aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | mpegts: prevent get_bits64() from reading nonsense at the end.Michael Niedermayer2012-03-031-0/+3
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | cook: check that category is smaller than 8Michael Niedermayer2012-03-031-1/+5
| | | | | | | | | | | | | | | | This fixes some out of global array accesses of dither_tab. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Reviewed-by: Benjamin Larsson <benjamin@southpole.se> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mpeg-ts: fix handling of size=0 SL headers.Michael Niedermayer2012-03-031-0/+6
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | MAINTAINERS: add 0.10 to the releases, seems ive forgotten it.Michael Niedermayer2012-03-031-0/+1
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | lavc: unify similar code merged from both branches.Nicolas George2012-03-031-8/+3
| |
* | vsrc_testsrc: free option values.Nicolas George2012-03-031-0/+3
| |
* | vsrc_life: free option values.Nicolas George2012-03-031-0/+4
| |
* | vf_fade: free type when overwriting it.Nicolas George2012-03-031-0/+1
| |
* | arm: Fix 10l typoMichael Niedermayer2012-03-031-4/+4
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | bluray protocolPetri Hintukainen2012-03-037-0/+273
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | kvmc: Fix out of reference frame reads.Michael Niedermayer2012-03-031-0/+16
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | qpeg: fix overreads.Michael Niedermayer2012-03-031-6/+9
| | | | | | | | | | | | | | | | qpeg should probably be changed to use the checked bytestream reader. But for now this fixes it and is significantly less work. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | qpeg: Fix out of array writes.Michael Niedermayer2012-03-031-0/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | srtdec: fix a format string vulnerability.Fabian Greffrath2012-03-031-2/+2
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Remove duplicate initializers for VDA_VLD and GBR24P.Dale Curtis2012-03-031-16/+0
| | | | | | | | | | | | | | Noticed by the Chromium Mac clang build, http://crbug.com/116599 Signed-off-by: Dale Curtis <dalecurtis@chromium.org> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Merge remote-tracking branch 'qatar/master'Michael Niedermayer2012-03-0380-2482/+2375
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * qatar/master: (29 commits) amrwb: remove duplicate arguments from extrapolate_isf(). amrwb: error out early if mode is invalid. h264: change underread for 10bit QPEL to overread. matroska: check buffer size for RM-style byte reordering. vp8: disable mmx functions with sse/sse2 counterparts on x86-64. vp8: change int stride to ptrdiff_t stride. wma: fix invalid buffer size assumptions causing random overreads. Windows Media Audio Lossless decoder rv10/20: Fix slice overflow with checked bitstream reader. h263dec: Disallow width/height changing with frame threads. rv10/20: Fix a buffer overread caused by losing track of the remaining buffer size. rmdec: Honor .RMF tag size rather than assuming 18. g722: Fix the QMF scaling r3d: don't set codec timebase. electronicarts: set timebase for tgv video. electronicarts: parse the framerate for cmv video. ogg: don't set codec timebase electronicarts: don't set codec timebase avs: don't set codec timebase wavpack: Fix an integer overflow ... Conflicts: libavcodec/arm/vp8dsp_init_arm.c libavcodec/fraps.c libavcodec/h264.c libavcodec/mpeg4videodec.c libavcodec/mpegvideo.c libavcodec/msmpeg4.c libavcodec/pnmdec.c libavcodec/qpeg.c libavcodec/rawenc.c libavcodec/ulti.c libavcodec/vcr1.c libavcodec/version.h libavcodec/wmalosslessdec.c libavformat/electronicarts.c libswscale/ppc/yuv2rgb_altivec.c tests/ref/acodec/g722 tests/ref/fate/ea-cmv Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * amrwb: remove duplicate arguments from extrapolate_isf().Ronald S. Bultje2012-03-021-13/+12
| | | | | | | | | | | | | | | | Prevents warnings because the dst and src overlap (are the same) in the memcpy() inside the function. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * amrwb: error out early if mode is invalid.Ronald S. Bultje2012-03-021-4/+8
| | | | | | | | | | | | | | | | Prevents using the invalid mode as an index in a static array, which would generate invalid reads. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * h264: change underread for 10bit QPEL to overread.Ronald S. Bultje2012-03-021-1/+1
| | | | | | | | | | This prevents us from reading before the start of the buffer, and thus prevents crashes resulting from this behaviour. Fixes bug 237.
| * matroska: check buffer size for RM-style byte reordering.Ronald S. Bultje2012-03-021-3/+19
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * vp8: disable mmx functions with sse/sse2 counterparts on x86-64.Ronald S. Bultje2012-03-022-4/+35
| | | | | | | | | | x86-64 is guaranteed to have at least SSE2, therefore the MMX/MMX2 functions will never be used in practice.
| * vp8: change int stride to ptrdiff_t stride.Ronald S. Bultje2012-03-025-148/+178
| | | | | | | | | | On 64bit platforms with 32bit int, this means we won't have to sign- extend the integer anymore.
| * wma: fix invalid buffer size assumptions causing random overreads.Ronald S. Bultje2012-03-022-4/+11
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * Windows Media Audio Lossless decoderMashiat Sarker Shakkhar2012-03-026-1/+1253
| | | | | | | | | | | | | | | | | | | | | | | | Decodes 16-bit WMA Lossless encoded files. 24-bit is not supported yet. Bitstream parser written by Andreas Öman with contributions from Baptiste Coudurier and Ulion. Includes a number of bug-fixes from Benjamin Larsson, Michael Niedermayer and Konstantin Shishkov, shine and polish by Diego Biurrun. Signed-off-by: Diego Biurrun <diego@biurrun.de>
| * rv10/20: Fix slice overflow with checked bitstream reader.Alex Converse2012-03-021-7/+21
| |
| * h263dec: Disallow width/height changing with frame threads.Michael Niedermayer2012-03-021-2/+7
| | | | | | | | | | | | | | Fixes CVE-2011-3937 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| * rv10/20: Fix a buffer overread caused by losing track of the remaining ↵Alex Converse2012-03-021-1/+5
| | | | | | | | | | | | | | buffer size. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * rmdec: Honor .RMF tag size rather than assuming 18.Alex Converse2012-03-021-4/+2
| |
| * g722: Fix the QMF scalingMartin Storsjö2012-03-025-176/+176
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes clipping if the encoder input used the full 16 bit input range (samples with a magnitude below 16383 worked fine). The filtered subband samples should be 15 bit maximum, while the code earlier produced them scaled to 16 bit. This makes the decoder output have double the magnitude compared to before. The spec reference samples doesn't test the QMF at all, which was why this part slipped past initially. Signed-off-by: Martin Storsjö <martin@martin.st>
| * r3d: don't set codec timebase.Anton Khirnov2012-03-021-11/+16
| | | | | | | | | | | | It's not supposed to be set by demuxers. Set avg_frame_rate and r_frame_rate instead.
| * electronicarts: set timebase for tgv video.Anton Khirnov2012-03-023-88/+88
| | | | | | | | | | | | | | | | The container has no timestamps and the framerate isn't stored in the data either. The decoder sets codec timebase to experimentally found value 1/15. Do the same for the demuxer too, it should at least be better than the default 1/90000.
| * electronicarts: parse the framerate for cmv video.Anton Khirnov2012-03-022-197/+210
| |
| * ogg: don't set codec timebaseAnton Khirnov2012-03-022-11/+9
| | | | | | | | Demuxers are not supposed to set it.
| * electronicarts: don't set codec timebaseAnton Khirnov2012-03-024-391/+393
| | | | | | | | | | | | Demuxers are not supposed to set it. Set stream timebase and framerates instead (this is a cfr container with no timestamps).
| * avs: don't set codec timebaseAnton Khirnov2012-03-021-2/+2
| | | | | | | | | | Demuxers are not supposed to set it. Set r_frame_rate and avg_frame_rate instead.
| * wavpack: Fix an integer overflowDerek Buitenhuis2012-03-021-1/+1
| | | | | | | | | | | | | | | | | | | | Integer Overflow Checker detected an integer overflow while FATE was running. See: http://fate.libav.org/x86_64-linux-ioc/ Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com> Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com>
| * swscale: K&R formatting cosmetics for PowerPC code (part II/II)Diego Biurrun2012-03-021-612/+642
| |
| * mp3dec: Fix reading file size and frames in VBRI headersIngo Brückl2012-03-011-1/+1
| | | | | | | | | | | | | | | | The fields "Number of Bytes" and "Number of Frames" are mixed up. "Bytes" come first, "Frames" behind. Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Alex Converse <alex.converse@gmail.com>
| * mjpegdec: use correct variable in av_log invocationDiego Biurrun2012-03-011-1/+1
| | | | | | | | libavcodec/mjpegdec.c:1463: warning: format ‘%x’ expects type ‘unsigned int’, but argument 5 has type ‘const uint8_t *’
| * rmdec: adjust printf format string specifier to fix warningDiego Biurrun2012-03-011-1/+1
| | | | | | | | libavformat/rmdec.c:383: warning: format ‘%d’ expects type ‘int’, but argument 7 has type ‘int64_t’
| * Replace AVFrame pointer type punning by proper struct member assignments.Diego Biurrun2012-03-0118-50/+38
| |
| * Replace AVFrame pointer casts by proper struct member accesses.Diego Biurrun2012-03-018-51/+67
| |
| * Remove unnecessary AVFrame pointer casts.Diego Biurrun2012-03-0128-42/+42
| |
| * msmpeg4: Split encoding backend code off from general backend code.Diego Biurrun2012-03-016-690/+734
| |
| * lavc: shrink encoded video packet size after encoding.Anton Khirnov2012-03-011-0/+6
| | | | | | | | Based on a patch by Nicolas George <nicolas.george <at> normalesup.org>
* | simple_idct: idct_4col_put: Fix out of array reads.Michael Niedermayer2012-03-021-5/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | rawdec: fix input overread.Michael Niedermayer2012-03-021-2/+2
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | truemotion1: Check input buffer size against header size.Michael Niedermayer2012-03-021-1/+1
| | | | | | | | | | | | | | Fixes overread. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mjpeg: Check for interlaced progressive framesMichael Niedermayer2012-03-021-1/+6
| | | | | | | | | | | | | | Fixes null pointer dereference. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | snow: check reference frame indices.Michael Niedermayer2012-03-021-9/+21
| | | | | | | | | | | | | | Fixes NULL ptr dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-13 20:44:43 +0000