FFmpeg

Commit Graph

Author	SHA1	Message	Date
Kostya Shishkov	6de226a2b8	indeo3: validate new frame size before resetting decoder	13 years ago
Kostya Shishkov	bc00da2701	indeo3: when freeing buffers, set pointers referencing them to NULL as well	13 years ago
Kostya Shishkov	81064a8045	indeo3: initialise pixel planes on allocation This prevents decoder from reading garbage from it in case of errors later.	13 years ago
Kostya Shishkov	fc417db3f1	indeo3: ensure that decoded cell data is in 7-bit range as presumed by decoder	13 years ago
Hendrik Leppkes	4b7fa553a9	indeo3: fix motion vector validation The index of the motion vector has to be checked before being multiplied by 2 for the array index. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>	13 years ago
Michael Niedermayer	4a80ebe491	indeo3: Fix reallocation code so that it doesnt become inconsistent. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	a84851bef8	indeo3dec: check mv bitstream pointer Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	8a521d57b3	indeo3dec: Fix end pointer. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	ba775a54bc	indeo3: fix out of picture write. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	50f4f272fe	indeo3: Fix out of reference reading with NULL blocks. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	e75518e18d	indeo3: move MV check up. This adds checking for modes >= 10. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	33a183df46	indeo3: Fix overreading requant_tab. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	56ffa3fefb	indeo3: Check motion vectors. Fixes overread of reference frame. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Ronald S. Bultje	fc9bc08dca	Indeo3: fix crashes on corrupt bitstreams. Splits at borders of cells are invalid, since it leaves one of the cells with a width/height of zero. Also, propagate errors on buffer allocation failures, so we don't continue decoding (which crashes). Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org	13 years ago
Martin Storsjö	9cf0841ef3	dsputil: Add ff_ prefix to the dsputil_init functions Signed-off-by: Martin Storsjö <martin@martin.st>	13 years ago
Hendrik Leppkes	6071644287	indeo3: fix motion vector validation The index of the motion vector has to be checked before being multiplied by 2 for the array index. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Janne Grunau	be540e0cb3	indeo3: check motion vectors for validity Fixes null pointer dereferences in fuzzed files found by Oana Stratulat. Signed-off-by: Janne Grunau <janne-libav@jannau.net>	13 years ago
Michael Niedermayer	134aaa79f7	indeo3: Fix null ptr dereference Fixes Ticket804 Bug found by: Oana Stratulat Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	cd645c15d8	indeo3: check return values of allocate_frame_buffers() Bug Found by: Diana Elena Muscalu Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Aneesh Dogra	464ccb0144	indeo3: check per-plane data buffer against input buffer bounds. Fixes : http://bugzilla.libav.org/show_bug.cgi?id=102 Signed-off-by: Alex Converse <alex.converse@gmail.com>	13 years ago
Kostya Shishkov	1469f943ad	indeo3: cosmetics Signed-off-by: Diego Biurrun <diego@biurrun.de>	13 years ago
Aneesh Dogra	97980db487	indeo3: error out if no motion vector is set. This fixes a crash on a corrupt bitstream (bugzilla #93). Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>	13 years ago
Michael Niedermayer	1afe49b062	indeo3: out of array read checks for decode_plane() Fixes: avi+indeo3+++1-dog.avi Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	e9e642cbfb	indeo3: Check remaining bits in parse_bintree() Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Michael Niedermayer	e421b79d01	indeo3: fix null pointer dereference in vulnerable.mov Signed-off-by: Michael Niedermayer <michaelni@gmx.at>	13 years ago
Alex Converse	1149fbc763	indeo3: Fix a fencepost error. Found with asan and the venerable 1-dog.avi sample.	13 years ago
Maxim Poliakovski	594b54b51e	replacement Indeo 3 decoder The new decoder is much smaller and has better code quality. Cleanup and fixes courtesy of Kostya Shishkov. Signed-off-by: Diego Biurrun <diego@biurrun.de>	13 years ago
Diego Biurrun	124e28847b	Remove some stray unnecessary ffmpeg references.	13 years ago
Anton Khirnov	ec6402b7c5	lavc: use designated initialisers for all codecs. It's more readable and less prone to breakage.	13 years ago
Stefano Sabatini	48df6a2415	indeo3: add out-of-buffer write check Prevent out-of-buffer writes. In particular fix smclocki32.avi.1.1 crash, trac issue #114, roundup issue #1482.	14 years ago
Stefano Sabatini	7f58eb3c2b	indeo3: release buffer in indeo3_decode_end() Fix leak.	14 years ago
Stefano Sabatini	5443812fbc	indeo3: remove unnecessary includes	14 years ago
Stefano Sabatini	a469c32478	indeo3: add @file doxy and a link to multimedia wiki documentation	14 years ago
Stefano Sabatini	01042d4123	lavc: set defaults in internal codec frames This is required specifically for setting frame->format to -1, otherwise it will be set to 0 = PIX_FMT_YUV420P and code reading the format from the output decoded frame will get misled. In particular fix regressions occurring with the pending vsrc_buffer patch.	14 years ago
Alex Converse	aab6374bbe	indeo3: Eliminate use of long.	14 years ago
Mans Rullgard	2912e87a6c	Replace FFmpeg with Libav in licence headers Signed-off-by: Mans Rullgard <mans@mansr.com>	14 years ago
Reinhard Tartler	7ffe76e540	Merge libavcore into libavutil Done to keep ABI compatible. Otherwise this is just silly	14 years ago
Reinhard Tartler	737eb5976f	Merge libavcore into libavutil It is pretty hopeless that other considerable projects will adopt libavutil alone in other projects. Projects that need small footprint are better off with more specialized libraries such as gnulib or rather just copy the necessary parts that they need. With this in mind, nobody is helped by having libavutil and libavcore split. In order to ease maintenance inside and around FFmpeg and to reduce confusion where to put common code, avcore's functionality is merged (back) to avutil. Signed-off-by: Reinhard Tartler <siretart@tauware.de>	14 years ago
Diego Elio Pettenò	e7e2df27f8	Add ff_ prefix to data symbols of encoders, decoders, hwaccel, parsers, bsf. None of these symbols should be accessed directly, so declare them as hidden. Signed-off-by: Mans Rullgard <mans@mansr.com> (cherry picked from commit `d36beb3f69`)	14 years ago
Diego Elio Pettenò	d36beb3f69	Add ff_ prefix to data symbols of encoders, decoders, hwaccel, parsers, bsf. None of these symbols should be accessed directly, so declare them as hidden. Signed-off-by: Mans Rullgard <mans@mansr.com>	14 years ago
Stefano Sabatini	e16f217ceb	Use new imgutils.h API names, fix deprecation warnings. Originally committed as revision 25058 to svn://svn.ffmpeg.org/ffmpeg/trunk	14 years ago
Stefano Sabatini	6ce9b4310c	Remove use of the deprecated function avcodec_check_dimensions(), use av_check_image_size() instead. Originally committed as revision 24711 to svn://svn.ffmpeg.org/ffmpeg/trunk	14 years ago
Måns Rullgård	8fc0162ac4	Add av_ prefix to bswap macros Originally committed as revision 24170 to svn://svn.ffmpeg.org/ffmpeg/trunk	15 years ago
Måns Rullgård	e6b22522c9	bswap: change ME to NE in macro names Other parts of FFmpeg use NE (native endian) rather than ME (machine). This makes it consistent. Originally committed as revision 24169 to svn://svn.ffmpeg.org/ffmpeg/trunk	15 years ago
Stefano Sabatini	72415b2adb	Define AVMediaType enum, and use it instead of enum CodecType, which is deprecated and will be dropped at the next major bump. Originally committed as revision 22735 to svn://svn.ffmpeg.org/ffmpeg/trunk	15 years ago
Måns Rullgård	63613fe615	Replace WORDS_BIGENDIAN with HAVE_BIGENDIAN Originally committed as revision 19508 to svn://svn.ffmpeg.org/ffmpeg/trunk	16 years ago
Måns Rullgård	3aab27b459	Remove useless #include <unistd.h> from many files Originally committed as revision 19499 to svn://svn.ffmpeg.org/ffmpeg/trunk	16 years ago
Reimar Döffinger	4f76697b3e	Change av_free to av_freep Originally committed as revision 19360 to svn://svn.ffmpeg.org/ffmpeg/trunk	16 years ago
Reimar Döffinger	16c8318513	Reallocate internal buffer when coded frame size changes. Fixes out-of-bounds reads and writes with i32/smclocki32.avi.1.0 from issue 1240. Originally committed as revision 19359 to svn://svn.ffmpeg.org/ffmpeg/trunk	16 years ago
Reimar Döffinger	28bcc76ab7	Change iv_decode_frame to get AVCodecContext as argument, so that avcodec_check_dimensions can be called with a proper context instead of NULL. Originally committed as revision 19358 to svn://svn.ffmpeg.org/ffmpeg/trunk	16 years ago

1 2 3

117 Commits (9ebe6e391071690dbee79a645c51b14bd55c2ff4)