aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* avcodec/eac3dec: Fix runtime error: left shift of negative value -3Michael Niedermayer2017-02-261-1/+1
| | | | | | | | Fixes: 672/clusterfuzz-testcase-5595018867769344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mpeg12dec: Fix runtime error: left shift of negative value -2Michael Niedermayer2017-02-261-2/+2
| | | | | | | | 671/clusterfuzz-testcase-4990381827555328 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/ituh263dec: Check for the bitstream end in ff_h263_decode_mb()Michael Niedermayer2017-02-261-0/+3
| | | | | | | | | | Fixes invalid shift Fixes: 670/clusterfuzz-testcase-4852021066727424 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* add locale month names to av_small_strptimeMicah Galizia2017-02-263-0/+42
| | | | | Signed-off-by: Micah Galizia <micahgalizia@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* fate: update ffprobe stuff after dbc7f02a727286f3Paul B Mahol2017-02-267-73/+73
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avutil/frame: Disallow zero sized frame side dataMichael Niedermayer2017-02-251-0/+2
| | | | | | | There should be no case that needs this and its a potential for creating corner cases Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avutil/frame: Reimplement av_frame_new_side_data() without size=0 special caseMichael Niedermayer2017-02-251-26/+29
| | | | | | | | | | | | The size 0 special case causes side data to be created which is different and a special case if for any reasons size = 0 is passed Fixes: multiple runtime error: null pointer passed as argument 1, which is declared to never be null Fixes: 653/clusterfuzz-testcase-5773837415219200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/wavpack: Fix 280:22: runtime error: left shift of negative value -1Michael Niedermayer2017-02-251-1/+1
| | | | | | Fixes: 653/clusterfuzz-testcase-5773837415219200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/wavpack: Check post_shiftMichael Niedermayer2017-02-251-0/+3
| | | | | | | | Fixes: runtime error: shift exponent 34 is too large for 32-bit type 'int' Fixes: 653/clusterfuzz-testcase-5773837415219200 Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avfilter/aeval: trim last frame's number of samples to match requested durationPaul B Mahol2017-02-253-1156/+1544
| | | | | | Fixes #6181. Signed-off-by: Paul B Mahol <onemda@gmail.com>
* lswr/rematrix: Remove an aggressive loop optimization.Carl Eugen Hoyos2017-02-251-3/+4
| | | | | Fixes undefined behaviour and a gcc warning: libswresample/rematrix.c:376:47: warning: iteration 64 invokes undefined behavior
* avcodec/vp56: Implement very basic error concealmentMichael Niedermayer2017-02-252-4/+79
| | | | | | | This should fix the fate failure due to a truncated last frame. Alternatively the frame could be dropped. Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/hlsenc: don't use %s for strftime on msvcHendrik Leppkes2017-02-251-1/+2
| | | | | | | | | MSVC doesn't support the %s time format, and instead of returning an error the invalid parameter handler is invoked which (by default) terminates the process. Reviewed-by:Steven Liu <lq@chinaffmpeg.org> Signed-off-by: Hendrik Leppkes <h.leppkes@gmail.com>
* avformat/hlsenc: fix hls_flags temp_file bugSteven Liu2017-02-251-28/+27
| | | | | | | | | refer to ticket id: #6170 rename file from temp to origin name after complete current segment Reviewed-by: Aman Gupta <ffmpeg@tmm1.net> Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
* avcodec/amrwbdec: Fix 2 runtime errors: left shift of negative value -1Michael Niedermayer2017-02-251-2/+2
| | | | | | | Fixes: 669/clusterfuzz-testcase-4847965409640448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/pngdec: Fix runtime error: left shift of 152 by 24 places cannot be ↵Michael Niedermayer2017-02-251-1/+1
| | | | | | | | | represented in type 'int' Fixes: 666/clusterfuzz-testcase-6581447227867136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/vp56: Fix sign typoMichael Niedermayer2017-02-243-3/+3
| | | | | | | | | Fixes: 664/clusterfuzz-testcase-4917047475568640 The change to fate is due to a truncated last frames which is now detected as damaged. Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mpegaudiodec_template: Correct return code on id3 tag discardingMichael Niedermayer2017-02-241-1/+1
| | | | | | | Fixes: 665/clusterfuzz-testcase-4863789881098240 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* opus_pvq: prevent division by 0Rostislav Pehlivanov2017-02-241-1/+1
| | | | | | | res was 0 and divided K which made it infinity which caused K to overflow. Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com>
* avcodec/scpr: remove 4 dead storePaul B Mahol2017-02-241-4/+0
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/fmvc: initialize opcode to 0Paul B Mahol2017-02-241-2/+2
| | | | | | It shouldn't really matter but it doesn't hurt. Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/scpr: improve motion vectors checking for out of buffer writePaul B Mahol2017-02-241-2/+2
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* tools/target_dec_fuzzer: Fix misaligned readMichael Niedermayer2017-02-241-1/+2
| | | | Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/vp3dsp: Fix multiple signed integer overflow: 46341 * 47523 cannot ↵Michael Niedermayer2017-02-241-1/+1
| | | | | | | | | be represented in type 'int' Fixes: 664/clusterfuzz-testcase-4917047475568640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/rv34: Simplify and factor get_slice_offset() codeMichael Niedermayer2017-02-241-23/+19
| | | | | | | | | This also fixes several integer overflows by checking each value before use. Fixes: 662/clusterfuzz-testcase-4898131432964096 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/scpr: make sure that component value is <= 0x1F for 16 bpcPaul B Mahol2017-02-241-1/+3
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/aic: unbreak decoding of files with slice_width != 16Paul B Mahol2017-02-241-1/+1
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* lavc/utils: Make second parameter to apply_param_change() const.Carl Eugen Hoyos2017-02-241-1/+1
| | | | | Fixes a compilation warning: passing argument 2 of ‘apply_param_change’ discards ‘const’ qualifier from pointer target type
* opus_pvq: remove unneeded assertRostislav Pehlivanov2017-02-241-1/+0
| | | | | | | | | | Since the PVQ search has been well fuzzed and is guaranteed to never break SUM(abs(y[])) == K, the assert is no longer needed. Also the assert only prevented coding the wrong vector index but didn't prevent crashes during searching for it, which made the assert rather informational than practical. Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com>
* opus_pvq: improve PVQ search for low KsRostislav Pehlivanov2017-02-241-2/+5
| | | | | | | | | Since the probelm mentioned only happened when the phase was negative (e.g. the sum had to be decreased), only discarding dimensions with a zero pulse in that case restored the search's previously low distortion at low Ks when the phase is never negative. Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com>
* avcodec/ituh263dec: Fix runtime error: left shift of 1342177279 by 1 places ↵Michael Niedermayer2017-02-241-0/+4
| | | | | | | | | | | cannot be represented in type 'int' Fixes: 659/clusterfuzz-testcase-5866673603084288 Huge DMV could be created by an encoder ignoring the spec Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/jpeglsdec: check shift for values that cause overflow laterMichael Niedermayer2017-02-241-0/+5
| | | | | | Fixes: 657/clusterfuzz-testcase-6674741433729024 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mpeg4videodec: Check the other 3 sprite points for intermediate ↵Michael Niedermayer2017-02-241-0/+7
| | | | | | | | | | | | | overflows This is not necessarily specific to fuzzed files Fixes: Multiple integer overflows Fixes: 656/clusterfuzz-testcase-6463814516080640 Fixes: 658/clusterfuzz-testcase-6691260146384896 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* lavfi: Add VAAPI deinterlacerMark Thompson2017-02-235-1/+638
| | | | | (cherry picked from commit ade370a4d7eab1866b6023c91c135d27c77ca465) (cherry picked from commit 2d518aec4c781316092be65893b47922c8f71b67)
* avcodec/shorten: support decoding AIFF-C variantPaul B Mahol2017-02-232-2/+16
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* doc/filters: mention 'ffmpeg -filters' in timeline sectionLou Logan2017-02-231-0/+2
| | | | | | So users can see which filters support the 'enable' option. Signed-off-by: Lou Logan <lou@lrcd.com>
* avcodec/scpr: improve check for out of range motion vectorsPaul B Mahol2017-02-231-1/+2
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/scpr: check that current row is in valid rangePaul B Mahol2017-02-231-0/+16
| | | | | | Stops writing out of dst array. Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/scpr: do not allow out of array access for 16bit casePaul B Mahol2017-02-231-2/+2
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/qdrw: do better w/h parsing for direct bit packingPaul B Mahol2017-02-231-10/+11
| | | | | | | Apparently using 0x0001 opcode solely is not correct. Try this instead. Signed-off-by: Paul B Mahol <onemda@gmail.com>
* lavc/videotoolboxenc: check for dictionary key symbolsRick Kern2017-02-231-36/+138
| | | | | | | Fixes #6081. Some dictionary keys are not present on OS X 10.8. This loads the symbols and uses a default value if not present. Signed-off-by: Rick Kern <kernrj@gmail.com>
* avcodec/h264_ps: Check chroma_qp_index_offsetMichael Niedermayer2017-02-231-0/+9
| | | | | | | | | Fixes: 647/clusterfuzz-testcase-5195745823031296 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: BBB Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mips/Makefile: corrected conditional build of version 1 of vc1dsp ↵Jacek Manko2017-02-231-1/+1
| | | | | | optimizations for loongson mmi Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* lavd/opengl_enc: Fix a typo.Carl Eugen Hoyos2017-02-231-1/+1
|
* avcodec/wrapped_avframe: allocate a buffer with paddingMarton Balint2017-02-221-2/+14
| | | | | | | | This ensures that the wrapped avframe will not get reallocated later, which would invalidate internal references such as extended data. Reviewed-by: wm4 <nfxjfg@googlemail.com> Signed-off-by: Marton Balint <cus@passwd.hu>
* avcodec: add ScreenPressor decoderPaul B Mahol2017-02-229-2/+828
| | | | Signed-off-by: Paul B Mahol <onemda@gmail.com>
* avcodec/h264idct_template: Fix several runtime error: signed integer overflowMichael Niedermayer2017-02-221-9/+9
| | | | | | | Fixes: 652/clusterfuzz-testcase-6174944410992640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mpeg4videodec: Check sprite_offset in addition to shiftsMichael Niedermayer2017-02-221-2/+7
| | | | | | | Fixes: 651/clusterfuzz-testcase-5710668915277824 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mpegaudiodec_template: Fix multiple runtime error: signed integer ↵Michael Niedermayer2017-02-221-1/+1
| | | | | | | | | overflow Fixes: 648/clusterfuzz-testcase-5337961317007360 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/qdrw: add support for 0x0001 codePaul B Mahol2017-02-221-1/+12
| | | | | | Fixes decoding of files which sets frame width/height this way. Signed-off-by: Paul B Mahol <onemda@gmail.com>