aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* avformat/utils: Fix memleaksAndreas Rheinhardt2019-09-251-4/+12
| | | | | | | | | | | | | | ff_read_packet had potential memleaks: 1. If av_packet_make_refcounted fails, it means that the packet is not refcounted, but it could nevertheless carry side data and therefore needs to be unreferenced. 2. If putting a packet on a packet list fails, it wasn't unreferenced. Furthermore, read_frame_internal leaked a packet's (side) data if a context update was required and failed. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Signed-off-by: James Almer <jamrial@gmail.com>
* avformat/utils: Assert that stream_index is validAndreas Rheinhardt2019-09-251-4/+2
| | | | | | | | | | | There is currently an ordinary check for this (which would lead to a memleak), but given that no demuxer should ever return a packet with an invalid stream_index it is more appropriate for this to be an assert. FATE passes with this change. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Signed-off-by: James Almer <jamrial@gmail.com>
* lavf/mov: Fix timestamp rescale on sidx atomJun Li2019-09-261-1/+1
| | | | | | Fix #5090 Fix the timestamp rescale issue, from sidx timebase to stream's timebase.
* Revert "lavc/tiff: correct the default value of YCbCrSubsampling to 2x2"Carl Eugen Hoyos2019-09-261-1/+1
| | | | | | This reverts commit eb5d0f18ff609ba2280cea4e2c6286d216c8756b. Together with 89f464e9, it breaks decoding of tiff files like fate-suite/exif/image_small.tiff
* avcodec/dnxhdenc: return error if av_malloc failedLimin Wang2019-09-251-0/+2
| | | | | Signed-off-by: Limin Wang <lance.lmwang@gmail.com> Signed-off-by: James Almer <jamrial@gmail.com>
* avfilter/vf_zoompan: fix leaksPaul B Mahol2019-09-251-0/+6
|
* avfilter/vf_zoompan: forward status back from output to inputPaul B Mahol2019-09-251-0/+2
|
* avfilter/vf_stack: add slice threadingPaul B Mahol2019-09-251-15/+28
|
* avfilter/vf_stack: simplify main processing pathPaul B Mahol2019-09-251-45/+48
|
* avformat/sdsdec: fix undefined behaviourPaul B Mahol2019-09-251-3/+3
| | | | Fixes #8163, #8164, #8165.
* avformat/aiffdec: fix signed integer overflowPaul B Mahol2019-09-251-1/+4
| | | | Fixes #8151
* avcodec/decode: Check max_samples in get_buffer_internal()Michael Niedermayer2019-09-251-0/+5
| | | | | | This checks max_samples at the same level as max_pixels Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* tools/target_dec_fuzzer: Set max_samplesMichael Niedermayer2019-09-251-0/+4
| | | | Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec: add max_samplesMichael Niedermayer2019-09-256-2/+18
| | | | Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avfilter/Makefile: fix case for sierpinskiPaul B Mahol2019-09-251-1/+1
|
* avfilter: add sierpinski video sourcePaul B Mahol2019-09-256-2/+230
|
* avfilter/vf_premultiply: forward status back from output to all input linksPaul B Mahol2019-09-251-0/+2
|
* avfilter/vf_fieldmatch: forward status back from output to all input linksPaul B Mahol2019-09-251-0/+2
| | | | Fixes #8199.
* avfilter/vf_fieldmatch: fix more leaksPaul B Mahol2019-09-251-10/+20
|
* avfilter/vf_v360: add sinusoidal formatPaul B Mahol2019-09-253-0/+84
|
* lavc/tiff: correct the default value of YCbCrSubsampling to 2x2Pavel Skakov2019-09-251-1/+1
|
* lavf/4xm: fix memory leak in error handing pathJun Zhao2019-09-251-1/+2
| | | | | | | need to free the header in error path. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Jun Zhao <barryjzhao@tencent.com>
* libavcodec/libx265: add a flag to output ROI warnings only once.Guo, Yejun2019-09-241-1/+10
| | | | Signed-off-by: Guo, Yejun <yejun.guo@intel.com>
* libavcodec/libx264: add a flag to output ROI warnings only once.Guo, Yejun2019-09-241-2/+14
| | | | Signed-off-by: Guo, Yejun <yejun.guo@intel.com>
* avcodec/utils: Optimize ff_color_frame() using memcpy()Michael Niedermayer2019-09-241-6/+12
| | | | | | | | | | 4650975 -> 4493240 dezicycles This optimizes lines 2 and later. Line 1 still uses av_memcpy_backptr() This change originally fixed ossfuzz 10790 but this is now fixed by other optimizations already Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/aacdec: Check if we run out of input in read_stream_mux_config()Michael Niedermayer2019-09-241-0/+2
| | | | | | | | Fixes: Infinite loop Fixes: 16920/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5653421289373696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/h264_slice: clear frame only on gaps when it is not otherwise ↵Michael Niedermayer2019-09-241-9/+9
| | | | | | | | | | initilaized Fixes: Timeout (53sec -> 31sec) Fixes: 16908/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-5711207859748864 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/utils: Use av_memcpy_backptr() in ff_color_frame()Michael Niedermayer2019-09-241-3/+3
| | | | | | | | | Fixes: Timeout (191sec -> 53sec) Fixes: 16908/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-5711207859748864 Fixes: 10709/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-5630617975259136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/smacker: Fix integer overflow in signed int multiply in SMK_BLK_FILLMichael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: signed integer overflow: 238 * 16843009 cannot be represented in type 'int' Fixes: 16958/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SMACKER_fuzzer-5193905355620352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/alac: Fix invalid shifts in 20/24 bpsMichael Niedermayer2019-09-241-2/+2
| | | | | | | | Fixes: left shift of negative value -256 Fixes: 16892/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-4880802642395136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/alac: fix undefined behavior with INT_MIN in lpc_prediction()Michael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: signed integer overflow: -2147483648 * -1 cannot be represented in type 'int' Fixes: 16786/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-5632818851348480 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/utils: Do not assume duration is non negative in compute_pkt_fields()Michael Niedermayer2019-09-241-4/+4
| | | | | | | | | | Several subtitle demuxers set negative durations Fixes: signed integer overflow: 9223372036854775807 - -1 cannot be represented in type 'long' Fixes: 16925/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5766519790764032 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/ffwavesynth: Fix integer overflow in timestampsMichael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: signed integer overflow: 9223371075321077760 * 2 cannot be represented in type 'long' Fixes: 16447/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5698937431785472 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/vividas: Test size and packet numbers a bit moreMichael Niedermayer2019-09-241-8/+19
| | | | Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/vividas: Check n_sb_blocks against input spaceMichael Niedermayer2019-09-241-4/+13
| | | | | | | | Fixes: OOM Fixes: 16726/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5719320750981120 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/aacdec_fixed: Add FF_CODEC_CAP_INIT_CLEANUPMichael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: memleaks Fixes: 16788/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5649873898045440 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* tools/target_dec_fuzzer: consider potential padding/edge in pixel thresholdMichael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: Timeout (73sec ->30ms) Fixes: 16921/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DIRAC_fuzzer-5689384594046976 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* libavcodec/mpeg12dec: Check input for minimal frame sizeMichael Niedermayer2019-09-241-0/+5
| | | | | | | | | Fixes: Timeout (35sec -> 6sec) Fixes: 16901/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEGVIDEO_fuzzer-5729024726269952 Fixes: 16901/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEGVIDEO_fuzzer-5642388592132096 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* tools/target_dec_fuzzer: Adjust threshold for MSS2Michael Niedermayer2019-09-241-0/+1
| | | | | | | | | | The decoder is slow Fixes: Timeout (94sec -> 7sec) Fixes: 16417/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MSS2_fuzzer-5711668050395136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/cbs_h264: Automatically free SEI payload on errorAndreas Rheinhardt2019-09-242-6/+15
| | | | | | | | | | | | | If adding an SEI message to an access unit fails, said SEI message was not touched, so that the caller had to free any data associated with it that might need to be freed. But given that ff_cbs_h264_add_sei_message can simply call cbs_h264_free_sei_payload, one can easily free the content of the SEI payload. This fixes a memleak when inserting a user data unregistered string for h264_metadata fails. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
* avcodec/dxv: Check op_offset in both directionsMichael Niedermayer2019-09-241-1/+1
| | | | | | | | Fixes: signed integer overflow: 61 + 2147483647 cannot be represented in type 'int' Fixes: 15311/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-5742552826773504 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/truespeech: Eliminate some left shiftsMichael Niedermayer2019-09-241-4/+3
| | | | | | | This avoids some invalid shifts Reviewed-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/adpcm: Check number of channels for MTAFMichael Niedermayer2019-09-241-0/+4
| | | | | | | | | Fixes: out of array access Fixes: 17608/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ADPCM_MTAF_fuzzer-5074936267276288 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/nvenc: fix typo in new Windows driver versionTimo Rothenpieler2019-09-241-1/+1
| | | | Signed-off-by: Timo Rothenpieler <timo@rothenpieler.org>
* avfilter/vf_v360: do not use mod where it is not neededPaul B Mahol2019-09-241-2/+2
|
* avcodec/exr: cosmeticsLimin Wang2019-09-231-1/+2
| | | | | Signed-off-by: Limin Wang <lance.lmwang@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/hashenc: fix incorrect use of av_mallocz_array()Moritz Barsnick2019-09-231-3/+3
| | | | | | | Fixes CID 1453867, CID 1453866, CID 1453865. Signed-off-by: Moritz Barsnick <barsnick@gmx.net> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/nvenc: add driver version info for SDK 9.1Timo Rothenpieler2019-09-231-1/+9
| | | | Signed-off-by: Timo Rothenpieler <timo@rothenpieler.org>
* avcodec/bsf: check that AVBSFInternal was allocated before dereferencing itJames Almer2019-09-231-1/+2
| | | | | | | This can happen when av_bsf_free() is called on av_bsf_alloc() failure. Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: James Almer <jamrial@gmail.com>
* avfilter/vf_v360: fix regression introduced in b342678bc47b4e5Paul B Mahol2019-09-231-2/+2
|