- 06 Dec, 2016 3 commits
-
-
Michael Niedermayer authored
Signed-off-by:Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes warning about impossible condition Signed-off-by: -
Michael Niedermayer authored
Signed-off-by:
-
- 05 Dec, 2016 7 commits
-
-
Michael Niedermayer authored
Fixes out of array access Fixes: poc_ffserver.py Found-by:
Paul Cher <paulcher@icloud.com> Signed-off-by:
-
Michael Niedermayer authored
This should make it less ambigous that these are URLs Signed-off-by:
-
Michael Niedermayer authored
Fixes out of array access Found-by:
-
Timothy Gu authored
Fixes CID1396857. (cherry picked from commit d903b4e3 ) Signed-off-by:
-
James Almer authored
Reviewed-by:
James Almer <jamrial@gmail.com> (cherry picked from commit b52d3574)
-
Ronald S. Bultje authored
(cherry picked from commit 845bb401)
-
Ronald S. Bultje authored
Fixes #5992, reported and found by Paul Cher <paulcher@icloud.com>. (cherry picked from commit 2a05c8f8)
-
- 04 Dec, 2016 3 commits
-
-
Michael Niedermayer authored
Signed-off-by: -
Michael Niedermayer authored
Fixes undefined behavior Fixes: 639961-media Found-by:
Matt Wolenetz <wolenetz@google.com> Signed-off-by:
-
Michael Niedermayer authored
Fixes undefined behavior Fixes: 640889-media Found-by:
-
- 03 Dec, 2016 5 commits
-
-
Michael Niedermayer authored
Signed-off-by:
-
Michael Niedermayer authored
Fixes undefined behavior Fixes: 640912-media Found-by:
-
Michael Niedermayer authored
Fixes: left shift of negative value Fixes: 668346-media Found-by:
-
Michael Niedermayer authored
The speex specification does not seem to restrict these values, thus the limits where choosen so as to avoid multiplicative overflow Fixes undefined behavior Fixes: 635422.ogg Found-by:
-
Michael Niedermayer authored
Fixes undefined behavior Fixes: 637428.ogg Found-by:
-
- 01 Dec, 2016 3 commits
-
-
Michael Niedermayer authored
Signed-off-by: -
Michael Niedermayer authored
Fixes infinite loop Fixes: fuzz.flac Found-by:
Frank Liberato <liberato@google.com> Reviewed-by:
-
Michael Niedermayer authored
Signed-off-by:
-
- 26 Nov, 2016 19 commits
-
-
Andreas Cadhalpun authored
-
Andreas Cadhalpun authored
This prevents a division by zero in read_packet. Reviewed-by:
Paul B Mahol <onemda@gmail.com> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 25012c56 ) Signed-off-by:
-
Andreas Cadhalpun authored
This fixes a heap-buffer-overflow in ff_er_frame_end when decoding mss2 with coded_width/coded_height larger than width/height. Reviewed-by:
-
Andreas Cadhalpun authored
floats are not necessarily normalized, so a normalized softfloat needs MIN_EXP lowered by 23 to cover that range. Reviewed-by:
-
Andreas Cadhalpun authored
This fixes an out-of-bounds read if avc->channels is 0. Reviewed-by:
-
Andreas Cadhalpun authored
Reviewed-by:
Josh de Kock <josh@itanimul.li> Signed-off-by:
-
Andreas Cadhalpun authored
This fixes segmentation faults due to stack-overflow caused by too deep recursion. Reviewed-by:
-
Andreas Cadhalpun authored
Metadata streams have priv_data set to NULL. Reviewed-by:
-
Andreas Cadhalpun authored
Reviewed-by:
-
Andreas Cadhalpun authored
They are not valid and can cause problems/crashes for API users. Reviewed-by:
-
Andreas Cadhalpun authored
This is similar to commit 9ac61e73 . Reviewed-by:
-
Andreas Cadhalpun authored
Otherwise put_bits can be called with a value that doesn't fit in the sample_len, causing an assertion failure. Reviewed-by:
-
Andreas Cadhalpun authored
This fixes a heap-buffer-overflow detected by AddressSanitizer. Reviewed-by:
-
Andreas Cadhalpun authored
It can read less than the requested amount, in which case buf contains uninitialized data, causing problems like segmentation faults later on. Also make sure that image->size is positive, so that it can't match a negative error code. Reviewed-by:
-
Andreas Cadhalpun authored
Reviewed-by:
-
Andreas Cadhalpun authored
This problem was introduced in commit 4b90dcb8 . Reviewed-by:
-
Andreas Cadhalpun authored
The implicit checks via v_data_size and a_data_size don't work in the case '(hdr_size > 7) && !ctx->alpha_info'. This fixes segmentation faults due to invalid reads. This problem was introduced in commit 547c2f00 . Reviewed-by:
-
Andreas Cadhalpun authored
It causes a cb_depth of 32, leading to assertion failures in get_bits. Reviewed-by:
-
Andreas Cadhalpun authored
Reviewed-by:
-
