virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2026-06-19 19:03:00 +02:00
Code Issues Releases Activity
107,685 Commits 39 Branches 425 Tags
13b3becc7bd3ca25d9fbf2066a1b502db2fa7190
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Niedermayer 009ef35d38 avcodec/hevc_filter: copy_CTB() only within width&height 
Fixes: out of array access
Fixes: 49271/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5424984922652672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-22 17:25:25 +02:00
Michael Niedermayer 76112c2b41 avcodec/tiff: Check tile_length and tile_width 
Fixes: Division by 0
Fixes: 49235/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-5495613847896064

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-22 17:25:25 +02:00
Michael Niedermayer 4e145f1dcd avcodec/mss4: Check image size with av_image_check_size2() 
Fixes: Timeout
Fixes: 48418/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MTS2_fuzzer-4834851466903552

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:30:14 +02:00
Michael Niedermayer 8af798171b avformat/mpc8: Check and propagate more errors 
Fixes: Timeout
Fixes: 48846/clusterfuzz-testcase-minimized-ffmpeg_dem_MPC8_fuzzer-5278532493770752

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:28:52 +02:00
Michael Niedermayer ceff5d7b74 avformat/flvdec: Check for EOF in index reading 
Fixes: Timeout
Fixes: 47992/clusterfuzz-testcase-minimized-ffmpeg_dem_LIVE_FLV_fuzzer-6020443879899136

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:28:27 +02:00
Michael Niedermayer b5de084aa6 avformat/nutdec: Check get_packetheader() in mainheader 
Fixes; Timeout
Fixes: 48794/clusterfuzz-testcase-minimized-ffmpeg_dem_NUT_fuzzer-6524604713140224

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:27:52 +02:00
Michael Niedermayer 744ad45c44 avformat/mov: Check for EOF in mov_read_iloc() 
Fixes: Timeout
Fixes: 49216/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-6563000529584128

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:27:45 +02:00
Michael Niedermayer 9b23eb8a10 tools/target_dec_fuzzer: Adjust threshold for MWSC 
Fixes: Timeout
Fixes: 49172/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MWSC_fuzzer-5213749102903296

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:27:38 +02:00
Michael Niedermayer 8ed78486fc avformat/asfdec_f: Use 64bit for packet start time 
Fixes: signed integer overflow: 2147483647 + 32 cannot be represented in type 'int'
Fixes: 49014/clusterfuzz-testcase-minimized-ffmpeg_dem_ASF_fuzzer-6314973315334144

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:27:32 +02:00
Michael Niedermayer 614a4d1476 avcodec/exr: Check x/ysize 
Fixes: OOM
Fixes: 48911/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_fuzzer-6352002510094336

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 19:27:27 +02:00
Michael Niedermayer f7d510b33f avcodec/ffv1dec: Fix AC_GOLOMB_RICE min size check 
Found-by: mkver

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-21 08:54:22 +02:00
Michael Niedermayer 15785e044e avcodec/ffv1dec: consider run increase in minimal golomb frame size 
Fixes: Timeout
Fixes: 49160/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_fuzzer-5672826144686080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-20 16:13:20 +02:00
Michael Niedermayer 3592b05c84 tools/target_dec_fuzzer: Adjust threshold for MMVIDEO 
Fixes: Timeout
Fixes: 49003/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MMVIDEO_fuzzer-5550368423018496

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Peter Ross <pross@xvid.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-20 16:13:20 +02:00
Michael Niedermayer 282589771a avcodec/mpeg4videoenc: fix encoding long frames 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-20 16:13:20 +02:00
Michael Niedermayer 3c43a7a354 avcodec/hdrdec: lines can be empty 
Fixes: infinite loop
Fixes: 49223/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HDR_fuzzer-6603308596330496

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-20 16:12:08 +02:00
Michael Niedermayer 9450f75974 avcodec/lagarith: Check dst/src in zero run code 
Fixes: out of array access
Fixes: 48799/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_LAGARITH_fuzzer-4764457825337344

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-14 20:10:59 +02:00
Michael Niedermayer a0994440e8 RELEASE: update after 5.1 branch 2022-07-13 00:31:42 +02:00
Michael Niedermayer 5cd041f463 Changelog: Add version <next> 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-13 00:29:57 +02:00
Michael Niedermayer fd26b07e8b Bump versions after 5.1 branch 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-13 00:29:05 +02:00
Michael Niedermayer 6f1b144358 Bump Versions for 5.1 branch 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-13 00:27:37 +02:00
Michael Niedermayer 3421476eb5 doc/APIchanges: Add 5.1 branch cutpoint 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-13 00:04:15 +02:00
Michael Niedermayer 510cd7d11b doc/APIchanges: Fill in missing things 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 23:58:55 +02:00
Michael Niedermayer eafe641d13 doc/APIchanges: Extend hash which has become ambiguous 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 23:58:31 +02:00
Michael Niedermayer f7dd408d64 avcodec/h264dec: Skip late SEI 
Fixes: Race condition
Fixes: clusterfuzz-testcase-minimized-mediasource_MP2T_AVC_pipeline_integration_fuzzer-6282675434094592

Found-by: google ClusterFuzz
Tested-by: Dan Sanders <sandersd@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 1537f40516 avcodec/sbrdsp_fixed: Fix integer overflows in sbr_qmf_deint_neg_c() 
Fixes: signed integer overflow: 2147483645 + 16 cannot be represented in type 'int'
Fixes: 46993/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-4759025234870272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 4f9ee4bf43 avcodec/pixlet: consider minimum plane header in the minimal packet size 
Fixes: Timeout
Fixes: 46956/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PIXLET_fuzzer-5698161106092032

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer dd6040675e avfilter/vf_signature: Fix integer overflow in filter_frame() 
Fixes: CID1403233

The second of the 2 changes may be unneeded but will help coverity

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 73c0fd27c5 avformat/rtsp: break on unknown protocols 
This function needs more cleanup and it lacks error handling

Fixes: use of uninitialized memory
Fixes: CID700776

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 9c5250a561 avcodec/hevcdsp_template: stay within tables in sao_band_filter() 
Fixes: out of array read
Fixes: 47875/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5719393113341952

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer a5625fecd7 tools/target_dec_fuzzer: adjust threshold for flic 
Fixes: Timeout
Fixes: 48017/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLIC_fuzzer-5920256150863872

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer f20295cd81 tools/target_dec_fuzzer: Adjust threshold for AASC 
Fixes: Timeout
Fixes: 47919/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AASC_fuzzer-5176435830030336

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 75f3d1b822 avcodec/tiff: Check pixel format types for dng 
Fixes: out of array access
Fixes: 48271/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-6149705769287680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 675e18e0fb tools/target_dec_fuzzer: adjust threshold for cinepak 
Fixes: Timeout
Fixes: 48158/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CINEPAK_fuzzer-5986526573494272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer e690d4edf5 avcodec/qpeldsp: copy less for the mc0x cases 
Fixes: out of array access
Fixes: 47936/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5745039940124672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer db31b3ea86 avformat/aaxdec: Check for empty segments 
Fixes: Timeout
Fixes: 48154/clusterfuzz-testcase-minimized-ffmpeg_dem_AAX_fuzzer-5149094353436672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 78b95530f0 avcodec/ffv1dec: Check for min packet size 
Fixes: Timeout
Fixes: 48619/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_fuzzer-5793597923917824

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer ba0c3d1db4 avformat/avienc: Check video dimensions 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer b4431399ec avcodec/ffv1dec: Limit golomb rice coded slices to width 8M 
This limit is possibly not reachable due to other restrictions on buffers but
the decoder run table is too small beyond this, so explicitly check for it.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 248d981071 tools/target_dec_fuzzer: Adjust threshold for LOCO 
Fixes: Timeout
Fixes: 48584/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_LOCO_fuzzer-5741269015461888

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 6003fe6344 tools/target_dec_fuzzer: Adjust threshold for ylc 
Fixes: timeout
Fixes: 48523/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_YLC_fuzzer-5779666425741312

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 35ea9590ff tools/target_dec_fuzzer: Adjust threshold for WCMV 
Fixes: Timeout
Fixes: 48377/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WCMV_fuzzer-5053331682230272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 5bfa59b2de tools/target_dec_fuzzer: Adjust threshold for CDTOONS 
Fixes: Timeout
Fixes: 48730/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CDTOONS_fuzzer-5124342899408896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 0740641e93 avformat/iff: simplify duration calculation 
Fixes: signed integer overflow: 315680096256 * 134215943 cannot be represented in type 'long long'
Fixes: 48713/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-5886272312311808

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer bb6679a58b tools/target_dec_fuzzer: Adjust threshold for MVC2 
Fixes: Timeout
Fixes: 48689/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVC2_fuzzer-6436301427048448

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 2ebd2a6eb5 tools/target_dec_fuzzer: Adjust threshold for CFHD 
Fixes: Timeout
Fixes: 46504/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CFHD_fuzzer-6376835606249472

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer d98d5a436a avcodec/wnv1: Check for width =1 
The decoder only outputs pixels for width >1 images, fail early

Fixes: Timeout
Fixes: 48298/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WNV1_fuzzer-6198626319204352

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer eee7364c90 avcodec/ffv1dec_template: fix indention 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer 21938ce739 tools/target_dec_fuzzer: Adjust threshold for ANM 
Fixes: Timeout
Fixes: 48923/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ANM_fuzzer-6391662321991680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-12 21:55:22 +02:00
Michael Niedermayer c9a2996544 avformat/sctp: close socket on errors 
This is untested as i have no testcase

Fixes: CID1302709

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer b418ad75c2 avcodec/flashsv: Clear pointers 
Fixes: Use after free
Fixes: 47399/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLASHSV2_fuzzer-5718646686613504

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 4ff654e030 tools/target_dec_fuzzer: Adjust threshold for SIMBIOSIS_IMX 
Fixes: Timeout
Fixes: 47892/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SIMBIOSIS_IMX_fuzzer-5160609278197760

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 884a108121 avformat/cinedec: Check size and pos more 
Fixes: signed integer overflow: 9223372036848019263 + 134232320 cannot be represented in type 'long'
Fixes: 48155/clusterfuzz-testcase-minimized-ffmpeg_dem_CINE_fuzzer-5751429207293952

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 9f77af177a tools/target_dec_fuzzer: Adjust threshold for ARGO 
Fixes: Timeout
Fixes: 48002/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ARGO_fuzzer-6187041768996864

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer af2ed09220 avcodec/aasc: Fix indention 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 8f6432cd77 avcodec/flashsv: Check inflate() for failure 
Fixes: CID1047223

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 7796d740bd avcodec/smacker: fix indention after previous commit 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 08e82e5b57 avcodec/smacker: Optimize constant 16bit audio output 
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Reviewed-by: Tomas Härdin <tjoppen@acc.umu.se>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 5c2fa59f32 tools/target_dec_fuzzer: Adjust threshold for smacker audio 
Fixes: Timeout
Fixes: 47043/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SMACKAUD_fuzzer-4824799337119744

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-07 21:52:52 +02:00
Michael Niedermayer 9fec43a92d avcodec/alsdec: No channels cannot be accessed 
Fixes: out of array access
Fixes: 48145/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5054524173189120

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Thilo Borgmann <thilo.borgmann@mail.de>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-03 19:36:26 +02:00
Michael Niedermayer cd847f86d3 avcodec/qdrw: adjust max colors to array size 
Fixes: out of array access
Fixes: 48429/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDRAW_fuzzer-4608329791438848

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-03 19:36:26 +02:00
Michael Niedermayer 8709f4c10a avcodec/alacdsp: Make intermediates unsigned 
Fixes: signed integer overflow: -14914387 + -2147418648 cannot be represented in type 'int'
Fixes: 46464/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-474307197311385

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-02 21:07:04 +02:00
Michael Niedermayer 8154cb7c2f avutil/channel_layout: av_channel_layout_describe_bprint: Check for buffer end 
Fixes: Timeout printing a billion channels
Fixes: 48099/clusterfuzz-testcase-minimized-ffmpeg_dem_MATROSKA_fuzzer-6754782204788736

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-02 19:22:36 +02:00
Michael Niedermayer c6f1e48b86 avformat/aiffdec: cleanup size handling for extreem cases 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-07-02 19:22:36 +02:00
Michael Niedermayer e6cad01122 avformat/matroskadec: avoid integer overflows in SAR computation 
This ignores >64bit
Alternatively we could support that if it occurs in reality

Fixes: negation of -9223372036854775808
Fixes: integer overflows
Fixes: 46072/clusterfuzz-testcase-minimized-ffmpeg_dem_MATROSKA_fuzzer-5029840966778880

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-25 21:36:32 +02:00
Michael Niedermayer 6a82412bf3 avcodec/jpeglsdec: fix end check for xfrm 
Fixes: out of array access
Fixes: 47871/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AMV_fuzzer-5646305956855808

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-23 22:03:02 +02:00
Michael Niedermayer b7e30a13d4 avcodec/cdgraphics: limit scrolling to the line 
Fixes: out of array access
Fixes: 47877/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CDGRAPHICS_fuzzer-5690504626438144

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-23 22:03:02 +02:00
Michael Niedermayer d8ee014254 avformat/hls: Limit start_seq_no to one bit less 
This avoids overflow checks on additions with 32bit numbers

Fixes: signed integer overflow: 9223372036854775806 + 2 cannot be represented in type 'long'
Fixes: 44012/clusterfuzz-testcase-minimized-ffmpeg_dem_HLS_fuzzer-4747770734444544
Fixes: 48065/clusterfuzz-testcase-minimized-ffmpeg_dem_HLS_fuzzer-5372410355908608

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-23 22:03:02 +02:00
Michael Niedermayer 6a02de2127 avformat/aiffdec: avoid integer overflow in get_meta() 
Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int'
Fixes: 45891/clusterfuzz-testcase-minimized-ffmpeg_dem_AIFF_fuzzer-6159183893889024

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-17 01:54:05 +02:00
Michael Niedermayer c16a0ed242 avformat/aaxdec: Check for overlaping segments 
Fixes: Timeout
Fixes: 45875/clusterfuzz-testcase-minimized-ffmpeg_dem_AAX_fuzzer-6121689903136768

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-17 01:54:05 +02:00
Michael Niedermayer b0cac7082d avformat/demux: Count EAGAIN as 100 bytes in relation to read limit in avformat_find_stream_info() 
Fixes: Timeout
Fixes: 43717/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5206008287330304
Fixes: 45738/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-6142535657979904

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-17 01:54:05 +02:00
Michael Niedermayer 02699490c1 avformat/demux: Make read_frame_internal() return AVERREOR(EAGAIN) on stuck empty input parser 
Fixes: read_frame_internal() which does not return even though both demuxer and parser do return
Fixes: 43717/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5206008287330304

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-17 01:54:05 +02:00
Michael Niedermayer e5f6707a7b avformat/ape: more bits in size for less overflows 
Fixes: signed integer overflow: 2147483647 + 3 cannot be represented in type 'int'
Fixes: 46184/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-4678059519770624

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-14 16:46:28 +02:00
Michael Niedermayer b97e58da44 avcodec/binkaudio: Clear state on EAGAIN 
Its not supported to maintain a frame as receive_frame() argument
over multiple calls
Fixes: store to null pointer of type 'FFTSample' (aka 'float')
Fixes: 46231/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINKAUDIO_DCT_fuzzer-6276566037954560
Fixes: ACDC.smo

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-14 16:46:28 +02:00
Michael Niedermayer 9274fb2532 avformat/mov: Non overflowing ambisonic order check 
Fixes: signed integer overflow: 536870913 * 536870913 cannot be represented in type 'int'
Fixes: 45862/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-4730373768085504

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-14 16:46:28 +02:00
Michael Niedermayer c4b130e876 avformat/aviobuf: Check buf_size in ffio_ensure_seekback() 
buffer_size is an int

Fixes: signed integer overflow: 9223372036854775754 + 32767 cannot be represented in type 'long'
Fixes: 45691/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5263458831040512

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-09 20:46:21 +02:00
Michael Niedermayer 35dc93ab44 avformat/bfi: Check offsets better 
Fixes: signed integer overflow: -2145378272 - 538976288 cannot be represented in type 'int'
Fixes: 45690/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5015496544616448

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-09 20:46:10 +02:00
Michael Niedermayer ffc8772150 avformat/asfdec_f: Check packet_frag_timestamp 
Fixes: signed integer overflow: -9223372036854775808 - 4607 cannot be represented in type 'long'
Fixes: 45685/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5280102802391040

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-09 20:45:36 +02:00
Michael Niedermayer 5d6cdb015e avcodec/wmalosslessdec: Check channels after setting them 
Fixes: 46194/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-580292873827123
Fixes: stack-buffer-overflow on address 0x7ffc0ce69b30 at pc 0x00000062fb03 bp 0x7ffc0ce69af0 sp 0x7ffc0ce69ae8
Fixes: 46205/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-5354894996930560
Fixes: 47861/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-4817404984688640

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-06-09 20:44:26 +02:00
Michael Niedermayer ade36d61de avcodec/texturedspenc: Fix indexing in color distribution determination 
Fixes CID1396405

MSE and PSNR is slightly improved, and some noticable corruptions disappear as
well.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Marton Balint <cus@passwd.hu>
 2022-06-09 00:02:02 +02:00
Michael Niedermayer 366ef56f7f avcodec/ffv1enc: Eliminate float/double from find_best_state() 
log2() remains, this can either be replaced by a integer implementation or the table
hardcoded if needed

Tested-by: Anton Khirnov <anton@khirnov.net>
Tested-by: Martin Storsjö <martin@martin.st>

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-30 12:13:29 +02:00
Michael Niedermayer 9e4d1549e8 avcodec/pcm-dvdenc: Mark unreachable defaults 
Helps: CID1441929
Helps: CID1441931

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-30 12:13:29 +02:00
Michael Niedermayer d84f03609e avformat/matroskadec: assert non NULL buf 
The code is only called if size is > 0 so buf should not be NULL

Helps: CID610554

Reviewed-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-26 11:54:05 +02:00
Michael Niedermayer 7bfbd24e71 Changelog: Add line for IPFS 
Noticed-and-suggested-by: Mark Gaiser <markg85@gmail.com>
Reviewed-by: Mark Gaiser <markg85@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-26 11:54:05 +02:00
Michael Niedermayer 5982da87e3 avformat/act: Check ff_get_wav_header() for failure 
Fixes: missing error check
Fixes: CID717495

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-26 11:54:05 +02:00
Michael Niedermayer cb5be590cd avformat/jpegxl_probe: Check init_get_bits8() for failure 
Fixes: missing error check
Fixes: CID1504270

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-26 11:54:05 +02:00
Michael Niedermayer f3b7ba21ba avcodec/libxavs2: Improve r redundancy in occured 
Reviewed-by: "mypopy@gmail.com" <mypopy@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-06 15:57:45 +02:00
Michael Niedermayer e06b1ba7d7 avformat/libzmq: Improve r redundancy in occured 
Reviewed-by: "mypopy@gmail.com" <mypopy@gmail.com>
 2022-05-06 15:57:45 +02:00
Michael Niedermayer 0a3e121798 avfilter/vf_libplacebo: Match AV_OPT_TYPE_FLOAT to dbl 
Reviewed-by: "mypopy@gmail.com" <mypopy@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-06 15:57:45 +02:00
Michael Niedermayer 9a6dafa0ee avformat/jvdec: Remove redundant ; 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-05-06 15:57:45 +02:00
Michael Niedermayer fbd22504c4 avfilter/vsrc_mandelbrot: Check for malloc failure 
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-22 12:24:14 +02:00
Michael Niedermayer d353909e77 avfilter/vf_frei0r: Copy to frame allocated according to frei0r requirements 
Fixes: issues with non trivial linesize

Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-21 22:42:20 +02:00
Michael Niedermayer d740782701 avfilter/video: Add ff_default_get_video_buffer2() to set specific alignment 
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-21 22:42:20 +02:00
Michael Niedermayer a3d790f197 avformat/genh: Check sample rate 
Fixes: signed integer overflow: -2515507630940093440 * 4 cannot be represented in type 'long'
Fixes: 46318/clusterfuzz-testcase-minimized-ffmpeg_dem_GENH_fuzzer-5009637474172928

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-21 22:42:20 +02:00
Michael Niedermayer 6007d5688c avformat/demux: Use unsigned to check duration vs duration_text 
Fixes: signed integer overflow: 9223371898743775808 - -138111000000 cannot be represented in type 'long'
Fixes: 46245/clusterfuzz-testcase-minimized-ffmpeg_dem_OGG_fuzzer-5075129786302464

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-21 22:42:20 +02:00
Michael Niedermayer 1291568c98 avcodec/exr: Avoid signed overflow in displayWindow 
The inputs are unused except for this computation so wraparound
does not give an attacker any extra values as they are already fully
controlled

Fixes: signed integer overflow: 0 - -2147483648 cannot be represented in type 'int'
Fixes: 45820/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_fuzzer-5766159019933696

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-03 23:22:54 +02:00
Michael Niedermayer 7f1279684e avcodec/diracdec: avoid signed integer overflow in global mv 
Fixes: signed integer overflow: -128275513086 * -76056576 cannot be represented in type 'long'
Fixes: 45818/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DIRAC_fuzzer-5129799149944832

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-03 23:17:16 +02:00
Michael Niedermayer 01d8c887f6 avcodec/takdsp: Fix integer overflow in decorrelate_sf() 
Fixes: signed integer overflow: -101 * 71041254 cannot be represented in type 'int'
Fixes: 45938/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-4687974320701440

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-03 23:16:24 +02:00
Michael Niedermayer b085b400be avcodec/apedec: fix a integer overflow in long_filter_high_3800() 
Fixes: signed integer overflow: -2146549696 - 3923884 cannot be represented in type 'int'
Fixes: 45907/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5992380584558592

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-04-03 23:16:12 +02:00
Michael Niedermayer 3a22bc03e6 avcodec/binkaudio: reset ch_offset on errors 
Fixes: NULL pointer dereference
Fixes: 45955/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINKAUDIO_DCT_fuzzer-4842044192849920

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-03-29 17:48:35 +02:00
Michael Niedermayer 31b22defcd avcodec/vmdaudio: Fix channels count bug 
Fixes: division by zero
Fixes: 45811/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VMDAUDIO_fuzzer-6412592581574656
Fixes: 45979/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VMDAUDIO_fuzzer-5362043060879360

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2022-03-28 19:56:12 +02:00