Andreas Cadhalpun
3e33685892
apngdec: use side data to pass extradata to the decoder
...
Fixes remuxing apng streams coming from the apng demuxer.
This is a regression since 940b8908b9 .
Found-by: James Almer <jamrial@gmail.com >
Reviewed-by: James Almer <jamrial@gmail.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit e0c6b32046 )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:12:29 +01:00
Andreas Cadhalpun
6e5ccabbe8
interplayacm: increase bitstream buffer size by AV_INPUT_BUFFER_PADDING_SIZE
...
This fixes out-of-bounds reads by the bitstream reader.
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit 60178e78f2 )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:12:09 +01:00
Andreas Cadhalpun
266cf258cc
interplayacm: validate number of channels
...
The number of channels is used as divisor in decode_frame, so it must
not be zero to avoid SIGFPE crashes.
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit 5540d6c134 )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:11:57 +01:00
Andreas Cadhalpun
c90d521f16
interplayacm: check for too large b
...
This fixes out-of-bounds reads.
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit 14e4e26559 )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:11:49 +01:00
Andreas Cadhalpun
346fa70bb8
doc: fix spelling errors
...
Reviewed-by: Lou Logan <lou@lrcd.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit 1e660fe88d )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:11:34 +01:00
Andreas Cadhalpun
1af7ddecda
apng: use side data to pass extradata to muxer
...
This fixes creating apng files, which is broken since commit
5ef1959080 .
Reviewed-by: James Almer <jamrial@gmail.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
(cherry picked from commit 940b8908b9 )
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-11-17 23:11:12 +01:00
Michael Niedermayer
b9a0172260
avcodec/mpeg4videodec: Workaround interlaced mpeg4 edge MC bug
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2c9106257f )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
3f6aae377a
avcodec/mpegvideo: Fix edge emu buffer overlap with interlaced mpeg4
...
Fixes Ticket5936
Regression since c5fc8ae126
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 85407c7e63 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
0f8de7a3db
avcodec/rv40: Test remaining space in loop of get_dimension()
...
Fixes infinite loop
Fixes: 178/fuzz-3-ffmpeg_VIDEO_AV_CODEC_ID_RV40_fuzzer
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1546d487cf )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
7e8eb30f40
avcodec/ituh263dec: Avoid spending a long time in slice sync
...
Fixes: 177/fuzz-3-ffmpeg_VIDEO_AV_CODEC_ID_FLV1_fuzzer
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2baf36caed )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
8deaed3b12
avcodec/movtextdec: Add error message for tsmb_size check
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0eb3198005 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
a0c6b4cfd1
avcodec/movtextdec: Fix tsmb_size check==0 check
...
Fixes: 173/fuzz-3-ffmpeg_SUBTITLE_AV_CODEC_ID_MOV_TEXT_fuzzer
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a609905723 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
20d0f32012
avcodec/movtextdec: Fix potential integer overflow
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 6ea2715768 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
7521d5b8da
avcodec/sunrast: Fix input buffer pointer check
...
Fixes: out of array read
Fixes: poc.dat
Found-by: Bingchang, Liu @VARAS of IIE
Tested-by: bc L <l.bing.chang.bc@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 37138338ff )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
487accbf19
avcodec/tscc: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 979bca5134 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
fa1ee96026
avcodec/rscc: Fix constant
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit e167610794 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
e8b9337281
avcodec/rawdec: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5f0bc0215a )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
aa896c182d
avcodec/rscc: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0f64b6cd22 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
956407b5df
avcodec/msvideo1: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 161ccdaa06 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
7821c96dd0
avcodec/qpeg: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 16793504df )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
0c0aa5ebba
avcodec/qtrle: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7d196f2a5a )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
3c1eb57d1e
avcodec/msrle: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a6330119a0 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
dc692ae1b7
avcodec/kmvc: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2d99101d09 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
be756396b5
avcodec/idcinvideo: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a2b8dde659 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
d8db018e31
avcodec/cinepak: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 121be31060 )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
Michael Niedermayer
c9c619e667
avcodec/8bps: Check side data size before use
...
Fixes out of array read
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 042faa847f )
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-11-17 12:47:40 +01:00
James Almer
548242d1a1
avcodec: remove missing incompatible_libav_abi references
...
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit bf709098c9 )
2016-10-26 17:37:10 -03:00
Michael Niedermayer
660229d647
Revert "Bump minor versions after 3.2 branchpoint to seperate release"
...
this should only have been on master
This reverts commit 1609935b6c .
2016-10-26 21:22:12 +02:00
Michael Niedermayer
1609935b6c
Bump minor versions after 3.2 branchpoint to seperate release
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-26 20:52:42 +02:00
Michael Niedermayer
3f3025205f
Bump minor versions for 3.2
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-26 20:52:42 +02:00
Michael Niedermayer
c92f55847a
avcodec/dvdsubdec: Fix off by 1 error
...
Fixes out of array read
Found-by: Thomas Garnier using libFuzzer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-26 19:50:53 +02:00
Michael Niedermayer
25ab1a65f3
avcodec/dvdsubdec: Fix buf_size check
...
Fixes out of array access
Found-by: Thomas Garnier using libFuzzer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-26 18:46:10 +02:00
Carl Eugen Hoyos
134233972e
lavc/utvideoenc: Set bits_per_coded_sample for rgba.
...
Allows to write correct value for biBitCount into BITMAPINFOHEADER.
Before, ff_put_bmp_header() always wrote "24" as biBitCount
for utvideo because bits_per_coded_sample was never set by the
encoder.
2016-10-25 13:44:08 +02:00
Michael Niedermayer
85d23e5cbc
avcodec/interplayvideo: Check side data size before use
...
Fixes out of array read
Found-by: Thomas Garnier using libFuzzer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-25 04:46:02 +02:00
Michael Niedermayer
c1173437fc
avcodec/ffv1enc: Fix storing RGB48 without explicitly set level
...
the bps value is only stored with level >= 1, using rgb48 with level 0 requires the
user app to keep track of the bps by external means, which does not always happen
also we force level >= 1 for other 16bps formats, so this is consistent.
Found-by: Jerome Martinez <jerome@mediaarea.net >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-25 02:51:34 +02:00
Ronald S. Bultje
be885da342
vp9: change order of operations in adapt_prob().
...
This is intended to workaround bug "665 Integer Divide Instruction May
Cause Unpredictable Behavior" on some early AMD CPUs, which causes a
div-by-zero in this codepath, such as reported in Mozilla bug #1293996 .
Note that this isn't guaranteed to fix the bug, since a compiler is free
to reorder instructions that don't depend on each other. However, it
appears to fix the bug in Firefox, and a similar patch was applied to
libvpx also (see Chrome bug #599899 ).
2016-10-24 16:02:39 -04:00
Rodger Combs
ba53504e57
lavc/utils: avcodec_string: dump field order when known
2016-10-24 01:24:22 -05:00
Rodger Combs
f271a9bd99
lavc/h264_parser: export field order in more cases
2016-10-24 01:20:18 -05:00
Rodger Combs
d13740f3a2
lavc/parser: export field order if not already set
...
Some codecs set this in the parser, but not the decoder
2016-10-24 01:20:18 -05:00
Zhou Xiaoyong
89ec4adad6
avcodec/mips: loongson optimize mmi load and store operators
...
1.MMI_ load/store macros are defined in libavutil/mips/mmiutils.h
2.Replace some unnecessary unaligned access with aligned operator
3.The MMI_ load/store is compatible with cpu loongson2e/2f which not support instructions start with gs
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-23 03:23:09 +02:00
Philip Langdale
ee7d6738ca
avcodec/cuvid: Allow reinitialization of decoder
...
In practice, this works fine.
2016-10-22 14:57:00 -07:00
Michael Niedermayer
2c1d38d1e1
avcodec/snowenc: Clear MMX state after edge drawing and picture encode
...
Fixes undefined behavior from calling libc allocation with unclean FPU state.
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-22 13:46:58 +02:00
Michael Niedermayer
de0cd0ffc9
avcodec/mpegvideo_enc: Add missing emms_c() to clear MMX state after SIMD use
...
Fixes undefined behavior due to calling libc allocation with unclean FPU state
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-22 13:46:46 +02:00
Michael Niedermayer
966c5c7bb8
avcodec/utils: Move emms_c() before memory allocation functions in avcodec_encode_video2()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-22 13:46:10 +02:00
Michael Niedermayer
493ad519dd
avcodec/cavsdec: Clear MMX state after MB decode loop
...
The MMX state must be cleared between using MMX and using memory allocation
thats basically the only location between the 2
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-22 13:46:05 +02:00
Michael Niedermayer
70dc6bbf1b
avcodec/svq1enc: Clear MMX state after svq1_encode_plane()
...
svq1_encode_plane() uses SIMD and we call libc memory allocation functions after it
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2016-10-22 13:45:59 +02:00
Kagami Hiiragi
41da4f8cb3
lavc/libvpxenc: fix -auto-alt-ref option type
...
vp9_cx_iface actually allows values in range [0..2].
This fixes ticket #5894 .
Signed-off-by: Kagami Hiiragi <kagami@genshiken.org >
Signed-off-by: James Zern <jzern@google.com >
2016-10-21 18:16:46 -07:00
Andreas Cadhalpun
c8a6eb58d7
doc: fix spelling errors
...
Thanks to Mathieu Malaterre <malat@debian.org > for reporting the
Que/Queue typo. (https://bugs.debian.org/839542 )
Reviewed-by: Lou Logan <lou@lrcd.com >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-10-21 23:58:47 +02:00
Carlos Fernandez
d53a120ad6
lavc: add SCTE-35 CUI codec ID
...
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc >
Signed-off-by: Carlos Fernandez <carlos@ccextractor.org >
Signed-off-by: Marton Balint <cus@passwd.hu >
2016-10-21 20:39:27 +02:00
Andreas Cadhalpun
a92f8edf0c
mpeg12dec: unref discarded picture from extradata
...
Otherwise another frame gets referenced into picture, triggering an assert
(from commit 13aae8) in av_frame_ref.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc >
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com >
2016-10-21 19:41:29 +02:00