FFmpeg

Commit Graph

Author	SHA1	Message	Date
Michael Niedermayer	b18a0cc781	indeo5: Fix null pointer dereference. Bug found by: Oana Stratulat Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Janne Grunau	73b16198b6	electronicarts: check bytes per sample for validity Prevents division by zero.	13 years ago
Laurentiu Ion	b348c852aa	flicvideo: fix invalid reads Prevent invalid reads using bytestream2 functions. Fixes bug #126. Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>	13 years ago
Chris Evans	57cd6d7095	vorbis: Avoid some out-of-bounds reads Fixes Bug: #190 Chromium Bug: #100543 Related to CVE-2011-3893 Signed-off-by: Reinhard Tartler <siretart@tauware.de>	13 years ago
Paul B Mahol	f86209b43d	vqf: add more known extensions Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Diego Biurrun	3aa3fc45fe	cabac: remove unused function renorm_cabac_decoder	13 years ago
Diego Biurrun	301fb92131	h264: Only use symbols from the SVQ3 decoder under proper conditionals. Fixes --disable-everything --enable-decoder=h264 --disable-optimizations.	13 years ago
Justin Ruggles	6e8bf6db48	add bytestream2_tell() and bytestream2_seek() functions	13 years ago
Janne Grunau	f907615f08	parsers: initialize MpegEncContext.slice_context_count to 1 The mpeg4 video, H264 and VC-1 parser hold (directly or indirectly) a MpegEncContext in their private context. Since they do not call the common mpegvideo init function slice_context_count has explicitly set to 1. Prevents a null pointer dereference in the h264 parser and fixes bug 193.	13 years ago
Anssi Hannula	580bb77936	spdifenc: use special alignment for DTS-HD length_code Align IEC 61937 length_code for DTS-HD so that (length_code & 0xf) == 0x8. This is reportedly needed with some receivers. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Janne Grunau	f5be84cfbc	ipmovie: do not read audio packets before the codec is known Prevents a division by zero.	13 years ago
Janne Grunau	696ace50ea	truemotion2: check size before GetBitContext initialisation Prevents null ptr derefence for negative sizes.	13 years ago
Martin Storsjö	acb074301c	avio: Only do implicit network initialization for network protocols The implicit network initialization is set to be removed in the future, but is kept for compatibility. By not doing the implicit initialization for non-network protocols, we avoid the warning about avformat_network_init() not being called for these, where it really doesn't make much sense. Signed-off-by: Martin Storsjö <martin@martin.st>	13 years ago
Martin Storsjö	32b83aeec1	avio: Add an URLProtocol flag for indicating that a protocol uses network This definition is in two files, since the definitions will move to the private header at the next bump. Signed-off-by: Martin Storsjö <martin@martin.st>	13 years ago
Janne Grunau	bb5b3940b0	adpcm: ADPCM Electronic Arts has always two channels	13 years ago
Chris Evans	faaec4676c	matroskadec: Fix a bug where a pointer was cached to an array that might later move due to a realloc() Fixes bug #190 Chromium bug #100492 related to CVE-2011-3893 Signed-off-by: Reinhard Tartler <siretart@tauware.de>	13 years ago
Alex Converse	ce23b2af18	fate: Add missing reference file from `9b4767e4`.	13 years ago
Alex Converse	4274e481c0	mov: Support MOV_CH_LAYOUT_USE_DESCRIPTIONS for labeled descriptions.	13 years ago
Aneesh Dogra	9b55b4bb3a	4xm: Prevent buffer overreads. 4xm decoder while decoding i2 frames can overread the buffer if proper checks are not made. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Janne Grunau	e268a352af	mjpegdec: parse RSTn to prevent skipping other data in mjpeg_decode_scan Check explicitly if enough bits are left to prevent an infinite loop when the bitstream buffer is not followed by zero-padding. Based on patches by Michael Niedermayer <michaelni@gmx.at>.	13 years ago
Janne Grunau	5e5cde2745	vp3: add fate test for non-zero last coefficient	13 years ago
Janne Grunau	9b4767e478	vp3: fix streams with non-zero last coefficient Fixes a regression introduced in `8b94df0f20`.	13 years ago
Ronald S. Bultje	2ba65879b5	swscale: remove unused U/V arguments from yuv2rgb_write(). Also document the function somewhat.	13 years ago
Diego Biurrun	dff4af448d	timer: K&R formatting cosmetics	13 years ago
Anton Khirnov	f9b9dd8740	lavf: cosmetics, reformat av_read_frame().	13 years ago
Anton Khirnov	6450599e22	lavf: refactor av_read_frame() to make it easier to understand.	13 years ago
Oana Stratulat	7f09791d28	Report an error if pitch_lag is zero in AMR-NB decoder. This fixes an infinite loop in the decoder on specially crafted files, and fixes bug 151. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Ronald S. Bultje	3fa646e859	Revert "4xm: Prevent buffer overreads." This reverts commit `295a7c0238`. The patch breaks decoding of regular files (e.g. fate-4xm-2).	13 years ago
Aneesh Dogra	295a7c0238	4xm: Prevent buffer overreads. 4xm decoder while decoding i2 frames can overread the buffer if proper checks are not made. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Aneesh Dogra	4b84f68223	4xm: pass the correct remaining buffer size to decode_i2_frame(). frame_size is the number of bytes left in the packet, so if we are passing buf-4 we can safely read frame_size+4 bytes. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Aneesh Dogra	893f137679	4xm: fix calculation of the next output line position in decode_i2_frame(). The current code doesn't work unless width is an exact multiple of 16. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Shitiz Garg	feb15cee5e	mtv: Make sure audio_subsegments is not 0 audio_subsegments would be 0 and cause floating point exceptions Fixes bugzilla #144 Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>	13 years ago
Janne Grunau	f13a9ca906	v4l2: use V4L2_FMT_FLAG_EMULATED only if it is defined V4L2_FMT_FLAG_EMULATED was added in 2.6.32.	13 years ago
Anton Khirnov	e8c04f6240	avconv: add symbolic names for -vsync parameters	13 years ago
Jean First	2df73eefb4	flvdec: Fix compiler warning for uninitialized variables These can't be used uninitialized in practice, but the compiler doesn't realize it. Signed-off-by: Martin Storsjö <martin@martin.st>	13 years ago
Jean First	4be386b318	rtsp: Fix compiler warning for uninitialized variable This one won't ever be used uninitialized in practice, but the compiler doesn't realize it. Signed-off-by: Martin Storsjö <martin@martin.st>	13 years ago
Ronald S. Bultje	89d26797f5	ulti: convert to new bytestream API.	13 years ago
Diego Biurrun	3d72a6f19e	swscale: Use standard multiple inclusion guards in ppc/ header files.	13 years ago
Diego Biurrun	00a1cdd264	Place some START_TIMER invocations in separate blocks. This fixes compilation failures related to START_TIMER/STOP_TIMER macros and -Werror=declaration-after-statement. START_TIMER declares variables and thus may not be placed after statements outside of a new block.	13 years ago
Luca Barbato	a6a4793d04	v4l2: list available formats Make use of the experimental framesize enumeration ioctl if available.	13 years ago
Luca Barbato	cd2bbad303	v4l2: set the proper codec_tag Unbreak direct streamcopy.	13 years ago
Luca Barbato	eb89b4fc09	v4l2: refactor device_open Check capabilities directly in the function, further simplify the code.	13 years ago
Luca Barbato	246007d370	v4l2: simplify away io_method Only mmap is supported.	13 years ago
Luca Barbato	a896d7f45a	v4l2: cosmetics	13 years ago
Luca Barbato	21aa6ae4fb	v4l2: uniform and format options	13 years ago
Luca Barbato	af7123b2ad	v4l2: do not force interlaced mode Video4linux2 supports both interlaced and non-interlaced mode, do not ask for interlaced if not necessary.	13 years ago
Janne Grunau	a2d1d21629	avio: exit early in fill_buffer without read_packet Fixes an invalid free() with ass in avi. The sample in bug 98 passes parts of AVPacket.data as buffer for the AVIOContext. Since the packet is quite large fill_buffer tries to reallocate the buffer before doing nothing. Fixes bug 98.	13 years ago
John Brooks	d209c27b09	vc1dec: fix invalid memory access for small video dimensions For small video dimensions, these calculations of the upper bound for pixel access may have a negative result. Using an unsigned comparison to bound a potentially negative value only works if the greater operand is non-negative. Fixed by doing edge emulation when the upper bound is probably negative, everywhere that this pattern appears. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com>	13 years ago
John Brooks	aacf6b3a2f	rv34: fix invalid memory access for small video dimensions For small video dimensions calculations of the upper bound for pixel access may result in negative value. Using an unsigned comparison works only if the greater operand is non-negative. This is fixed by doing edge emulation explicitly for such conditions. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com>	13 years ago
Christophe GISQUET	98f24ecd6c	rv34: joint coefficient decoding and dequantization Perform dequantization while decoding coefficients instead of performing it on the entire coefficients buffer. Since quantized coefficients are very sparse, this usually causes a small speedup. Speedup of around 1% on Panda board compared to the removed here neon code. Global speedup is probably around 3%. Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com>	13 years ago

... 3 4 5 6 7 ...

31831 Commits (66b9d7065a5c01bcf6b5d5325fd9b9d4132e7e6f) All Branches Search

31831 Commits (66b9d7065a5c01bcf6b5d5325fd9b9d4132e7e6f)

All Branches