FFmpeg

Commit Graph

Author	SHA1	Message	Date
Paul B Mahol	45ed942e7e	avcodec/scpr: improve check for out of range motion vectors Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Paul B Mahol	95a5af446b	avcodec/scpr: check that current row is in valid range Stops writing out of dst array. Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Paul B Mahol	fd7af82c53	avcodec/scpr: do not allow out of array access for 16bit case Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Paul B Mahol	f062947261	avcodec/qdrw: do better w/h parsing for direct bit packing Apparently using 0x0001 opcode solely is not correct. Try this instead. Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Rick Kern	dcd3418a35	lavc/videotoolboxenc: check for dictionary key symbols Fixes #6081. Some dictionary keys are not present on OS X 10.8. This loads the symbols and uses a default value if not present. Signed-off-by: Rick Kern <kernrj@gmail.com>	8 years ago
Michael Niedermayer	9568b2e425	avcodec/h264_ps: Check chroma_qp_index_offset Fixes: 647/clusterfuzz-testcase-5195745823031296 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: BBB Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Jacek Manko	c104556448	avcodec/mips/Makefile: corrected conditional build of version 1 of vc1dsp optimizations for loongson mmi Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Marton Balint	436f00b10c	avcodec/wrapped_avframe: allocate a buffer with padding This ensures that the wrapped avframe will not get reallocated later, which would invalidate internal references such as extended data. Reviewed-by: wm4 <nfxjfg@googlemail.com> Signed-off-by: Marton Balint <cus@passwd.hu>	8 years ago
Paul B Mahol	039011b6b0	avcodec: add ScreenPressor decoder Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Michael Niedermayer	ec849f637e	avcodec/h264idct_template: Fix several runtime error: signed integer overflow Fixes: 652/clusterfuzz-testcase-6174944410992640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	6871df02d9	avcodec/mpeg4videodec: Check sprite_offset in addition to shifts Fixes: 651/clusterfuzz-testcase-5710668915277824 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	5a8fec1b33	avcodec/mpegaudiodec_template: Fix multiple runtime error: signed integer overflow Fixes: 648/clusterfuzz-testcase-5337961317007360 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Paul B Mahol	fb5c9be82e	avcodec/qdrw: add support for 0x0001 code Fixes decoding of files which sets frame width/height this way. Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Paul B Mahol	2c5839254d	avcodec/dnxhddec: fix decoding of DNxHR HQX 10-bit Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
James Almer	a267cac928	avcodec/cbrt_data: add missing header include Fixes make checkheaders	8 years ago
James Almer	65d7d46f71	avcodec/mjpegenc_huffman: add missing header include Fixes make checkheaders	8 years ago
Paul B Mahol	3f878aaedf	avcodec/flicvideo: update comment, 24bit support is implemented Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Michael Niedermayer	c9e3952b82	avcodec/rv34: Forward error from rv34_decode_mv() Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	6179dc8aa7	avcodec/mpeg4video: Fix runtime error: left shift of negative value Fixes: 644/clusterfuzz-testcase-4726434209726464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	92188c8f57	avcodec/dcadsp: Fix runtime error: signed integer overflow: 394625024 * 8 cannot be represented in type 'int' Fixes: 643/clusterfuzz-testcase-5209078743695360 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	24f6559bd2	avcodec/rv34: Fix runtime error: signed integer overflow: -2 + -2147483648 cannot be represented in type 'int' Fixes: 642/clusterfuzz-testcase-558358808074649 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
James Almer	d04e0a6bcf	avcodec/qdrw: don't overwrite bpp when checking its value Finishes fixing ticket #6171	8 years ago
Alex Converse	dde1bf074c	aacdec: When ignoring a PCE restore the previous config This is related to, but doesn't solve ticker 6152.	8 years ago
Paul B Mahol	770ac75ae9	avcodec/qdrw: add support for 2bpp and 4bpp packed pallette format Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Paul B Mahol	4e6b44559a	avcodec/qdrw: fix writing past end of row Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Michael Niedermayer	631f748491	avcodec/ituh263dec: Fix runtime error: left shift of negative value -22 Fixes: 639/clusterfuzz-testcase-5143866241974272 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	a59505ca76	avcodec/gsmdec_template: Fix runtime error: signed integer overflow: -22527 * 99113 cannot be represented in type 'int' Fixes: 636/clusterfuzz-testcase-6520876646268928 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	0c42d0add3	avcodec/bmp: Fix runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself There is code checking height and width later, leaving an invalid value invalid is thus fine. Fixes: 635/clusterfuzz-testcase-6225161437052928 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	cbd622be99	avcodec/h264_ps: Check delta scale for validity Fixes: signed integer overflow: 5 + 2147483646 cannot be represented in type 'int' Fixes: 634/clusterfuzz-testcase-5285420445204480 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	28dc6e7291	avcodec/simple_idct: Fix runtime error: left shift of negative value -6395 Fixes: 633/clusterfuzz-testcase-4553133554401280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	956472a323	avcodec/rv40: Fix runtime error: left shift of negative value Fixes: 630/clusterfuzz-testcase-6608718928019456 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Paul B Mahol	f4777d1b89	avcodec/qdrw: add support for decoding rgb555 Signed-off-by: Paul B Mahol <onemda@gmail.com>	8 years ago
Michael Niedermayer	e8a3498f24	avcodec/dca_xll: Fix runtime error: signed integer overflow: -1073741824 * 32768 cannot be represented in type 'int' Fixes: 629/clusterfuzz-testcase-6697457381539840 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	0a65dae9d0	avcodec/flacdec: reduce limit for golomb so that the max value does not overflow Fixes: runtime error: left shift of 32 by 26 places cannot be represented in type 'int' Fixes: 628/clusterfuzz-testcase-6187747641393152 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	e04108dfa6	avcodec/dca_xll: signed integer overflow: 255251 * 32768 cannot be represented in type 'int' Fixes: 627/clusterfuzz-testcase-5020897033322496 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	4614bf2caf	Factorize CHECK/SUINT code Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Steinar H. Gunderson	e3c14eaa54	speedhq: fix decoding artifacts The quantization table is stored in the natural order, but when we access it, we use an index that's in zigzag order, causing us to read the wrong value. This causes artifacts, especially in areas with horizontal or vertical edges. The artifacts look a lot like the DCT ringing artifacts you'd expect to see from a low-bitrate file, but when comparing to NewTek's own decoder, it's obvious they're not supposed to be there. Fix by simply storing the scaled quantization table in zigzag order. Performance is unchanged. Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Timo Rothenpieler	f747e1533a	avcodec/nvenc: allow forcing keyframes by default	8 years ago
Michael Niedermayer	15ccaa344c	avcodec/mpegaudiodec: Eliminate many undefined operations Fixes: 625/clusterfuzz-testcase-4574924406521856 Fixes: 626/clusterfuzz-testcase-4738718621499392 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	01d196a67d	avcodec/pictordec: Do not read more than nb_planes Fixes undefined behavior Fixes: 622/clusterfuzz-testcase-5745722022428672 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	b7d9b4a1f1	avcodec/ituh263dec: Check cbpy in ff_h263_decode_mb() Fixes: 618/clusterfuzz-testcase-6594990333493248 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	c11d3634b0	avcodec/srtdec: Fix signed integer overflow: 1811992524 * 384 cannot be represented in type 'int' Fixes: 617/clusterfuzz-testcase-6413875723370496 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	59e5b05ef6	avcodec/h264_ps: Fix runtime error: signed integer overflow: -1094995528 * 2 cannot be represented in type 'int' Fixes: 615/clusterfuzz-testcase-5488002644049920 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	258763ad0e	avcodec/h264_cabac: runtime error: signed integer overflow: 2147483647 + 14 cannot be represented in type 'int' Fixes: 614/clusterfuzz-testcase-4931860079575040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	aa2b75263e	avcodec/mpeg4videodec: Fix runtime error: shift exponent -2 is negative Fixes: 612/clusterfuzz-testcase-4707817137111040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	c91bdd4524	avcodec/mjpegdec: Fix runtime error: left shift of negative value -507 Fixes: 611/clusterfuzz-testcase-5613455820193792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	067485b673	avcodec/eac3dec: Fix runtime error: left shift of negative value Fixes: 610/clusterfuzz-testcase-4831030085156864 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Rostislav Pehlivanov	67fa02ed79	opus_pvq: fix PVQ search for K < 5 and low Ns If the PVQ search picked a place to increment/decrement on the y[] vector which had no pulse then it would cause a desync since it would change the sum in the wrong direction. Fix this by not considering places without pulses as viable. This makes the PVQ search slightly worse at K < 5 which isn't all that common. Still, this is a workaround to prevent making broken files until I can think of a better way of fixing it. Also add an assertion, which can be removed or moved to assert1/2 once the PVQ search is stable. Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com>	8 years ago
Michael Niedermayer	4279613a26	avcodec/pngdec: Check bit depth for validity Fixes: runtime error: shift exponent 132 is too large for 32-bit type 'int' Fixes: 609/clusterfuzz-testcase-4825202619842560 See 11.2.2 IHDR Image header Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Michael Niedermayer	706757d26d	avcodec/mpeg12dec: Fix runtime error: left shift of negative value Fixes: 608/clusterfuzz-testcase-603978286392934 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago

... 5 6 7 8 9 ...

37732 Commits (5694427dc384cb6f35fc84d87615854d53c2de3a)