FFmpeg

Commit Graph

Author	SHA1	Message	Date
Michael Niedermayer	172a43ce36	avcodec/sanm: Check extradata_size before allocations Fixes: Leaks Fixes: 15349/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SANM_fuzzer-5102530557640704 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	6 years ago
Michael Niedermayer	936ca7f101	avcodec/sanm: Optimize fill_frame() with av_memcpy_backptr() Fixes: Timeout (76 sec -> 24 sec) Fixes: 15043/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SANM_fuzzer-5699856238116864 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	6 years ago
Max Justicz	ca616b0f72	avcodec/sanm: Fix uninitialized reference frames Fixes: poc.snm Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	8 years ago
Diego Biurrun	67351924fa	Drop unreachable break and return statements	8 years ago
Diego Biurrun	5b5ed92d92	sanm: Change type of array pitch parameters to ptrdiff_t ptrdiff_t is the correct type for array pitches and similar.	9 years ago
Vittorio Giovara	def97856de	lavc: AV-prefix all codec capabilities Express bitfields more simply. Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>	10 years ago
Michael Niedermayer	39bbdebb1e	avcodec/sanm: Reset sizes in destroy_buffers() Fixes crash in 1288a2fe8e9ae6b00ca40e089d08ca65_signal_sigsegv_7ffff71426a7_354_accident.san with allocation limit 65536 Found-by: Samuel Groß, Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	10 years ago
Diego Biurrun	019a28cd63	sanm: Use correct printf conversion specifiers for POSIX int types	11 years ago
Michael Niedermayer	dddacf780f	avcodec/sanm: use named consant instead of literal number Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	11 years ago
Paul B Mahol	a420ccd4f2	LucasArts SMUSH SANM video decoder Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>	11 years ago
Paul B Mahol	01507ab369	avcodec/sanm: stop using deprecated avcodec_set_dimensions() Signed-off-by: Paul B Mahol <onemda@gmail.com>	11 years ago
Clément Bœsch	b46f19100b	cosmetics: group remaining .name and .long_name. See `b2bed9325`.	12 years ago
Reimar Döffinger	49cf36f4e3	sanm: fix undefined behaviour on big-endian. A variable with post-increment may only appear once in a statement. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de>	12 years ago
Michael Niedermayer	9dd04f6d8c	sanm: Check dimensions before use Fixes integer overflow and out of array accesses Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Paul B Mahol	a9b424879f	lavc & lavf: replace deprecated av_log* functions Signed-off-by: Paul B Mahol <onemda@gmail.com>	12 years ago
Clément Bœsch	1ec94b0f06	lavc: factorize ff_{thread_,re,}get_buffer error messages. Coccinelle profile used: @@ expression r, ctx, f, loglevel, str, flags; @@ -if ((r = ff_get_buffer(ctx, f, flags)) < 0) { - av_log(ctx, loglevel, str); - return r; -} +if ((r = ff_get_buffer(ctx, f, flags)) < 0) + return r; @@ expression r, ctx, f, loglevel, str; @@ -if ((r = ff_reget_buffer(ctx, f)) < 0) { - av_log(ctx, loglevel, str); - return r; -} +if ((r = ff_reget_buffer(ctx, f)) < 0) + return r; @@ expression r, ctx, f, loglevel, str, flags; @@ -if ((r = ff_thread_get_buffer(ctx, f, flags)) < 0) { - av_log(ctx, loglevel, str); - return r; -} +if ((r = ff_thread_get_buffer(ctx, f, flags)) < 0) + return r; ...along with some manual patches for the remaining ones.	12 years ago
Michael Niedermayer	5260edee7e	sanm: Use the correct height variable in the decoded_size checks Fixes integer overflow and out of array accesses Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	4ee88db840	sanm: init sizes with the full frame size Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	f0d9ccac89	sanm: reset frame sizes on buffer destruction Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	365270aec5	sanm: add forgotten check for decoded_size in old_codec37() Fixes out of array accesses Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Paul B Mahol	da726a8763	paf, sanm: remove unused header after `b05830169d` Signed-off-by: Paul B Mahol <onemda@gmail.com>	12 years ago
Michael Niedermayer	dc8dd2f6e9	sanm: Check MV before using them. Fixes out of array reads Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	7357ca900e	sanm: Check decoded_size. This prevents a buffer overflow in rle_decode() Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	1bb05797ec	sanm: remove "duplicate" for loop. Fixes input buffer overread Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	49b729d3af	sanm: check image dimensions before using them Avoids integer overflows and out of array accesses. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	12 years ago
Michael Niedermayer	b12d92efd6	avoid "0xFF << 24" as it is considered a integer overflow in C99 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	1b5069aa41	sanm: fix off by 1 error in draw_glyph() This fix changes nothing as nothing passed a so large value Fixes CID733785 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Paul B Mahol	2d42008757	sanm: make use of dsputil About 27% faster decoding. Signed-off-by: Paul B Mahol <onemda@gmail.com>	13 years ago
Paul B Mahol	1f9bc3104a	sanm: remove code duplication Signed-off-by: Paul B Mahol <onemda@gmail.com>	13 years ago
Paul B Mahol	3b9dd906d1	sanm: replace conditions in for loops with more common version Signed-off-by: Paul B Mahol <onemda@gmail.com>	13 years ago
Carl Eugen Hoyos	6eff277284	Make LucasArts Smush SANM palette opaque. Reviewed-by: Paul B Mahol	13 years ago
Paul B Mahol	fd0b8c6ad5	sanm: silence warnings Signed-off-by: Paul B Mahol <onemda@gmail.com>	13 years ago
Paul B Mahol	69254f4628	LucasArts SMUSH video decoder Signed-off-by: Paul B Mahol <onemda@gmail.com>	13 years ago

43 Commits (80c3a15a1b620bc0cb5e8f5269bb3a0f514c339e)