Michael Niedermayer
7c9d69360c
lavc: check media type of the decoder before calling it.
...
This fixes a segfault where a video decoder was called
from avcodec_decode_audio*().
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
5216245a2c
indeo4: fix null ptr dereference
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
d3db8988d5
indeo4: check that num_mbs matches
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
420d1df2e2
apedec: check bits <= 32.
...
Fixes a floating-point exception further down.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
13 years ago
Michael Niedermayer
3768445be8
tm2dec: fix overread
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Aneesh Dogra
c265b77b11
cavs: Remove unused code.
...
The square is always passed as 1 whenever the function is called and
thus the if block never gets executed.
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
13 years ago
Michael Niedermayer
f9143d2407
ividsp: prevent pointers from going outside and overreading.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
12038ab16d
ividsp: zero pitch so as not to overread
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
874ac0b1fd
indeo5: change AVCodecContext w/h when internal ones change.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
a79af8e8cb
dcttest: put ff_prores_idct_put_10_sse2_wrap under HAVE_YASM
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Justin Ruggles
67aec401d8
libspeexdec: set frame size in libspeex_decode_init()
...
This fixes speex decoding, which was broken in 85469f1c
.
13 years ago
Michael Niedermayer
96df29c318
svq3: Fix pointer type mismatch warning.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
280beebd39
cavsdec: initialize all tables to zeros.
...
This ensures that they dont contain invalid values.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Franz Brauße
12cbbbb4ab
smacker audio: sign-extend the initial 16-bit predicted value
...
Fixes Bug #265
Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
13 years ago
Michael Niedermayer
a627c1a146
svq1enc: fix ptr type mismatch warning
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
e2094bd03b
mpeghaudiodec: Fix "set but not used" warnings
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
8307025467
mjpegdec: Fix "assignment from incompatible pointer type" warnings
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
03757d488f
j2kenc: Fix "function declaration isn’t a prototype" warning
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
cb9fe2745b
j2kdec: fix format strings
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
3ebfe22d13
interplayvideodec: pass correct pointer to av_dlog()
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
90f9b06386
dvbsubdec: Fix "set but not used" warning
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
ec0965be36
cavsdec: ensure the tables have been allocated before using them
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Diego Biurrun
b691fd7a4d
h264: drop ff_h264_ prefix from static function ff_h264_decode_rbsp_trailing()
13 years ago
Diego Biurrun
9ad80ef3db
h264: Make ff_h264_decode_end() static, it is not used externally.
...
Also drop the now unnecessary ff_ prefix from its name.
13 years ago
Ronald S. Bultje
0399fe0fd2
lzw: fix potential integer overflow.
13 years ago
Ronald S. Bultje
b7b1509d06
truemotion: forbid invalid VLC bitsizes and token values.
...
SHOW_UBITS() is only defined up to n_bits is 25, therefore forbid
values larger than this in get_vlc2() (max_bits). tokens[][] can be
used as an index in deltas[], which has a size of 64, so ensure the
values are smaller than that.
This prevents crashes on corrupt bitstreams.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Ronald S. Bultje
bf39d3b59d
truemotion2: handle out-of-frame motion vectors through edge extension.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Kostya Shishkov
a05c41acd1
mp3dec: perform I/S and M/S only when frame mode is joint stereo.
...
Looks like some LAME versions produce dual stereo mode MP3s with
flags for intensity and middle stereo set. In this mode those flags
should be ignored like the reference decoder and derived ones do.
13 years ago
Carl Eugen Hoyos
282ec7289d
Do not try to use lowres for unusual jpg subsampling.
...
Fixes ticket #1144 .
13 years ago
Carl Eugen Hoyos
9a0f2b7b3a
Revert "Fix compilation with hardcoded tables."
...
This reverts commit b17b296369
.
13 years ago
Piotr Bandurski
ddd8974008
iff: prevent a possible crash with broken/prepared IFF PBM
...
Based on fix by Peter Ross for ticket #1054 .
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Ronald S. Bultje
ddcf67c8a5
lzw: prevent buffer overreads.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Mashiat Sarker Shakkhar
28e8c4d59a
WMAL: Remove inaccurate and unnecessary doxy
...
A call to decode_packet() does not always decode a complete WMA packet.
Moreover, this is not the correct place to document calls that are part
of the public API.
Signed-off-by: Diego Biurrun <diego@biurrun.de>
13 years ago
Ronald S. Bultje
63a1b481f6
h264: fix cabac-on-stack after safe cabac reader.
13 years ago
Michael Bradshaw
b678dd9690
Fixes ticket 1127.
...
I'm still looking into why bpp is getting set to 0.
13 years ago
Ronald S. Bultje
bd508d435b
truemotion2: convert packet header reading to bytestream2.
...
Also use correct buffer sizes in calls to tm2_read_stream(). Together,
this prevents overreads.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Ronald S. Bultje
a940198130
cabac: add overread protection to BRANCHLESS_GET_CABAC().
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
13 years ago
Ronald S. Bultje
448dc42571
cabac: increment jump locations by one in callers of BRANCHLESS_GET_CABAC().
13 years ago
Ronald S. Bultje
16f6e83f74
cabac: remove unused argument from BRANCHLESS_GET_CABAC_UPDATE().
13 years ago
Ronald S. Bultje
951014e5bb
cabac: use struct+offset instead of memory operand in BRANCHLESS_GET_CABAC().
13 years ago
Ronald S. Bultje
a0bdcb019e
h264: add overread protection to get_cabac_bypass_sign_x86().
13 years ago
Ronald S. Bultje
95bfa4ead7
h264: reindent get_cabac_bypass_sign_x86().
13 years ago
Ronald S. Bultje
db025929f2
h264: use struct offsets in get_cabac_bypass_sign_x86().
13 years ago
Ronald S. Bultje
7374fac804
h264: fix overreads in cabac reader.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Ronald S. Bultje
d360dd902c
wmall: fix seeking.
13 years ago
Ronald S. Bultje
0a82f5275f
lagarith: fix buffer overreads.
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
13 years ago
Diego Biurrun
c0b34e6148
dvdec: drop unnecessary dv_tablegen.h #include
...
dvdec.c uses nothing from dv_tablegen.h. As a welcome side-effect, this
fixes compilation of that file with hardcoded tables enabled.
13 years ago
Michael Niedermayer
c44417e15a
indeo4: Dont leave tables in random state on errors.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
a74d721876
indeo4: apply correction to eob/esc indexes too
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago
Michael Niedermayer
92f7f1db42
indeo4: Check for mismatching scan tables
...
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago