FFmpeg

Commit Graph

Author	SHA1	Message	Date
Michael Niedermayer	d65d834731	wmalosslessdec: Reset put bit buffer when num_saved_bits is reset. Fixes CVE-2012-2799 CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Anton Khirnov	d05f72c754	dfa: improve boundary checks in decode_dds1() Fixes CVE-2012-2798 CC:libav-stable@libav.org	12 years ago
Anton Khirnov	6a99310fce	wmalosslessdec: Fix reading too many bits in decode_channel_residues() Fixes a part of CVE-2012-2795 CC:libav-stable@libav.org Based on a patch by Michael Niedermayer <michaelni@gmx.at> Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind	12 years ago
Michael Niedermayer	f48fbf2eb5	wmalosslessdec: fix a get_bits(0) in decode_ac_filter Fixes a part of CVE-2012-2795 CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Michael Niedermayer	607f57152c	wmalosslessdec: make MCLMS arrays big enough for what is written into them. Fixes a part of CVE-2012-2795 CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Anton Khirnov	ae3da0ae55	indeo4/5: check empty tile size in decode_mb_info(). This prevents writing into a too small array if some parameters changed without the tile being reallocated. Based on a patch by Michael Niedermayer <michaelni@gmx.at> Fixes CVE-2012-2800 CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind	12 years ago
Anton Khirnov	5d2170c53b	ivi_common: make ff_ivi_process_empty_tile() static. It's not used outside of ivi_common.c	12 years ago
Michael Niedermayer	2d09cdbaf2	indeo5: check tile size in decode_mb_info(). This prevents writing into a too small array if some parameters changed without the tile being reallocated. Fixes CVE-2012-2794 CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Anton Khirnov	e4d4044339	indeo3: fix out of cell write. Fixes CVE-2012-2776. CC:libav-stable@libav.org Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind	12 years ago
Michael Niedermayer	f049729e61	ffv1enc: fix integer overflow with high resolutions and lots of slices. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	acfe69669c	bink: reindent Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	897d336984	bink: remove unneeded special case in the init code. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	574e87943e	bink: get rid of double precision float use Add a small table of integers instead as this is simpler and avoid rounding issues (though such rounding issues are unlikely in this case) Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	6fcd4f3c72	dfa: replace redundant check by assert The values are checked in the wraper function used to call this code. This was introduced by: `ee715f49a0` Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Anton Khirnov	065b3a1cfa	wmalosslessdec: increase channel_coeffs/residues size Fixes CVE-2012-2792 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind	12 years ago
Anton Khirnov	4a969030e4	wmalosslessdec: increase WMALL_BLOCK_MAX_BITS to 14.	12 years ago
Michael Niedermayer	b631e4ed64	lagarith: check count before writing zeros. Fixes CVE-2012-2793 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Michael Niedermayer	99f392a584	wmaprodec: check num_vec_coeffs for validity Fixes CVE-2012-2789 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Michael Niedermayer	b146d74730	indeo4: update AVCodecContext width/height on size change Fixes CVE-2012-2787 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Anton Khirnov	ee715f49a0	dfa: check that the caller set width/height properly. Fixes CVE-2012-2786.	12 years ago
Michael Niedermayer	891918431d	indeo5dec: Make sure we have had a valid gop header. This prevents decoding happening on a half initialized context. Fixes CVE-2012-2779 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Michael Niedermayer	c20a696306	cavsdec: check for changing w/h. Our decoder does not support changing w/h. Fixes CVE-2012-2777 and CVE-2012-2784. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov <anton@khirnov.net>	12 years ago
Anton Khirnov	12e1e83461	lavc: set channel count from channel layout in avcodec_open2(). Some decoders (e.g. nellymoser) only set channel_layout and do not set channel count.	12 years ago
Michael Niedermayer	bfe735b582	aacdec: detect faac and skip correct amount of startup samples This also fixes aac in adts and other containers than mov. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	791b5954bc	dsputil_mmx: fix reading prior of the src array in sub_hfyu_median_prediction() This should fix the utvideoenc valgrind failure Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Luca Barbato	97cfa55eea	mpegaudiodec: fix short_start calculation The value should be always 3, as it follows from the specification. Fix a stack buffer overflow in exponents_from_scale_factors as reported by asan. Thanks to Dale Curtis for the sample vector.	12 years ago
jamal	35e09036c4	avcodec: Add missing include to version.h Reviewed-by: Stefano Sabatini <stefasab@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Nathan Caldwell	d16860a237	libopus: Remap channels using libopus' internal remapping. This way we can directly remap channels from Opus' channel order to libav's internal channel order, instead of mapping channels from Opus' order to Vorbis' order then to libav's order. Signed-off-by: Diego Biurrun <diego@biurrun.de>	12 years ago
Nicolas George	44617d6ec9	Opus decoder using libopus Signed-off-by: Diego Biurrun <diego@biurrun.de>	12 years ago
Nathan Caldwell	e4aa3831b7	avcodec: document the use of AVCodecContext.delay for audio decoding Signed-off-by: Diego Biurrun <diego@biurrun.de>	12 years ago
Kostya Shishkov	4dc8c8386e	vc1dec: add flush function for WMV9 and VC-1 decoders CC: libav-stable@libav.org	12 years ago
Michael Niedermayer	ac7d0c79c3	mp3dec: ask for 8khz switch point mp3s Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	94041febc5	mp3dec: Fix possibly exploitable crash I was sadly unable to find a non fuzzed mp3 that uses the feature that contained the bug (and i searched hard ...), thus while this fixes the security issue. It may or may not fix mixed blocks in 8khz mp3s, i cant say due to lack of samples to test. Security issue exists since: `b37d945dd4` Reported-by: Dale Curtis <dalecurtis@google.com> (Probably) Found-by: inferno@chromium.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	9e9b5159e9	mpegvideo_enc: reduce QMAT_SHIFT to avoid overflow in dnxhd Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Diego Biurrun	6c5b0517e0	h264_refs: Fix debug tprintf argument types	12 years ago
Diego Biurrun	80412997c8	golomb: const correctness for get_ue()/get_se() function arguments	12 years ago
Diego Biurrun	e00215040a	get_bits: const correctness for get_bits_trace()/get_xbits_trace() arguments	12 years ago
Michael Niedermayer	7e9830d123	dsputil_mmx: fix reading prior of the src array in sub_hfyu_median_prediction() This should fix the utvideoenc valgrind failure Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Diego Biurrun	4e5b7f31f7	dwt: Drop unused functions spatial_compose{53\|97}i()	12 years ago
Diego Biurrun	0ae3ba8daa	avcodec: Drop long-deprecated imgconvert.h header	12 years ago
Andrew D'Addesio	2a3d82ab46	Add Opus codec id and codec description. Signed-off-by: Diego Biurrun <diego@biurrun.de>	12 years ago
Diego Biurrun	2dc1310484	truemotion2: Request samples for old TM2 headers	12 years ago
Michael Niedermayer	3b92075e6c	Revert "arm/h264: fix overreads in h264_chroma_mc8-and-h264_chroma_mc4" This reverts commit `d25f87f517`. This breaks decoding of some h264 files I have tested the original patch with fate but by mistake have forgotten to specify the fate samples so testing was limited to the internal regression tests.	12 years ago
Michael Niedermayer	55a6f705ac	ffv1dec: support decoding older 1.3 bitstream variant Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	ff0c628268	ffv1:update copyright year Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	f75c5f07a9	diracyasm: fix win64 Fixes Ticket1412 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	5fe808578c	libx264: fix open GOP Found-by: relaxed Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	c5e2347373	mlpdec: supress layout mismatch warnings for 2 ch upmixed mono Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	eda5db6bd1	mlpdec: discard a 2nd substream if the stream is mono This fixes the rest of Ticket1726 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	2a672652bb	mlp_parser: dont override existing channel geometry. This prevents race conditions And partly fixes Ticket1726 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago

... 2 3 4 5 6 ...

20820 Commits (4334ba043e9601717af3a7ca46addfaf154d5fb6)