 October 2011, 03:48:40 UTC
2c282e9 Check for out of bound accesses in the 4xm decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9c661e952fbcbf044709f9a7031c68cc4860336b) 02 October 2011, 03:48:26 UTC
55a96a9 Prevent block size from inreasing in the shorten decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b399cbfba5d901608c18e1a2d48a24c30541a634) 02 October 2011, 03:48:13 UTC
64a9004 Check for out of bound reads in PTX decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 581898ae882dc37967b689b6ea5f2b2a9acd257a) 02 October 2011, 03:48:07 UTC
f421b53 Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffers used in 4xm decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 90a69b2f61cbd2d58723d712bdf283e5e56b2ea2) 02 October 2011, 03:47:51 UTC
d2a276a Fix the check for missing references in ff_er_frame_end() for H264. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 02 October 2011, 03:47:46 UTC
535112b Prevent NULL dereference when the huffman table is invalid in the 4xm decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4a8ff0636d67c6df059f2ae2df49ad1181de14ca) 02 October 2011, 03:45:01 UTC
2e342df Fix use of uninitialized memory in 4X Technologies demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a1876e0072aa0c69f037e0cafaca1a54bf2e189b) 02 October 2011, 03:45:01 UTC
86491c5 h264: increase ref_poc size to 32 as it can be per field. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 8c851ef5a81fb0429453c43fdcfc974ce1b6e447) 02 October 2011, 03:44:42 UTC
3e0dbb8 h264: set unused ref_counts to 0 as a precautionary meassure. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3af2de76ac8b7aa762e4ee129ec29140e6247d81) 02 October 2011, 03:44:35 UTC
2cd7580 Remove Chnagelog it has nothing to do with reality Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 01 October 2011, 20:45:25 UTC
b0804f3 Merge remote-tracking branch 'qatar/release/0.7' into release/0.8 * qatar/release/0.7: (73 commits) Update Changelog for 0.7.2 release Update RELEASE file for 0.7.2 lavf: do not set codec_tag for rawvideo fate: allow testing with libavfilter disabled fate: separate lavf-mxf_d10 test from lavf-mxf Fix memory (re)allocation in matroskadec.c, related to MSVR-11-0080. movenc: fix NULL reference in mov_write_tkhd_tag movenc: create an alternate group for each media type flvdec: Check for overflow before allocating arrays ppc: fix some pointer to integer casts ppc: fix 32-bit PIC build rv34: Check for invalid slice offsets rv34: Fix potential overreads rv34: Avoid NULL dereference on corrupted bitstream rv10: Reject slices that does not have the same type as the first one lavf: Fix context pointer in av_open_input_stream when avformat_open_input fails oggdec: fix out of bound write in the ogg demuxer Fixed size given to init_get_bits(). smacker: fix a few off by 1 errors Check for invalid VLC value in smacker decoder. ... Conflicts: RELEASE libavcodec/avs.c libavcodec/ppc/asm.S libavcodec/rv34.c libavcodec/xan.c libavdevice/alsa-audio.h libavformat/flvdec.c libavformat/gxf.c libavformat/utils.c libswscale/x86/swscale_template.c tests/ref/lavf/mov tests/ref/lavf/mxf Merged-by: Michael Niedermayer <michaelni@gmx.at> 01 October 2011, 20:42:41 UTC
77a7092 fate: fix motion pixels checksum change caused by backported bugfix Signed-off-by: Michael Niedermayer <michaelni@gmx.at> 01 October 2011, 20:28:16 UTC
8033126 avienc: Add a limit on the number of skiped frames muxed in a row. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 9cb9e39c41959961bdb5a1fd51cdd25e10c050f3) 01 October 2011, 19:04:04 UTC
00f6cbb vf_scale.c: propagate error code Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 8447703c16b9e6fdc48ce92553ec1cfa2e359b84) 01 October 2011, 19:03:57 UTC
f144a70 Fix out of bound reads/writes in the TIFF decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5ca5d432e028ffdd4067b87aed6702168c3207b6) 01 October 2011, 19:03:49 UTC
b08df31 Check for out of bound writes in the QDM2 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4a7876c6e4e62e94d51e364ba99aae4da7671238) 01 October 2011, 19:03:45 UTC
e0fb22c Fix out of bound reads in the QDM2 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 491eaf35ae1f9b619441314bec33766e31580184) 01 October 2011, 19:03:40 UTC
8020457 Fix out of bound reads due to integer overflow in the ADPCM IMA Electronic Arts EACS decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 346876ec168affe7c21be88d8f1acf1a75cc8409) 01 October 2011, 19:03:35 UTC
e8fd4a4 Check for out of bound reads in the Electronic Arts CMV decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit a5d46235f3f70f0b620f8e54649ece45ecc5b170) 01 October 2011, 19:03:31 UTC
d950461 Prevent NULL dereferences when missing the reference frame in the Electronic Arts CMV decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 113d7be62497c4e59db8f224fdb7f0a90cf17d03) 01 October 2011, 19:03:26 UTC
df39708 Fix potential pointer arithmetic overflows in the Electronic Arts CMV decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e9064c9ce8ed18c3a3aab61e58e663b8f5b0c551) 01 October 2011, 18:59:57 UTC
1f2a93c Prevent infinite loop in the ANM decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 39993860e1525ca5d1b07521865b7e9e1b294ed7) 01 October 2011, 18:59:49 UTC
67b7049 Fix double free on error in Deluxe Paint Animation demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit d39d7122e34d2cf994d6dc474fe0c8bee2f7fcfd) 01 October 2011, 18:59:42 UTC
3b840fa Check for out of bound reads in AVS decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 7afe9e5638242a3210a0fc378e34e3af41e29176) 01 October 2011, 18:59:34 UTC
fa79af6 Check for out of bound writes in the avs demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5d44c061cf511d97be5fac8d76be2f3915c6e798) 01 October 2011, 18:59:28 UTC
c23d526 Check for corrupted data in avs demuxer. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 1cce7def0a8eff2e7db294b7d195a0fb1a5043b0) 01 October 2011, 18:59:20 UTC
932b5f3 lavf: Avoid using av_malloc(0) in av_dump_format On OS X, av_malloc(0) returns pointers that cause crashes when freed. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit e81e5e8ad2bb5746df0c343c396019aca165cf66) 01 October 2011, 18:57:04 UTC
b8ab1ad avcodec: reject audio packets with NULL data and non-zero size There is no valid reason the user should ever send such packets in the first place, but the documentation for CODEC_CAP_DELAY states that the codec is guaranteed not to get a NULL packet unless that capability is set. That isn't true without preventing this case. (cherry picked from commit 6326afd5e90cfed9df08b652a1cd6f6a948c239a) 01 October 2011, 18:56:18 UTC
107ea30 Fix out of bound writes in fix_bitshift() of the shorten decoder. The data pointers s->decoded[*] already take into account s->nwrap. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit f42b3195d3f2692a4dfc0a8668bb4ac35301f2ed) 01 October 2011, 18:54:48 UTC
375bd0c Check for out of bound reads in the Tiertex Limited SEQ decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5d7e3d71673d64a16b58430a0027afadb6b3a54e) 01 October 2011, 18:54:36 UTC
9b1bf08 Fix the size of workspace buffers in the motion pixels decoder. Some buffers must be mod 4 in width and/or height. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 62234a4d3a30f3949694781ef8a941ef55b210fa) 01 October 2011, 18:54:31 UTC
376b099 Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer used in motion pixels decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit e60619f9b4bdaf9af46887cdb2c86454567b4a61) 01 October 2011, 18:54:26 UTC
6e774cf Check for out of bounds writes in the Delphine Software International CIN decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 3035c4034b6af3ad47f921e3385196e1b9d44ddf) 01 October 2011, 18:54:21 UTC
18cfe02 Check for out of bounds reads in the Delphine Software International CIN decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 8e5f093c2cf13eab3d68d893bf8f30c56ba4e733) 01 October 2011, 18:54:17 UTC
603cb03 Check for out of bound reads in the QuickDraw decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 44e2f0c3cd2df68659e07ed3d5eab4974794eb33) 01 October 2011, 18:54:12 UTC
2451228 mov: Only touch extradata in mov_read_extradata() if codec_id is what we expect Extradata should only be parsed from the avss, fiel, jp2h and alac atoms for AVS, MJPEG, Motion JPEG 2000 and ALAC respectively. This also fixes the mov demuxer coming up with bogus extradata for some AVC-Intra samples due to the presence of fiel atoms. (cherry picked from commit e571305a71494af195891e314b05936f040f89d3) 01 October 2011, 18:53:53 UTC
f9efe1d Check for out of bound reads in xan_huffman_decode() of the xan decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit c8b835954ae4aef797112afda3b52f8dfe3c7b74) 01 October 2011, 18:53:44 UTC
626f11b dca: clear inactive subbands only once in qmf_32_subbands() Writing zeros to the high entries in the array need only be done once as the cutoff position is constant throughout the loop. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit bf00a73ace9b1aba790b75dcb26d43adfceb769f) 01 October 2011, 18:52:09 UTC
8d61c68 vf_unsharp: set default chroma size value to 5x5 The previous default value 0x0 was not good, since it is not even valid. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 1ee20141900c98f9dc25eca121c66c3ff468c1e4) 01 October 2011, 18:51:52 UTC
d155fde vf_unsharp: fix out-of-buffer read In apply_unsharp(), when y is >= height, prevent out-of-buffer reading from src, read from the last buffer line in src2 instead. The check was implemented in the original unsharp libmpcodecs code and lost in the port. This also fixes output discrepancy between the two filters. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 998e8519efbc772994c5ba19c0d39573998be9db) 01 October 2011, 18:51:43 UTC
d414c77 Check for unsupported parameters in ff_j2k_dwt_init() Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit b4483a531a139f304f4370f470325facb107202f) 01 October 2011, 18:51:35 UTC
dc9b708 Check for out of bound reads in jpeg 2000 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 02660a871301adada14b0e0fe64c66f73c2e4541) 01 October 2011, 18:51:28 UTC
f8eabfc Prevent calling init_vlc() with invalid parameters in motionpixels decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 41b7389cade702383e59343561776f83bb26e17f) 01 October 2011, 18:51:17 UTC
14617fa Prevent NULL dereference when the palette is missing in the xan decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 56ee5a9ad1b385129c40ba4773f99bc5943ae8af) 01 October 2011, 18:51:12 UTC
485b431 Fixed out of bound accesses in xan_unpack() of the xan decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5279141c1d7a72c467b7e0666fc2275cbcec4668) 01 October 2011, 18:51:08 UTC
back to top