diff options
| author | Reinhard Tartler <siretart@tauware.de> | 2013-05-11 12:08:35 +0200 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2013-05-11 15:04:20 +0200 |
| commit | 3197a9c4fa46972077e12065047c3d52ef4b40f6 (patch) | |
| tree | c8994ef731b51c38f36771f4311ae07a63f95223 | |
| parent | ade4f3e74635d1fa4b3c34c3a1724b43d92b08b5 (diff) | |
| download | ffmpeg-3197a9c4fa46972077e12065047c3d52ef4b40f6.tar.gz | |
Update changelog for 0.7.8 release
| -rw-r--r-- | Changelog | 29 |
1 files changed, 29 insertions, 0 deletions
@@ -1,6 +1,35 @@ Entries are sorted chronologically from oldest to youngest within each release, releases are sorted from youngest to oldest. +version 0.7.8: +- indeo5: update AVCodecContext width/height on size change, CVE-2012-2787 +- oggdec: make sure the private parse data is cleaned up, CVE-2012-2882 +- vorbisdec: Error on bark_map_size equal to 0, CVE-2013-0894 +- wmaprodec: return an error, not 0, when the input is too small +- wmadec: require block_align to be set +- xxan: fix invalid memory access in xan_decode_frame_type0() +- h264: check for luma and chroma bit depth being equal, CVE-2013-2277 +- matroskadec: request a read buffer for the wav header +- shorten: validate that the channel count in the header is not <= 0 +- shorten: set invalid channels count to 0 +- shorten: report meaningful errors +- shorten: use the unsigned type where needed +- dsputil: fix invalid array indexing +- parser: fix large overreads +- lavf: fix arithmetic overflows in avformat_seek_file() +- atrac3: avoid oversized shifting in decode_bytes() +- flacdec: simplify bounds checking in flac_probe() +- lzo: fix overflow checking in copy_backptr() +- wmaprodec: require block_align to be set +- iff: validate CMAP palette size, CVE-2013-2495 +- avfiltergraph: check for sws opts being non-NULL before using them. +- dfa: check for invalid access in decode_wdlt() +- lavf: make sure stream probe data gets freed +- rv10: check that extradata is large enough +- qdm2: check that the FFT size is a power of 2 +- oggdec: fix faulty cleanup prototype +- aac: check the maximum number of channels + version 0.7.7: Security Updates: |