Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/FFmpeg/FFmpeg.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-05-28avcodec/libfdk-aacdec: Correct buffer_size parameterMichael Niedermayer
the timeDataSize argument to aacDecoder_DecodeFrame() seems undocumented and until 2016 04 (203e3f28fbebec7011342017fafc2a0bda0ce530) unused. after that commit libfdk-aacdec interprets it as size in sample units and memsets that on error. FFmpeg as well as others (like GStreamer) did interpret it as size in bytes Fixes: 1442/clusterfuzz-testcase-minimized-4540199973421056 (This requires recent libfdk to reproduce) Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-28avcodec/sbrdsp_template: Fix: runtime error: signed integer overflow: ↵Michael Niedermayer
849815297 + 1315389781 cannot be represented in type 'int' Fixes: 1770/clusterfuzz-testcase-minimized-5285511235108864 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-28avcodec/aacps: Check border_position to be monotoneMichael Niedermayer
Fixes: runtime error: left shift of negative value -67108864 Fixes: 1738/clusterfuzz-testcase-minimized-6734814327603200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-28avcodec/ivi_dsp: Fix runtime error: left shift of negative value -2Michael Niedermayer
Fixes: 1839/clusterfuzz-testcase-minimized-6238490993885184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-27avcodec/mlpdec: Do not leave invalid values in matrix_out_ch[] on errorMichael Niedermayer
Fixes: runtime error: index 12 out of bounds for type 'uint8_t [8]' Fixes: 1832/clusterfuzz-testcase-minimized-6574546079449088 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-27avcodec/ra144dec: Fix runtime error: left shift of negative value -17Michael Niedermayer
Fixes: 1830/clusterfuzz-testcase-minimized-5828293733384192 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-27avcodec/pixlet: Fix runtime error: signed integer overflow: 2147483647 + 32 ↵Michael Niedermayer
cannot be represented in type 'int' Fixes: 1829/clusterfuzz-testcase-minimized-5527165321871360 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-26avcodec/theora: export cropping information instead of handling it internallyJames Almer
This merges commit 1202b712690c14f0efb06e4ad8b06c5b3df6822a from libav, originally written by Anton Khirnov and skipped in fc63d5ceb357c4b760cb02772de0b50d0557140f. libavcodec/vp3.c | 26 +++++++++----------------- 1 file changed, 9 insertions(+), 17 deletions(-)
2017-05-26avcodec/h264dec: export cropping information instead of handling it internallyJames Almer
This merges commit c3e84820d67cb1d8cfb4196f9b43971308a81571 from libav, originally written by Anton Khirnov and skipped in fc63d5ceb357c4b760cb02772de0b50d0557140f. libavcodec/h264_picture.c | 3 --- libavcodec/h264_ps.c | 9 --------- libavcodec/h264_slice.c | 25 +++++++++++++++++++------ libavcodec/h264dec.c | 13 +------------ libavcodec/h264dec.h | 9 +++++---- 5 files changed, 25 insertions(+), 34 deletions(-)
2017-05-26avcodec/h264dec: be more explicit in handling container croppingJames Almer
This merges commit 4fded0480f20f4d7ca5e776a85574de34dfead14 from libav, originally written by Anton Khirnov and skipped in fc63d5ceb357c4b760cb02772de0b50d0557140f. libavcodec/h264_slice.c | 20 +++++++++++++------- libavcodec/h264dec.c | 3 +++ libavcodec/h264dec.h | 5 +++++ 3 files changed, 21 insertions(+), 7 deletions(-)
2017-05-26avcodec/hevcdec: export cropping information instead of handling it internallyJames Almer
This merges commit a02ae1c6837a54ed9e7735da2b1f789b2f4b6e13 from libav, originally written by Anton Khirnov and skipped in fc63d5ceb357c4b760cb02772de0b50d0557140f. libavcodec/hevc_parser.c | 6 ++++-- libavcodec/hevc_ps.c | 31 ++++++++++++------------------- libavcodec/hevc_ps.h | 2 -- libavcodec/hevc_refs.c | 18 +++++------------- libavcodec/hevcdec.c | 7 ++++--- libavcodec/hevcdec.h | 2 -- 6 files changed, 25 insertions(+), 41 deletions(-) Signed-off-by: James Almer <jamrial@gmail.com>
2017-05-26avcodec/clearvideo: Check buf_size before decoding frameMichael Niedermayer
Fixes; Timeout Fixes: 1826/clusterfuzz-testcase-minimized-5728569256837120 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-26avcodec/aacdec_fixed: Fix runtime error: signed integer overflow: ↵Michael Niedermayer
-2147483648 * -1 cannot be represented in type 'int' Fixes: 1825/clusterfuzz-testcase-minimized-6002833050566656 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/smc: Check remaining inputMichael Niedermayer
Fixes: Timeout Fixes: 1818/clusterfuzz-testcase-minimized-5039166473633792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/diracdec: Fix off by 1 error in quant checkMichael Niedermayer
Fixes: out of array read Fixes: 1781/clusterfuzz-testcase-minimized-4617176877105152 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/diracdec: Factor quant matrix readsMichael Niedermayer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25frame_thread_encoder: extend critical code covered by finished_task_mutex.Ronald S. Bultje
Should fix tsan errors in utvideoenc_rgb_left and related tests.
2017-05-25hevc: fix race condition in max_ra/seq_decode.Ronald S. Bultje
These variables are shared between frame threads, but they are updated post-setup_finished() if a EOB/EOS slice type occurs. Moving the EOB/EOS slices to the next frame thread instance (by parsing them leading into the next picture instead of trailing behind the last picture) effectively prevents this race condition. This fixes tsan failures on hevc-conformance-NoOutPrior_A_Qualcomm_1.
2017-05-25avcodec/tscc2: Skip duplicate framesMichael Niedermayer
This turns CFR duplicated frames into skiped frames Fixes: Timeout Fixes: 1719/clusterfuzz-testcase-minimized-6375090079924224 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/wavpack: Fix runtime error: left shift of negative value -14778Michael Niedermayer
Fixes: 1778/clusterfuzz-testcase-minimized-5128953268273152 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/wavpack: Fix: runtime error: signed integer overflow: 3 * ↵Michael Niedermayer
-2147483648 cannot be represented in type 'int' Fixes: 1776/clusterfuzz-testcase-minimized-6191258231898112 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/jpeg2000dec: Fix copy and paste errorMichael Niedermayer
Found-by: jamrial Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-25avcodec/audiotoolboxdec: check packet side data for AAC extradata updatesJames Almer
Tested-by: rcombs Signed-off-by: James Almer <jamrial@gmail.com>
2017-05-25avcodec/libopenh264dec: fix return error value when h264_mp4toannexb_bsf is ↵James Almer
not found
2017-05-25avcodec/aac_adtstoasc: propagate new extradata using packet side dataJames Almer
This removes the current API violating behavior of overwritting the stream's extradata during packet filtering, something that should not happen after the av_bsf_init() call. The bitstream filter generated extradata is no longer available during write_header(), and as such not usable with non seekable output. The FATE tests are updated to reflect this. Signed-off-by: James Almer <jamrial@gmail.com>
2017-05-24avcodec/cllc: Check bitstream end before decoding pixelsMichael Niedermayer
Fixes timeout Fixes: 1802/clusterfuzz-testcase-minimized-5008293510512640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-24avcodec/wavpack: Fix runtime error: left shift of negative value -1Michael Niedermayer
Fixes: 1807/clusterfuzz-testcase-minimized-6258676199325696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-24avcodec/jpeg2000dec: Check tile offsetsMichael Niedermayer
Fixes: runtime error: signed integer overflow: 4096 - -2147483648 cannot be represented in type 'int' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-24avcodec/sanm: Fix uninitialized reference framesMax Justicz
Fixes: poc.snm Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-24avcodec/jpeglsdec: Check get_bits_left() before decoding a pictureMichael Niedermayer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/celp_filters: Fix runtime error: signed integer overflow: 1892453989 ↵Michael Niedermayer
+ 381702783 cannot be represented in type 'int' Fixes: 1766/clusterfuzz-testcase-minimized-6562020075765760 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/lagarith: Fix runtime error: left shift of 1 by 31 places cannot be ↵Michael Niedermayer
represented in type 'int' Fixes: 1764/clusterfuzz-testcase-minimized-5394243164045312 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/aacdec_fixed: Fix multiple runtime error: shift exponent 127 is too ↵Michael Niedermayer
large for 32-bit type 'int' Fixes: 1762/clusterfuzz-testcase-minimized-5150981081792512 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23lavc/ffjni: add missing '\n'Matthieu Bouron
2017-05-23lavc/mediacodec_wrapper: do not declare ↵Matthieu Bouron
JNIAMedia{Codec,CodecList,Format}Fields on the stack
2017-05-23lavc/mediacodec_wrapper: fix local reference leaksMatthieu Bouron
2017-05-23avcodec/fmvc: Fix use of uninitialized memory when the first frame is not a ↵Max Justicz
keyframe Fixes: fmvc-poc.avi Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/nvenc: remove unnecessary alignmentTimo Rothenpieler
Fixes #6260
2017-05-23avcodec/g723_1: Fix runtime error: signed integer overflow: -1013481472 + ↵Michael Niedermayer
-1139123755 cannot be represented in type 'int' See: LsptoA() and L_add() Fixes: 1758/clusterfuzz-testcase-minimized-6054857184116736 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/ffv1dec_template: Fix runtime error: signed integer overflow: 202 + ↵Michael Niedermayer
2147483615 cannot be represented in type 'int' Fixes: 1748/clusterfuzz-testcase-minimized-6690208340770816 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/xsubdec: Check that RLE coded image and colors fit in the bufferMichael Niedermayer
Fixes: Timeout Fixes: 1747/clusterfuzz-testcase-minimized-6035451213250560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-23avcodec/asvdec: Check buf_sizeMichael Niedermayer
Fixes Timeout Fixes: 1746/clusterfuzz-testcase-minimized-6687393392361472 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/takdec: Fix runtime error: signed integer overflow: 2146548196 + ↵Michael Niedermayer
2156738 cannot be represented in type 'int' Fixes: 1743/clusterfuzz-testcase-minimized-4994834022531072 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/takdec: Fix runtime error: left shift of negative value -360Michael Niedermayer
Fixes: 1739/clusterfuzz-testcase-minimized-5399237707694080 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/takdec: Fix multiple runtime error: signed integer overflow: -512 * ↵Michael Niedermayer
4563386 cannot be represented in type 'int' Fixes: 1706/clusterfuzz-testcase-minimized-6112772670619648 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/mlpdec: Fix runtime error: shift exponent -5 is negativeMichael Niedermayer
Fixes part of 1708/clusterfuzz-testcase-minimized-5035111957397504 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/escape124: Check depth against num_superblocksMichael Niedermayer
Fixes: runtime error: left shift of 66184 by 15 places cannot be represented in type 'int' Fixes: 1707/clusterfuzz-testcase-minimized-6502767008940032 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/ivi_dsp: Fix multiple runtime error: left shift of negative value -71Michael Niedermayer
Fixes: 1734/clusterfuzz-testcase-minimized-5385630815092736 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/dct32_template: Fix runtime error: signed integer overflow: ↵Michael Niedermayer
-1071326067 - 1088238847 cannot be represented in type 'int' Fixes: 1731/clusterfuzz-testcase-minimized-5123972414832640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-05-22avcodec/mjpegdec: Fix runtime error: signed integer overflow: -32767 * ↵Michael Niedermayer
130560 cannot be represented in type 'int' Fixes: 1724/clusterfuzz-testcase-minimized-4842395432648704 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>