| d912a30 | Shitiz Garg | 14 December 2011, 12:59:21 UTC | 4xm: Add a check in decode_i_frame to prevent buffer overreads Fixes bugzilla #135 Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit 355d917c0bd8163a3f1c7d4a6866dac749efdb84) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 23 December 2011, 21:27:02 UTC |
| 8dba560 | Justin Ruggles | 22 November 2011, 18:37:52 UTC | wma: initialize prev_block_len_bits, next_block_len_bits, and block_len_bits. The initial values are not checked against the number of block sizes. Initializing them to frame_len_bits will result in a block size index of 0 in these cases instead of something that might be out-of-range. Fixes Bug 81. (cherry picked from commit 05d1e45d1f42cc90d1f2f36c546d0096cea126a8) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 23 December 2011, 21:27:02 UTC |
| 7ce7280 | Reinhard Tartler | 23 December 2011, 15:00:17 UTC | Update RELEASE file for 0.7.3 | 23 December 2011, 15:00:17 UTC |
| 851098c | Reinhard Tartler | 01 December 2011, 17:48:33 UTC | swscale: #include "libavutil/mathematics.h" this file uses the M_PI macro since 4e74187db2f5db52f88729efc662df9d6bc763e1, so include the correct header directly. Signed-off-by: Reinhard Tartler <siretart@tauware.de> (cherry picked from commit 5089ce1b5abe2ecbbfd7235aeb0ad47ba38305c1) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 23 December 2011, 14:58:31 UTC |
| bba7092 | Reinhard Tartler | 04 December 2011, 09:10:33 UTC | vp3dec: Check coefficient index in vp3_dequant() Based on a patch by Michael Niedermayer <michaelni@gmx.at> Fixes NGS00145, CVE-2011-4352 Found-by: Phillip Langlois Signed-off-by: Reinhard Tartler <siretart@tauware.de> (cherry picked from commit 8b94df0f2047e9728cb872adc9e64557b7a5152f) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 23 December 2011, 14:56:01 UTC |
| 0eca0da | Michael Niedermayer | 18 November 2011, 18:10:21 UTC | svq1dec: call avcodec_set_dimensions() after dimensions changed. Fixes NGS00148, CVE-2011-4579 Found-by: Phillip Langlois Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 6e24b9488e67849a28e64a8056e05f83cf439229) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 23 December 2011, 14:55:38 UTC |
| 38a511e | Martin Storsjö | 24 November 2011, 22:45:16 UTC | swscale: Readd #define _SVID_SOURCE This was removed erroneously in 046f081b46c8479820409cf8f530b988221bd15b. This define still is necessary for getting MAP_ANONYMOUS defined on linux/glibc, despite the define reshuffling done in that commit. Without MAP_ANONYMOUS defined, the mprotect calls for setting the generated mmx2 scaler code pages executable are left out, causing crashes if that codepath is chosen. This patch fixes scaling from 192x144 to 320x240 with -sws_flags fast_bilinear, which crashes on linux at the moment. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit f32dfad9dc64acf0fd1bb867e127a9efe6380676) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 05 December 2011, 20:12:11 UTC |
| ba4b08b | Thierry Foucu | 17 November 2011, 17:39:52 UTC | vp6: Fix illegal read. Found with Address Sanitizer Signed-off-by: Alex Converse <alex.converse@gmail.com> (cherry picked from commit e0966eb140b3569b3d6b5b5008961944ef229c06) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:21:09 UTC |
| 67a7ed6 | Alex Converse | 03 November 2011, 22:55:52 UTC | vp6: Fix illegal read. (cherry picked from commit 2a6eb06254df79e96b3d791b6b89b2534ced3119) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:20:49 UTC |
| c76505e | Laurent Aimar | 23 September 2011, 20:36:11 UTC | vp6: Reset the internal state when aborting key frames header parsing It prevents leaving the state only half initialized. Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit a72cad0a6c05aa74940101e937cb3dc602d7d67b) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:20:28 UTC |
| 30c08e2 | Laurent Aimar | 21 September 2011, 18:46:32 UTC | vp6: Check for huffman tree build errors Signed-off-by: Janne Grunau <janne-libav@jannau.net> (cherry picked from commit 066fff755a5d8edc660c010ddb08474d208eeade) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:20:10 UTC |
| 7367cbe | Dustin Brody | 16 August 2011, 20:46:34 UTC | vp6: partially propagate huffman tree building errors during coeff model parsing and fix misspelling Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit f913eeea43078b3b9052efd8d8d29e7b29b39208) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:19:29 UTC |
| 28acce2 | Thierry Foucu | 19 November 2011, 01:36:50 UTC | imgutils: Fix illegal read. Found with address sanitizer. Signed-off-by: Alex Converse <alex.converse@gmail.com> (cherry picked from commit c693aa6f71b4f539cf9df67ba42f4b1932981687) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 08:18:17 UTC |
| 7347205 | Justin Ruggles | 14 September 2011, 17:57:04 UTC | qdm2: check output buffer size before decoding (cherry picked from commit 7d49f79f1cd47783a963a757a6563b9cac29db62) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 07:55:55 UTC |
| 0d93d5c | Laurent Aimar | 30 September 2011, 22:45:04 UTC | Fix out of bound reads in the QDM2 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 5a19acb17ceb71657b0eec51dac651953520e5c8) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 07:55:55 UTC |
| a31ccac | Laurent Aimar | 30 September 2011, 22:45:05 UTC | Check for out of bound writes in the QDM2 decoder. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com> (cherry picked from commit 291d74a46d32183653db07818c7b3407fd50a288) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 04 December 2011, 07:44:09 UTC |
| 494cfac | Laurent Aimar | 11 September 2011, 17:17:45 UTC | vmd: fix segfaults on corruped streams Signed-off-by: Janne Grunau <janne-libav@jannau.net> Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 03 December 2011, 20:07:07 UTC |
| 07624cf | Anton Khirnov | 19 November 2011, 07:51:26 UTC | Add a version bump and APIchanges entry for avcodec_open2 and avformat_find_stream_info. | 19 November 2011, 09:22:27 UTC |
| d6f7636 | Mans Rullgard | 15 November 2011, 22:33:49 UTC | lavf: fix multiplication overflow in avformat_find_stream_info() Converting to double before the multiplication rather than after avoids an integer overflow in some cases. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 52767d891c665ab1124fe4ce82d99b59673de7d2) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 19 November 2011, 09:22:27 UTC |
| e297459 | Anton Khirnov | 14 July 2011, 01:08:53 UTC | lavf: fix invalid reads in avformat_find_stream_info() (cherry picked from commit e358f7ee90fec591348ca05dff94ebaf4c1a098b) Conflicts: libavformat/utils.c Signed-off-by: Anton Khirnov <anton@khirnov.net> | 19 November 2011, 09:22:27 UTC |
| afe2726 | Anton Khirnov | 22 May 2011, 17:24:59 UTC | lavf: add avformat_find_stream_info() It supports passing options to codecs. (cherry picked from commit a67c061e0f3b55ffcc96f336fc0998e44b86c8e4) Conflicts: libavformat/utils.c Signed-off-by: Anton Khirnov <anton@khirnov.net> | 19 November 2011, 09:22:27 UTC |
| 23f0d0f | Baptiste Coudurier | 09 August 2011, 06:41:50 UTC | lavc: fix parentheses placement in avcodec_open2(). Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 1d36fb13b088f55ece155153fb6ca8ea278fc837) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 19 November 2011, 09:22:27 UTC |
| 47953c3 | Anton Khirnov | 22 May 2011, 12:10:49 UTC | lavc: introduce avcodec_open2() as a replacement for avcodec_open(). Adds support for decoder-private options and makes setting other options simpler. (cherry picked from commit 0b950fe240936fa48fd41204bcfd04f35bbf39c3) Conflicts: libavcodec/avcodec.h Signed-off-by: Anton Khirnov <anton@khirnov.net> | 19 November 2011, 09:22:26 UTC |
| 58decdb | Reinhard Tartler | 30 September 2011, 16:14:12 UTC | Update Changelog for 0.7.2 release | 30 September 2011, 16:14:12 UTC |
| 35feff4 | Reinhard Tartler | 30 September 2011, 13:44:19 UTC | Update RELEASE file for 0.7.2 | 30 September 2011, 13:45:45 UTC |
| e257eeb | Mans Rullgard | 17 July 2011, 15:02:33 UTC | lavf: do not set codec_tag for rawvideo If the demuxer did not set a codec_tag, there is none and inventing one makes no sense. This change stops the rawvideo "decoder" over-writing user-supplied pixfmt with one derived from the codec_tag. The pixfmt-codec_tag-pixfmt round-trip is lossy since several pixfmts map to the same codec_tag. This fixes fate-lavf-pixfmt with avfilter disabled. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit bb416bd68ca46b4a3f1901533064d56a6b8ac95e) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 30 September 2011, 13:37:05 UTC |
| 9bb7a12 | Reinhard Tartler | 27 September 2011, 22:50:08 UTC | fate: allow testing with libavfilter disabled This declares dependencies to skip tests using libavfilter when it is disabled. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 908f12f342341785bf0458e88a06d97a1af90339) Conflicts: configure tests/Makefile tests/fate.mak Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 30 September 2011, 13:37:05 UTC |
| 783f45d | Mans Rullgard | 17 July 2011, 14:40:05 UTC | fate: separate lavf-mxf_d10 test from lavf-mxf Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 0218808d4980b794c78f57931d671508aed500b5) required to unbreak fate with --disable-avfilter Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 30 September 2011, 13:37:05 UTC |
| a2443e8 | Michael Niedermayer | 28 July 2011, 12:59:54 UTC | Fix memory (re)allocation in matroskadec.c, related to MSVR-11-0080. Whitespace of the patch cleaned up by Aurel Some of the issues have been reported by Steve Manzuik / Microsoft Vulnerability Research (MSVR) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 956c901c68eff78288f40e3c8f41ee2fa081d4a8) Further suggestions from Kostya <kostya.shishkov@gmail.com> have been implemented by Reinhard Tartler <siretart@tauware.de> (cherry picked from commit 77d2ef13a8fa630e5081f14bde3fd20f84c90aec) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 27 September 2011, 22:24:41 UTC |
| 9f9b731 | Anton Khirnov | 19 September 2011, 13:15:56 UTC | movenc: fix NULL reference in mov_write_tkhd_tag st may be NULL when there are more mov streams than AVStreams, e.g. when chapters are present. (cherry picked from commit c92a2a4eb8b883e82871c2415f757153d263b6b3) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 27 September 2011, 18:57:08 UTC |
| ad47a5e | Anton Khirnov | 16 September 2011, 14:06:45 UTC | movenc: create an alternate group for each media type Partially fixes bug 44. (cherry picked from commit 7574cacbd5343bc303ee8333956274716e2444d5) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 27 September 2011, 18:57:08 UTC |
| fed7f5b | Michael Niedermayer | 24 September 2011, 15:57:31 UTC | flvdec: Check for overflow before allocating arrays On allocation, the array length is multiplied by sizeof(int64_t), this prevents the multiplication from overflowing. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit a246cefa75aed2ade315d6d09068aacb6b0fe76b) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 26 September 2011, 17:31:32 UTC |
| dde0fb4 | Mans Rullgard | 25 September 2011, 17:27:47 UTC | ppc: fix some pointer to integer casts Use uintptr_t instead of plain int. Without this change, the comparisons will come out wrong for pointers in certain ranges. Fixes random failures on ppc64. Also fixes some compiler warnings. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit d853e571ad5e7e12c6a68cfde390daced7d85fbb) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 26 September 2011, 17:31:32 UTC |
| ecda54a | Mans Rullgard | 25 September 2011, 11:53:44 UTC | ppc: fix 32-bit PIC build On 32-bit ppc, the GOT pointer must be loaded manually. This adds a "get_got" assembler macro to compute the GOT address. The "movrel" macro is updated to take an additional parameter containing the GOT address since no register is reserved for this purpose on ppc32. These changes have no effect on ppc64 builds. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 6e4a35ced96cdf31a9d3bd82fd147554750af839) Signed-off-by: Reinhard Tartler <siretart@tauware.de> | 26 September 2011, 17:31:32 UTC |
| 2bbb142 | Laurent Aimar | 19 September 2011, 20:48:53 UTC | rv34: Check for invalid slice offsets Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 4cc7732386eb36661ed22d1200339b38a5fa60bc) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| b4a1bf0 | Laurent Aimar | 17 September 2011, 14:56:30 UTC | rv34: Fix potential overreads Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit b4ed3d78cb6c41c9d3ee5918c326ab925edd6a89) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| f0bcba2 | Laurent Aimar | 17 September 2011, 21:43:58 UTC | rv34: Avoid NULL dereference on corrupted bitstream rv34_decode_slice() can return without allocating any pictures. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit d0f6ab0298f2309c6104626787ed73416298b019) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| 28d948a | Laurent Aimar | 17 September 2011, 22:03:08 UTC | rv10: Reject slices that does not have the same type as the first one This prevents crashes with some corrupted bitstreams. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 4a29b471869353c3077fb4b25b6518eb1047afb7) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| 9973ca9 | David Goldwich | 17 September 2011, 11:50:35 UTC | lavf: Fix context pointer in av_open_input_stream when avformat_open_input fails Signed-off-by: David Goldwich <david.goldwich@gmail.com> Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 63d64228a7f31d534e3bcae87cbd37f4a0ae2dd6) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| a3d471e | Laurent Aimar | 11 September 2011, 21:26:12 UTC | oggdec: fix out of bound write in the ogg demuxer Between ogg_save() and ogg_restore() calls, the number of streams could have been reduced. Signed-off-by: Luca Barbato <lu_zero@gentoo.org> (cherry picked from commit 0e7efb9d23c3641d50caa288818e8c27647ce74d) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:33 UTC |
| 54a178f | Laurent Aimar | 09 September 2011, 21:46:00 UTC | Fixed size given to init_get_bits(). init_get_bits() takes a number of bits and not a number of bytes as its size argument. Signed-off-by: Alex Converse <alex.converse@gmail.com> (cherry picked from commit b59efc94347ccf0cbc2ff14a5a9e99819c5bdc4d) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 78cd2e1 | Michael Niedermayer | 13 September 2011, 21:24:56 UTC | smacker: fix a few off by 1 errors stereo & 16bit is untested due to lack of samples Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 5166376f24545207607f61ed8ff4e1b0572ff320) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 0d93b03 | Laurent Aimar | 12 September 2011, 21:49:36 UTC | Check for invalid VLC value in smacker decoder. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 6489455495fc5bfbebcfe3f57e5d4fdd6a781091) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 5b1f79b | Laurent Aimar | 12 September 2011, 21:46:49 UTC | Check and propagate errors when VLC trees cannot be built in smacker decoder. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 9676ffba8346791f494451e68d2a3b37a2918a9b) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 9f391c4 | Laurent Aimar | 12 September 2011, 18:50:34 UTC | Fixed off by one packet size allocation in the smacker demuxer. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit a92d0fa5d234582583d41b67dddecffc2c819573) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 4e7905f | Laurent Aimar | 12 September 2011, 18:50:13 UTC | Check for invalid packet size in the smacker demuxer. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit e055932f5636a82275837968eea9c8fcb5bca474) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 4ee0143 | Laurent Aimar | 11 September 2011, 17:17:40 UTC | ape demuxer: fix segfault on memory allocation failure. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 273aab99bf7be2bcda95dd64101c2317ee0fcb99) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 61ddc82 | Alex Converse | 09 September 2011, 23:10:03 UTC | xan: Add some buffer checks (cherry picked from commit 0872bb23b4bd2d94a8ba91070f706d1bc1c3ced8) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| e6694dc | Laurent Aimar | 09 September 2011, 22:32:12 UTC | Fixed size given to init_get_bits() in xan decoder. (cherry picked from commit 393d5031c6aaaf8c2dda4eb5d676974c349fae85) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 0b9b357 | Kostya Shishkov | 12 September 2011, 07:40:42 UTC | smacker demuxer: handle possible av_realloc() failure. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 47a8589f7bc69d1a29da1dfdfbd0dfa78a9e31fd) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 9b30b7b | Laurent Aimar | 07 September 2011, 19:43:03 UTC | Fixed segfault with wavpack decoder on corrupted decorrelation terms sub-blocks. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 8bfea4ab4e2cb32bc7bf6f697ee30a238c65d296) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 384ed15 | Alex Converse | 09 September 2011, 21:50:33 UTC | cljr: init_get_bits size in bits instead of bytes (cherry picked from commit 0c1f5b93d9b97c4cc3684ba91a040e90bfc760d2) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:32 UTC |
| 6550e2b | Alex Converse | 09 September 2011, 20:26:49 UTC | indeo2: fail if input buffer too small (cherry picked from commit b7ce4f1d1c3add86ece7ca595ea6c4a10b471055) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| af32fa9 | Alex Converse | 09 September 2011, 20:24:19 UTC | indeo2: init_get_bits size in bits instead of bytes (cherry picked from commit 68ca330cbd479111db9cb7649d7530ad59f04cc8) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 07b3c4c | Laurent Aimar | 09 September 2011, 20:04:09 UTC | ffv1: Fixed size given to init_get_bits() in decoder. init_get_bits() takes a number of bits and not a number of bytes as its size argument. Signed-off-by: Alex Converse <alex.converse@gmail.com> (cherry picked from commit 46b004959bb7870a361a57272cd5fa7eea34250b) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 5d4c065 | Alex Converse | 08 September 2011, 18:02:43 UTC | wavpack: Check error codes rather than working around error conditions. (cherry picked from commit dba2b63a98bdcac7bda1a8a2c48950518c075e17) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 4b84e99 | Laurent Aimar | 07 September 2011, 20:02:55 UTC | Fixed invalid access in wavpack decoder on corrupted bitstream. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 55354b7de21e7bb4bbeb1c12ff55ea17f807c70c) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 685940d | Laurent Aimar | 07 September 2011, 20:17:39 UTC | Fixed invalid writes in wavpack decoder on corrupted bitstreams. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit 0aedab03405849962b469277afe047aa2c61a87f) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| aee4612 | Laurent Aimar | 07 September 2011, 21:12:32 UTC | Fixed invalid access in wavpack decoder on corrupted extra bits sub-blocks. Signed-off-by: Martin Storsjö <martin@martin.st> (cherry picked from commit beefafda639dd53fc59c21d8a7cf8334da9a1062) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| a4f2973 | Anton Khirnov | 04 September 2011, 07:56:47 UTC | lavc: fix type for thread_type option It should be flags, not int. (cherry picked from commit fb47997edb9d8ff16fc380d005a08c0545624aa6) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 54f12d2 | Anton Khirnov | 23 August 2011, 05:46:51 UTC | AVOptions: fix av_set_string3() doxy to match reality. Fixes bug 28. (cherry picked from commit e955a682e125d44143415ff2b96a99a4dac78da2) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 1cf3ba8 | Sean McGovern | 25 July 2011, 22:51:02 UTC | cpu detection: avoid a signed overflow 1<<31 overflows because 1 is signed, so force it to unsigned. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit 5938e02185430ca711106aaec9b5622dbf588af3) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| 2b74db8 | Michael Niedermayer | 09 March 2011, 02:30:24 UTC | vf_scale: don't leak SWS context. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 52982dbe474663709033e1ad259f8ff7a5a2eefa) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:31 UTC |
| db5e27f | Alberto Delmás | 25 August 2011, 09:00:37 UTC | VC1: Fix first/last row checks with slices In some places 0/mb_height were used in place of start_mb_y/end_mb_y. Fixes SA00049, SA00058, SA10091, SA10097, SA10131, SA20021, SA30030 Improves PSNR in SA00054, SA00059, SA00060, SA10096, SA10098, SA20022, SA30031, SA30032, SA40012, SA40013 Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit 1cf82cab0840d669198ea76ab0363aa661950647) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 97ce2a2 | Ronald S. Bultje | 24 August 2011, 21:36:16 UTC | vc1: properly zero coded_block[] edges on new slice entry. Previously, we would leave the left edge uninitialized, which led to CBP prediction errors on slice edges, e.g. in SA10098.vc1. (cherry picked from commit d4b9974465baf893e90527a366e7a7411ded1ef8) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| ce8f40a | Jeff Downs | 05 July 2011, 17:20:06 UTC | h264: fix PCM intra-coded blocks in monochrome case Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 6581e161c5f46733a5619208483de29416eb9a51) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 45b3f7c | Jeff Downs | 06 July 2011, 15:54:36 UTC | h264: correct implicit weight table computation for long ref pics Correct computation of implicit weight tables when referencing pictures that are marked for long reference. Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 87cf70eb237e7586cc7399627dafa1b980ec0b7d) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 8ad6555 | Jeff Downs | 05 July 2011, 18:21:54 UTC | h264: correct the check for invalid long term frame index in MMCO decode The current check on MMCO parameters prohibits a "max long term frame index plus 1" of 16 (frame idx of 15) for the "set max long term frame index" MMCO. Fix this off-by-one error to allow the full range of legal values. Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 29a09eae9a827f4dbc9c4517180d8fe2ecef321a) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| b4099a6 | Alex Converse | 16 August 2011, 18:03:26 UTC | aac: Only output configure if audio was found. Audio found is not triggered on a CCE because a CCE alone has no output. Signed-off-by: Luca Barbato <lu_zero@gentoo.org> (cherry picked from commit d8425ed4af6d8fce62ff363cc590f85e57bac06b) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| dec458b | Kostya Shishkov | 17 August 2011, 08:36:33 UTC | rv10/20: tell decoder to use edge emulation This removes out-of-edge motion compensation artifacts (easily spotted green blocks in avplay, gray blocks in transcoding), for example here: http://samples.libav.org/samples/real/tv_watching_t1.rm Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 331971116d7d36743601bd2dc5384c5211d3bb48) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| fe3e729 | Luca Barbato | 08 June 2011, 14:32:07 UTC | flvenc: use int64_t to store offsets Metadata currently is written only at the start of the file in normal cases, when transcoding from a rtmp source metadata could be written later and the offset recorded can exceed 32bit. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 7f5bf4fbaf1f2142547321a16358f9871fabdcc6) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 28321b7 | Reimar Döffinger | 13 August 2011, 09:58:18 UTC | VC-1: fix reading of custom PAR. Custom PAR num/denum are in 1-256 range. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de> Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 0e8696551414d4ea0aab2559f9475d1fe49d08f3) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 59a22af | Dustin Brody | 11 August 2011, 12:57:58 UTC | h264: notice memory allocation failure Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit bac3ab13ea6a9dd8853e79ef3eacf51d234c8774) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 042934e | Justin Ruggles | 10 August 2011, 18:07:35 UTC | Remove incorrect info in documentation of AVCodecContext.bits_per_raw_sample. bits_per_raw_sample is used in video as well, where sample_fmt is not used. (cherry picked from commit d271d5b2152cafe540f3ab71d3be6ce8636d2fd6) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 67163d7 | Baptiste Coudurier | 30 January 2011, 01:05:42 UTC | libx264: do not set pic quality if no frame is output Avoids uninitialized reads. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 5caa2de19ece830e32c95731bc92a423d55cff0c) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:30 UTC |
| 96a453e | Alex Converse | 29 July 2011, 22:49:11 UTC | aac: Remove some suspicious illegal memcpy()s from LTP. (cherry picked from commit a6c49f18abacb9bf52d4d808a2a56561a5b5445c) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| c613a89 | Alex Converse | 29 July 2011, 22:27:36 UTC | mxfdec: Include FF_INPUT_BUFFER_PADDING_SIZE when allocating extradata. This prevents out of bounds reads when extradata is being decoded. (cherry picked from commit 1f6f58d5855288492fc2640a9f1035c01c75d356) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| b3b9755 | Ronald S. Bultje | 26 July 2011, 17:58:29 UTC | vp3/theora: flush after seek. (cherry picked from commit 8dcf5184307f072d55fb29373be05ef8b0fd02df) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 44c718c | Diego Biurrun | 21 July 2011, 12:25:01 UTC | rv30: return AVERROR(EINVAL) instead of EINVAL On some platforms EINVAL could be positive, ensure we return negative values. (cherry picked from commit e5985185d2eda942333ebbb72bd7d043ffe40be7) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 99ec59a | Mans Rullgard | 20 July 2011, 08:55:48 UTC | Fix incorrect max_lowres values Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit e23a05ab0605693aa715b95120bc0132079ded06) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 3ed12b9 | Rafaël Carré | 16 July 2011, 15:41:08 UTC | Do not decode RV30 files if the extradata is too small Signed-off-by: Diego Biurrun <diego@biurrun.de> (cherry picked from commit 289c60001fb0a9a1d7a97c876d8a42b84c6874ac) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| f7831bb | Mans Rullgard | 15 July 2011, 21:38:10 UTC | aacps: skip some memcpy() if src and dst would be equal Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit e5902d60ce8f7cf10b6e87a57eec536b316261a3) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 9c2a024 | Anton Khirnov | 12 July 2011, 20:42:18 UTC | lavf: fix segfault in av_open_input_stream() ic is NULL in case of error. (cherry picked from commit 13551ad1e336573e3732fdeaf25607c47244bb80) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| f852156 | Oskar Arvidsson | 12 July 2011, 08:52:19 UTC | pix_fmt: Fix number of bits per component in yuv444p9be Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit e59d6b4d7255d6d3dc89580f534e18af1433fe25) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| b772a75 | Jindrich Makovicka | 30 June 2011, 09:03:15 UTC | mpegts: fix Continuity Counter error detection According to MPEG-TS specs, the continuity_counter shall not be incremented when the adaptation_field_control of the packet equals '00' or '10'. Signed-off-by: Jindrich Makovicka <jindrich.makovicka@nangu.tv> Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 8923cfa328e8eb565aebcfe8672b276fd1c19bf7) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 0c039db | Justin Ruggles | 22 June 2011, 20:38:20 UTC | alsa: limit buffer_size to 32768 frames. In testing, the file output plugin gave a max buffer size of about 20 million frames, which is way more than what is really needed and causes a memory allocation error on my system. (cherry picked from commit e35c674d13a7f180412cfe058530a2e7f1d49a90) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:29 UTC |
| 6ed533f | Justin Ruggles | 22 June 2011, 19:33:56 UTC | alsa: fallback to buffer_size/4 for period_size. buffer_size/4 is the value used by aplay. This fixes output to null devices, e.g. writing ALSA output to a file. (cherry picked from commit 8bfd7f6a475225a0595bf657f8b99a8fffb461e4) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| c75ba07 | Tomas Härdin | 23 June 2011, 13:59:33 UTC | gxf: Fix 25 fps DV material in GXF being misdetected as 50 fps Set DV packet durations using fields_per_frame. This requires turning gxf_stream_info into the demuxer's context for access to the value in gxf_packet(). Since MPEG-2 seems to work fine this done only for DV. Signed-off-by: Anton Khirnov <anton@khirnov.net> (cherry picked from commit 99fecc64b064a013559d3d61f7d9790e3c95c80e) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 9417761 | Anton Khirnov | 11 September 2011, 10:27:51 UTC | Revert "ffmpeg: get rid of useless AVInputStream.nb_streams." This reverts commit 2cf8355f98681bdd726b739008acd5483f82f8d7. AVInputStream.nb_streams tracks number of streams found at the beginning, new streams may appear that ffmpeg doesn't know about. Fixes crash in this case. Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 6107543 | Alex Converse | 29 June 2011, 20:41:47 UTC | adts: Fix PCE copying. Parse the extension flag bit when reading the MPEG4 AudioSpecificConfig. This has nothing to do with SBR/PS contradictory to what was noted when it was removed. (cherry picked from commit 7f01a4192cdf4565eadee457f76e6b5196e35e0b) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| e9520db | Ronald S. Bultje | 06 July 2011, 01:10:48 UTC | eval: fix memleak. (cherry picked from commit fe277b16f0861a327e1f6c00c0dbb8b00806d60d) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 15355f9 | Mans Rullgard | 05 July 2011, 17:29:35 UTC | ARM: workaround for bug in GNU assembler Some versions of the GNU assembler do not handle 64-bit immediate operands containing arithmetic. Writing the value out in full works correctly. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit fce1e43410bdc032c4cf2b1c66166a9ed99cc8f1) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 776603b | Clément Bœsch | 04 July 2011, 08:19:46 UTC | mxfenc: fix ignored drop flag in binary timecode representation. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit 4d5e7ab5c48451404038706ef3113c9925a83087) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 0631896 | John Stebbins | 04 July 2011, 16:55:19 UTC | dca: set AVCodecContext frame_size for DTS audio Set the frame size when decoding DTS audio. This has the side effect of fixing the computation of timestamps for DTS-HD in compute_pkt_fields. Since frame_size is not currently set, the duration of a frame is being guessed based on the streams bitrate. But for DTS-HD, the bitrate currently used is the rate of the DTS core which is much different than the whole DTS-HD stream and leads to a wildly inaccurate frame duration estimate. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com> (cherry picked from commit 49c7006c7e815d4330247624a9e6ba30e288cd02) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 8ad1f08 | Jason Garrett-Glaser | 04 July 2011, 13:05:34 UTC | H.264: fix overreads of qscale_table filter_mb_fast assumed that qscale_table was padded like many of the other tables. (cherry picked from commit 5029a406334ad0eaf92130e23d596e405a8a5aa0) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 47be9f5 | Ronald S. Bultje | 26 June 2011, 22:52:00 UTC | swscale: don't use planar output functions to write to NV12/21. This prevents a crash when converting to NV12/21 without the bitexact flags enabled. (cherry picked from commit 0d994b2f45c08794899057ee7ca54f48218c0a53) Signed-off-by: Anton Khirnov <anton@khirnov.net> | 26 September 2011, 17:26:28 UTC |
| 20ca827 | Piotr Kaczuba | 30 May 2011, 11:19:35 UTC | postprocess.c: filter name needs to be double 0 terminated Signed-off-by: Reinhard Tartler <siretart@tauware.de> (cherry picked from commit f4f3300c09bb13eb7922e60888b55e3e0fb325e7) | 03 September 2011, 05:39:54 UTC |
| b37131f | Pino Toscano | 12 August 2011, 12:11:21 UTC | configure: add missing CFLAGS to fix building on the HURD Signed-off-by: Reinhard Tartler <siretart@tauware.de> Signed-off-by: Luca Barbato <lu_zero@gentoo.org> (cherry picked from commit f60d13663742d1c695680ede83c4d646bc57d380) | 25 August 2011, 20:47:06 UTC |
| bd968d2 | Mans Rullgard | 10 August 2011, 17:52:11 UTC | cavs: fix some crashes with invalid bitstreams This removes all valgrind-reported invalid writes with one specific test file. Fixes http://www.ocert.org/advisories/ocert-2011-002.html Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit 4a71da0f3ab7f5542decd11c81994f849d5b2c78) | 21 August 2011, 09:23:56 UTC |
| 00c5cf4 | Michael Niedermayer | 09 June 2011, 01:35:50 UTC | jpegdec: actually search for and parse RSTn Fixes decoding of MJPEG files produced by some UVC Logitec web cameras, such as "Notebook Pro" and "HD C910". References: http://trac.videolan.org/vlc/ticket/4215 http://ffmpeg.org/trac/ffmpeg/ticket/267 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Reviewed-by: Kostya <kostya.shishkov@gmail.com> (cherry picked from commit 8c0fa61a9713a1306fca7997dd04d72ea1f060ea) | 21 August 2011, 09:08:27 UTC |
