- 15 Jan, 2016 32 commits
-
-
James Almer authored
Fixes a warning with -Wformat-extra-args (cherry picked from commit 17e7fdf6 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
James Almer authored
Signed-off-by:
James Almer <jamrial@gmail.com> (cherry picked from commit 78129978 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
This fixes a null pointer dereference at least Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit cfda1bea) Conflicts: libavformat/hls.c
-
Michael Niedermayer authored
No case is known where these are needed Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 6ba42b64 ) Conflicts: libavformat/hls.c Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> Conflicts: libavformat/hls.c
-
Michael Niedermayer authored
This avoids running various table inits unnecessarily Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit cc538e9d) Conflicts: libswscale/utils.c
-
Michael Niedermayer authored
This makes SWS more robust Fixes: 07650a772d98aa63b0fed6370dc89037/asan_heap-oob_27ddeaf_2657_2c81ff264dee5d9712cb3251fb9c3bbb.264 Fixes: out of array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 8f3a9a8c ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 5e5f82a2 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Maxim Andreev authored
Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 7145e80b) Conflicts: libavformat/hls.c
-
Michael Niedermayer authored
Fixes out of array read Fixes: 03c406ec9530e594a074ce2979f8a1f0/asan_heap-oob_7dec26_4664_37c52495b2870a2eaac65f53958e76c1.flac Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 115fb6d0 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes integer overflow Fixes: 0063df8be3aaa30dd6d76f59c8f818c8/signal_sigsegv_7b7b59_3634_bf418b6822bbfa68734411d96b667be3.mov Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 7c0b84d8 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes assertion failure Fixes out of memory access Fixes: test_casex.ivf Found-by:
Tyson Smith <twsmith@mozilla.com> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 7c97946d ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
They are stored in a byte, thus more than 255 is not possible Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 59c915a4 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: 1b8b83a53bfa751f01b1daa65a4758db/signal_sigabrt_7ffff6ae7cb7_7488_403f71d1a2565b598d01b6cb110fac8f.aiff Fixes: assertion failure Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 26757b02 ) Conflicts: libavcodec/wavpackenc.c Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: dvdec_left_shift.avi Found-by:
Piotr Bandurski <ami_stuff@o2.pl> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 93ac72a9 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: mjpeg_left_shift.avi Found-by:
Piotr Bandurski <ami_stuff@o2.pl> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit d86d7b24 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: mss2_left_shift.wmv Found-by:
Piotr Bandurski <ami_stuff@o2.pl> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit e273dade ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes Ticket 5106 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 2039b3e7 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes out of array read Fixes: test_case-mdc.264 (b47be15a120979f5a1a945c938cbef33) Found-by:
Tyson Smith <twsmith@mozilla.com> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 13f266b5 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Thomas Mundt authored
Prevents that following scalers in the filter chain will do unintentional color range conversions. Fixes Ticket #5096 Signed-off-by:
Thomas Mundt <loudmax@yahoo.de> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 73ce8162 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes out of array read Found-by:
Tyson Smith <twsmith@mozilla.com> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 5b4da8a3) Conflicts: libavcodec/motion_est.h
-
Michael Niedermayer authored
Fixes mozilla bug 1230423 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 7cc01c25 ) Conflicts: libavcodec/h264_slice.c Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes Ticket4960 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 1edf129c ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
This causes a overall slowdown of 0.1 % (tested with mpeg4 single thread encoding of matrixbench at QP=3) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit cccb0ffc) Conflicts: libavcodec/put_bits.h
-
Andreas Cadhalpun authored
This can happen if s->ls changes from 0 to 1, but picture allocation is skipped due to s->interlaced. In that case ff_jpegls_decode_picture could be called even though the s->picture_ptr frame has the wrong pixel format and thus a wrong linesize, which results in a too small zero buffer being allocated. This fixes an out-of-bounds read in ls_decode_line. Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 7ea2db6e ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes Ticket4926 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit b83d8be6 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes out of array read Fixes mozilla bug 1233606 Found-by: Tyson Smith Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit b92b4775 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 997de2e8 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: Ticket4914 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit b51e7554 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Rainer Hochecker authored
avformat/utils: estimate_timings_from_pts - increase retry counter, fixes invalid duration for ts files with hevc codec Fixes a mpegts file with hevc that fails estimating duration. Increasing number of retries fixes the issue. Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 2d8c2f1a ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes CID1238790 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit e6971db1 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes: CID1341571 Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit bc8b1e69 ) Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
- 08 Jan, 2016 1 commit
-
-
James Almer authored
Reviewed-by:
Christophe Gisquet <christophe.gisquet@gmail.com> Signed-off-by:
James Almer <jamrial@gmail.com> (cherry picked from commit dc79824d)
-
- 20 Dec, 2015 7 commits
-
-
Michael Niedermayer authored
Fixes assertion failure Fixes: id_acf3e47f864e1ee4c7b86c0653e0ff31e5bde56e.m4v Found-by:
Andreas Cadhalpun <andreas.cadhalpun@googlemail.com> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 70f13abb ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit f6830cf5 ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
Otherwise the too small buffer is directly used in the frame, causing segmentation faults, when trying to use the frame. Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 699e6837 ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
This fixes NULL pointer dereferencing. Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 9fcfe4a3 ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
If it is negative, it can cause the byte position to move backwards in avio_skip, which in turn makes sm_size negative and thus size larger than the size of the packet buffer, causing invalid writes in avio_read. Also fix potential overflow of avio_tell(bc) + value_len. Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit ce10f572 ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
This is used to check if the input buffer is large enough, so if this overflows it can cause a false negative leading to a segmentation fault in bytestream2_get_bufferu. Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 9d38f06d ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Andreas Cadhalpun authored
Fixes ubsan runtime error: null pointer passed as argument 2, which is declared to never be null Reviewed-by:
Michael Niedermayer <michael@niedermayer.cc> Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 9f82506c ) Signed-off-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-