FFmpeg

Commit Graph

Author	SHA1	Message	Date
Mans Rullgard	60f10e0ad3	h264pred: use unsigned types for pixel values, fix signed overflows Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	4d1418cd4f	h264: fix signed overflows in x*0x01010101 expressions Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	d66b9dec11	h264pred: remove unused variables Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	a31e9f68a4	lavf: fix signed overflow in avformat_find_stream_info() On the first iteration through this code, last_dts is always INT64_MIN (AV_NOPTS_VALUE) and the subtraction overflows in an invalid manner. Although the result is only used if the input values are valid, performing the subtraction is still not allowed in a strict environment. Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	bb59156606	vp8: fix signed overflows In addition to avoiding undefined behaviour, an unsigned type makes more sense for packing multiple 8-bit values. Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	e708afd3c0	motion_est: fix some signed overflows Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	559c244d42	dca: fix signed overflow in shift Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Mans Rullgard	d12294304a	aacdec: fix undefined shifts Since nnz can be zero, this is needed to avoid a shift by 32. Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Laurent Aimar	a00676e48e	bink: Check for various out of bound writes Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	24adf7832b	bink: Check for out of bound writes when building tree Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Mans Rullgard	ac6eab1496	put_bits: fix invalid shift by 32 in flush_put_bits() If flush_put_bits() is called when the 32-bit buffer is empty, e.g. after writing a multiple of 32 bits, and invalid shift by 32 is performed. Since flush_put_bits() is called infrequently, this additional check should have negligible performance impact. Signed-off-by: Mans Rullgard <mans@mansr.com>	13 years ago
Alex Converse	98ef887a75	mpegps: Use av_get_packet() instead of poorly emulating it.	13 years ago
Janne Grunau	c2f2dfb3dd	motionpixels: decode only the 111 complete frames for fate Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	9bd854b1ff	mpc8: Check out of bound bands limit Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	7d17a794f0	xan: Prevent NULL dereference with missing palette Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	3db3fdf4c6	xan: Check for out of bound reads in xan_huffman_decode() Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	3e0757c2a8	xan: Fixed out of bound accesses in xan_unpack() Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	1cd0a55163	motionpixels: Prevent calling init_vlc() with invalid parameters Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	5f05cf4ea9	shorten: Fix out of bound writes in fix_bitshift() The data pointers s->decoded[*] already take into account s->nwrap. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	1720603287	dsicinav: Check for out of bounds writes Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	64263dd526	tiertexseqv: Check for out of bound reads Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	4fd56f842c	quickdraw: Check for out of bound reads Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	e3ca9b93d9	dsicinav: Check for out of bounds reads Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	210c80331e	motionpixels: Fix the size of workspace buffers Some buffers must be mod 4 in width and/or height. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	d337dd3a90	motionpixels: Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	d99427cb8b	wmavoice: Check for corrupted extra data Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	1c1449b548	wmavoice: Check for out of bound writes Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	06be075cda	xan: Prevent NULL dereferences with missing reference frame Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	c7e631986b	bink: Prevent NULL dereferences with missing reference frame Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	2c6cf13940	wavpack: Reset internal state on corrupted blocks wavpack_decode_block() supposes that it is called back with the exact same buffer unless it has returned with an error. With multi-channels files, wavpack_decode_frame() was breaking this assumption. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	2c1ba79941	wmapro: Validate the number of audio channels before using it Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	1e3336de69	mpc8: Fix return value on EOF Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	95010d18b2	shorten: Prevent block size from increasing Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	124a16f678	xan: Prevent out of bound accesses Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Michael Niedermayer	14c21c1ff5	H264: Only wait before triggering ff_thread_setup_complete() until the next slice that contains a start-of-field/frame macroblock This allows concurrent decoding of the last field/frame, rather than only the last slice, of data packets with multiple NAL units packed together. This will fix the slowdown reported in e.g. bug 52. Signed-off-by: Anton Khirnov <anton@khirnov.net>	13 years ago
Laurent Aimar	a72cad0a6c	vp6: Reset the internal state when aborting key frames header parsing It prevents leaving the state only half initialized. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	3d09d0017d	vp56: Release old pictures after a resolution changes Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	066fff755a	vp6: Check for huffman tree build errors Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	0ec6d6e9b6	vp56: Check for missing reference frame data Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	d239d4b447	cinepak: Fix invalid read access on extra data Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	c0cbe36b18	vmd: fix segfaults on corruped streams Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	3a742470a8	cook: Fix js_vlc_bits value validation for joint stereo Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	1775b92fee	segafilm: Check for memory allocation failures in segafilm demuxer. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	762ffa6861	segafilm: Fix potential division by 0 on corrupted streams in the demuxer Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	790f4dd5c9	Fixed segfault on corrupted sega streams in the demuxer. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Laurent Aimar	69a0bce753	Fixed deference of NULL pointer in motionpixels decoder. Some of the arguments given to init_vlc() come from the stream and can be corrupted. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Anton Khirnov	d97efd7f87	libx264: support 9- and 10-bit output.	13 years ago
Ronald S. Bultje	4418aa9cb3	h264: correct implicit_weight for field-interlaced pictures.	13 years ago
Ronald S. Bultje	330deb7592	mpegvideo: set correct offset for edge emulation buffer. Using the old code, half of it was unused and the other half was too small for e.g. >8bpp interlaced data, causing random buffer overruns.	13 years ago
Ronald S. Bultje	0884dd5a1b	mpegvideo: fix position of bottom edge. It was wrong in colorspaces where horizontal and vertical chroma subsampling are not the same, e.g. 422.	13 years ago

1 2 3 4 5 ...

30241 Commits (60f10e0ad37418cc697765d85b0bc22db70f726a) All Branches Search

30241 Commits (60f10e0ad37418cc697765d85b0bc22db70f726a)

All Branches