Michael Niedermayer
390c6ee42c
tools/target_dec_fuzzer: Fix memleak on open failure
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-04 13:51:50 +02:00
Michael Niedermayer
dec2fa8cc7
tools/target_dec_fuzzer: Use decoder and not codec_id as argument
...
This allows fuzzing decoders with the same codec_id
We also avoid register all to allow the linker to prune unused sections and symbols
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-03 17:22:13 +02:00
Michael Niedermayer
48b3117844
avcodec/svq3: Reject dx/dy beyond 16bit
...
The code does use 16bit sized arrays later so larger deltas would not work
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-03 11:57:34 +02:00
Michael Niedermayer
382b4fc9b5
avcodec/svq3: Increase offsets to prevent integer overflows
...
Fixes: 1280/clusterfuzz-testcase-minimized-6102353767825408
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-03 11:57:34 +02:00
Michael Niedermayer
79aa2ff199
avutil/softfloat: use ldexp(), fixes undefined shift
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-02 22:55:44 +02:00
Michael Niedermayer
56ddb923c6
tools/target_dec_fuzzer: Use avcodec_register_all() instead of register_all()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-02 00:55:19 +02:00
Michael Niedermayer
b29feec982
avcodec/indeo2: Check remaining bits in ir2_decode_plane()
...
Fixes: 1290/clusterfuzz-testcase-minimized-5815578902134784
Fixes: timeout
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-01 18:54:41 +02:00
Michael Niedermayer
2f00300b77
avcodec/vp3: Check remaining bits in unpack_dct_coeffs()
...
Decreases the time spend decoding junk.
May fix: 1283/clusterfuzz-testcase-minimized-6221126759874560
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-01 18:48:39 +02:00
Michael Niedermayer
b706ddbae3
doc/developer: Add terse documentation of assumed C implementation defined behavior
...
Suggested-by: "Ronald S. Bultje" <rsbultje@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-01 17:59:10 +02:00
Michael Niedermayer
63b8d4146d
avcodec/bmp: Use ff_set_dimensions()
...
Fixes out of memory
Fixes: 1282/clusterfuzz-testcase-minimized-5400131681648640
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-05-01 17:55:22 +02:00
Michael Niedermayer
a9b5b6a97f
tools: Eliminate codec_type complexity from fuzzer
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-30 14:24:51 +02:00
Michael Niedermayer
7796f29065
libswscale/tests/swscale: Fix uninitialized variables
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-30 14:23:27 +02:00
Michael Niedermayer
6ca82975b7
avcodec/mdec: Fix runtime error: left shift of negative value -127
...
Fixes undefined behavior
Fixes: 1275/clusterfuzz-testcase-minimized-6718162017976320
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-27 04:25:31 +02:00
Michael Niedermayer
966cbfbc83
tools/target_dec_fuzzer: Fix return code on open failure
...
Fixes: 1271/clusterfuzz-testcase-minimized-6095220498235392
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-27 04:25:31 +02:00
Michael Niedermayer
fa8fd0808f
avcodec/x86/vc1dsp_init: Fix build failure with --disable-optimizations and clang
...
compilers doing DCE at -O0 do not necessarily understand "complex" boolean expressions
Build succeeds with this change, this was the only failure
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-27 04:25:31 +02:00
Michael Niedermayer
550a9c547e
tools/target_dec_fuzzer: Remove FuzzerInterface.h dependancy
...
The header is not always available in the docker build environment
Suggested-by: Kostya Serebryany
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-25 03:13:00 +02:00
Michael Niedermayer
177608aa74
fate: Add test for pkt_size of ffprobe
...
Suggested-by: James Almer
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-24 23:17:58 +02:00
Michael Niedermayer
5b499bf4a0
Make tools/target_dec_*_fuzzer buildable with configure and make
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-24 23:17:47 +02:00
Michael Niedermayer
d976d2ec78
tools/target_dec_fuzzer: Fix build with default FFmpeg build flags
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-24 23:16:53 +02:00
Michael Niedermayer
fc8cff96ed
avcodec/h264_cavlc: Fix undefined behavior on qscale overflow
...
Fixes: 1214/clusterfuzz-testcase-minimized-6130606599569408
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-22 22:26:00 +02:00
Michael Niedermayer
362f6c91e4
avfilter/avf_avectorscope: Assert that format is valid
...
This should help coverity realize that src[] is inited
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-22 20:08:45 +02:00
Michael Niedermayer
88612f8db3
avfilter/af_compand: Check av_strtok() for failure
...
Fixes CID1396256
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-20 02:19:21 +02:00
Michael Niedermayer
164758a831
tools/target_dec_fuzzer: Fuzz video decoder related fields in context.
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-19 23:52:20 +02:00
Michael Niedermayer
d0b3922d24
ffmpeg: Clear fifo pointer on deallocation
...
Not leaving stale pointers is more robust
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-18 03:18:50 +02:00
Michael Niedermayer
5b441d2981
doc/APIchanges: Fill in missing fields
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-12 02:01:37 +02:00
Michael Niedermayer
6268f2ca7b
avformat/movenc: Fix mix of declaration and statement
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-11 23:38:38 +02:00
Michael Niedermayer
9eff4b0d2b
avformat/oggparseogm: Check ff_alloc_extradata() for failure
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-11 21:28:26 +02:00
Michael Niedermayer
170d864d2c
avformat/oggparseogm: Check available data before reading global header
...
Fixes use of uninitialized data
Found-by: Thomas Guilbert <tguilbert@google.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-11 21:10:25 +02:00
Michael Niedermayer
cd8e62746f
avcodec/tiff: Factor constant computation out of inner loop
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-11 17:58:26 +02:00
Michael Niedermayer
a44b3abb4c
avutil/internal: Do not enable CHECKED with DEBUG
...
This avoids potential undefined behavior in debug mode while still allowing
developers which want to check for potential additional overflows to do so
by manually enabling this.
Reviewed-by: wm4
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-11 01:05:05 +02:00
Michael Niedermayer
c94d551ea7
avcodec/pixlet: Reorder rlen check
...
This changes nothing but is nicer looking as this checks rlen
Maybe this helps coverity remove CID1397743
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-10 13:11:15 +02:00
Michael Niedermayer
8dd0c12648
avcodec/mjpegenc_huffman: Assert length in ff_mjpegenc_huffman_compute_bits()
...
This should help coverity see that the issues this leads to cannot occur
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-10 13:11:15 +02:00
Michael Niedermayer
724bb805ef
Revert "mjpegenc: disable huffman coding with AMV"
...
This was the wrong patch
This reverts commit 7f9b492d54 .
2017-04-09 21:53:30 +02:00
Michael Niedermayer
23edd41a0d
doc/examples/decode_video: Fix format string vulnerability
...
Fixes: CID1404843
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-09 03:51:19 +02:00
Michael Niedermayer
9244b839b7
avcodec/dcadsp: Fix runtime error: signed integer overflow
...
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-09 03:51:19 +02:00
Michael Niedermayer
08117a4015
avcodec/h264: Check weight values to be within the specs limits.
...
Fixes: integer overflows
Fixes: 911/clusterfuzz-testcase-5415105606975488
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-07 15:33:17 +02:00
Michael Niedermayer
61ee2ca775
avcodec/dvdsubdec: Fixes 2 runtime error: left shift of 170 by 24 places cannot be represented in type 'int'
...
Fixes: 619/clusterfuzz-testcase-5803914534322176
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-07 03:38:31 +02:00
Michael Niedermayer
afe950e1fa
avcodec/bitpacked: Fix mixed declarations and statement
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-07 00:43:46 +02:00
Michael Niedermayer
0e2f0fedcd
ffmpeg: Change duration to int64_t
...
It is assigned from 64bit input in some branches and used with 64bit timestamps
This thus fixes a potential integer truncation
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-07 00:07:08 +02:00
Michael Niedermayer
b02027c79d
avcodec/dvbsubdec: Replace fprintf(stderr) by av_log()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-05 23:57:08 +02:00
Michael Niedermayer
39ee3ddff8
avformat/mov: Check creation_time for overflow
...
Fixes integer overflow
Fixes: 701640
Found-by: Found-by: Thomas Guilbert <tguilbert@google.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-04 00:56:21 +02:00
Michael Niedermayer
22b0daa1b3
Bump versions for master after 3.3
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-02 19:54:12 +02:00
Michael Niedermayer
e1cc7f83df
Bump minor for 3.3
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-02 19:49:45 +02:00
Michael Niedermayer
23ae3cc822
avformat/oggparsedaala: Do not leave an invalid value in gpshift
...
Fixes: undefined behavior
Fixes: 702974
Found-by: Thomas Guilbert <tguilbert@google.com >
Reviewed-by: Rostislav Pehlivanov <atomnuker@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-01 22:09:23 +02:00
Michael Niedermayer
679a315424
avformat/oggparsedaala: Check duration for AV_NOPTS_VALUE
...
This avoids an integer overflow
the solution matches oggparsevorbis.c and 45581ed15d
Fixes: 700242
Found-by: Thomas Guilbert <tguilbert@google.com >
Reviewed-by: Rostislav Pehlivanov <atomnuker@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-04-01 22:09:23 +02:00
Michael Niedermayer
58b867a7cf
Bump minor versions for master after release/3.3 branchpoint
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-31 13:21:06 +02:00
Michael Niedermayer
fc332f3e29
Bump minor versions for staring release/3.3 branch
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-31 13:21:06 +02:00
Michael Niedermayer
1317a9f7aa
doc/APIchanges: Update
2017-03-31 13:21:06 +02:00
Michael Niedermayer
55d53cb593
avfilter/avfiltergraph: Check for allocation failure in avfilter_graph_queue_command()
...
Fixes: CID1396538
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-31 12:28:58 +02:00
Michael Niedermayer
5036e214b0
avfilter/vf_zoompan: Free out frame on error
...
Fixes: CID1398578
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-31 12:28:58 +02:00
Michael Niedermayer
c217027c11
avcodec/mips: fix build
...
Found-by: Shivraj Patil <shivraj.patil@imgtec.com >
Suggested-by: "Ronald S. Bultje" <rsbultje@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-31 12:28:58 +02:00
Michael Niedermayer
afebf470ca
avutil/tests/dict: Check return of av_dict_parse_string()
...
Fixes: CID1396402
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 23:35:18 +02:00
Michael Niedermayer
77a3c288bd
avformat/mov: Init ref_sc / ref_st to NULL
...
This is more robust in case some change or corner case causes them to be
dereferenced before being set
Fixes CID1396274, CID1396275
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 23:35:18 +02:00
Michael Niedermayer
bd8201566d
avformat/libopenmpt: Check for avio_size() failure
...
Fixes CID1396850
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 23:35:18 +02:00
Michael Niedermayer
477ba8f939
avfilter/af_chorus & aecho: Handle NULL return from av_strtok()
...
Fixes CID1396260
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 23:35:18 +02:00
Michael Niedermayer
fe46d92c15
avcodec/clearvideo: Do not lose the return code of decode_mb()
...
Fixes CID1401671
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Reviewed-by: Nicolas George <george@nsup.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 23:35:18 +02:00
Michael Niedermayer
855305fac2
avfilter/vf_minterpolate: Use dx and dy
...
Fixes CID1396283 and CID1396284
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 22:46:31 +02:00
Michael Niedermayer
4798237f01
avfilter/deshake_opencl: Remove redundant return
...
Fixes: CID1396846
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 22:46:31 +02:00
Michael Niedermayer
4064f3f0df
avfilter/af_sofalizer: Fix bad shift
...
Fixes CID1396835
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 22:46:31 +02:00
Michael Niedermayer
e976e68fc5
avcodec/atrac3: Check init_get_bits8() for failure
...
This is more for correctness than actually fixing a missing error path
Fixes CID1399967
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 22:13:38 +02:00
Michael Niedermayer
59b8c2a4e6
doc/examples/encode_audio: Favor a sample rate close to 44khz instead of the maximum sample rate
...
This is an example, people will copy and use this. The maximum supported is quite
unreasonable as a default choice
Reviewed-by: Steven Liu <lingjiujianke@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 16:34:06 +02:00
Michael Niedermayer
004f27f0fb
ffmpeg: Fix avframe memleak
...
Fixes CID1401674
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 16:34:06 +02:00
Michael Niedermayer
8779ec91b2
avformat/mux: Check return code of av_packet_split_side_data()
...
Fixes CID1403225
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 16:30:14 +02:00
Michael Niedermayer
ad7aff0355
tests/fate/source-check: Use git grep in place of grep
...
grep -L is not posix, solaris default grep does not support it
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 03:12:05 +02:00
Michael Niedermayer
5f019909c0
avfilter: Add AV_OPT_FLAG_FILTERING_PARAM where it is missing
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-30 03:12:05 +02:00
Michael Niedermayer
bcd7153df3
ffprobe: Support adding av_log output to frames
...
adding demuxer and other logs should be easy
This forces single threaded decoding for simplicity
It also requires pthreads, this could be avoided either with
some lockless tricks or simply by assuming av_log would never be called from
another thread.
Fixes Ticket5521
Previous version reviewed by Stefano
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-28 00:13:47 +02:00
Michael Niedermayer
d65b59550b
avcodec/avcodec: Correct and make consistent AVERROR() in comments
...
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-27 01:48:39 +02:00
Michael Niedermayer
eaf6f10f1b
avfilter/vf_signature: Replace uncommon spelling of seperate
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-26 20:34:47 +02:00
Michael Niedermayer
0ba22831e1
avcodec/h264idct_template: Fix multiple runtime error: signed integer overflow
...
Fixes: 712/clusterfuzz-testcase-6647676227551232
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-26 19:17:30 +02:00
Michael Niedermayer
73fb40dc87
avcodec/x86/idctdsp: Remove duplicate include
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-26 19:17:30 +02:00
Michael Niedermayer
9dd1573423
doc/bitstream_filters: Fix project name after merge
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-26 19:17:30 +02:00
Michael Niedermayer
d92ad42fb3
avcodec/tests/celp_math: Change IsAlmostEqual() to a function
...
Fixes empty statement, found by ubitux
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-24 18:18:57 +01:00
Michael Niedermayer
4f727fbc73
avcodec/h264_ps: Fix runtime error: signed integer overflow: 2147483647 + 26 cannot be represented in type 'int'
...
Fixes: 902/clusterfuzz-testcase-4561155144024064
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-23 15:25:48 +01:00
Michael Niedermayer
0f34c0789f
avcodec/pictordec: runtime error: left shift of 15 by 28 places cannot be represented in type 'int'
...
Fixes: 898/clusterfuzz-testcase-6149765467209728
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-23 15:25:48 +01:00
Michael Niedermayer
3182e19c1c
avcodec/tiff: Check geotag count for being non zero
...
Fixes memleak
Fixes: 874/clusterfuzz-testcase-5252796175613952
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-23 15:25:48 +01:00
Michael Niedermayer
423375d4f0
avcodec/wavpack: Check shift
...
Fixes: runtime error: shift exponent 255 is too large for 32-bit type 'unsigned int'
Fixes: 894/clusterfuzz-testcase-4841537823309824
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-21 20:54:27 +01:00
Michael Niedermayer
b15818642b
avcodec/mpegaudiodec_template: Fix 2 runtime error: signed integer overflow
...
Fixes: 873/clusterfuzz-testcase-5714546230558720
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-21 20:52:08 +01:00
Michael Niedermayer
23f3f92361
avcodec/mjpegdec: quant_matrixes can be up to 65535, use uint16_t
...
Fixes invalid shift
Fixes: 870/clusterfuzz-testcase-5649105424482304
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-20 01:38:04 +01:00
Michael Niedermayer
656a17e126
avcodec/mjpegdec: Check quant_matrixes values for being non zero
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-20 01:38:02 +01:00
Michael Niedermayer
98da63b3f5
avcodec/vp56: Check avctx->error_concealment before enabling EC
...
Fixes timeout with 847/clusterfuzz-testcase-5291877358108672
Fixes timeout with 850/clusterfuzz-testcase-5721296509861888
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-20 01:33:08 +01:00
Michael Niedermayer
a84d610b37
avcodec/h264_direct: Fix runtime error: signed integer overflow: -9 - 2147483647 cannot be represented in type 'int'
...
Fixes: 864/clusterfuzz-testcase-4774385942528000
See: [FFmpeg-devel] [PATCH 1/2] avcodec/h264_direct: Fix runtime error: signed integer overflow: 2147483647 - -14133 cannot be represented in type 'int'
See: [FFmpeg-devel] [PATCH 2/2] avcodec/h264_direct: Fix runtime error: signed integer overflow: -9 - 2147483647 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-20 01:33:08 +01:00
Michael Niedermayer
5d996b5649
avcodec/tiff: Check stripsize strippos for overflow
...
Fixes: 861/clusterfuzz-testcase-5688284384591872
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-20 01:33:08 +01:00
Michael Niedermayer
a3a4082599
avcodec/h264_cabac: Fix runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
...
Fixes: 858/clusterfuzz-testcase-5168477042114560
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-16 16:16:05 +01:00
Michael Niedermayer
2898bc522d
avcodec/h264idct_template: fix multiple runtime error: signed integer overflow
...
Fixes: 857/clusterfuzz-testcase-5319093760557056
Benchmark changes from 335->333 (so if its not a random fluctuation then it would be faster)
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-16 16:16:05 +01:00
Michael Niedermayer
cfa10e11be
avcodec/tiff: Check palette shift
...
Fixes multiple runtime error: shift exponent 792 is too large for 32-bit type 'unsigned int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-16 01:04:35 +01:00
Michael Niedermayer
58e9c7f4a2
avcodec/wavpack: Fix multiple integer overflows
...
Fixes: 839/clusterfuzz-testcase-4871084446842880
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-16 01:04:35 +01:00
Michael Niedermayer
45198477de
avcodec/simple_idct_template: Fix several integer overflows
...
Benchmarks with START_TIMER indicate that the code is faster with unsigned, (that is
with the patch), there was quite some fluctuation in the numbers so this may be just
random
Fixes: 811/clusterfuzz-testcase-6465493076541440
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-16 01:04:35 +01:00
Michael Niedermayer
8ebed703f1
avcodec/mpegaudiodec_template: Make l3_unscale() work with e=0
...
Fixes undefined behavior
Fixes: 830/clusterfuzz-testcase-6253175327686656
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 22:48:49 +01:00
Michael Niedermayer
108b02e547
avcodec/tiff: Check for multiple geo key directories
...
Fixes memleak
Fixes: 826/clusterfuzz-testcase-5316921379520512
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 22:48:49 +01:00
Michael Niedermayer
0728d9a281
avcodec/pictordec: Fix runtime error: left shift of 805306368 by 2 places cannot be represented in type 'int'
...
Fixes: 823/clusterfuzz-testcase-6727060074528768
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 22:48:49 +01:00
Michael Niedermayer
7cebc5a9cc
avcodec/wavpack: Fix runtime error: shift exponent 32 is too large for 32-bit type 'int'
...
Fixes: 822/clusterfuzz-testcase-4873433189974016
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 02:23:50 +01:00
Michael Niedermayer
acdacb108d
avcodec/targa: Skip hflip on blank images
...
Fixes: timeout with 810/clusterfuzz-testcase-5249282825256960
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 02:23:50 +01:00
Michael Niedermayer
1467143a6e
avcodec/wavpack: Fix runtime error: shift exponent 137 is too large for 32-bit type 'int'
...
Fixes: 808/clusterfuzz-testcase-4715513349406720
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 02:23:50 +01:00
Michael Niedermayer
a557ae8d52
avcodec/h264_direct: Fix runtime error: signed integer overflow: 2147483647 - -14133 cannot be represented in type 'int'
...
Fixes: 755/clusterfuzz-testcase-5369072516595712
See: [FFmpeg-devel] [PATCH 1/2] avcodec/h264_direct: Fix runtime error: signed integer overflow: 2147483647 - -14133 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-14 02:23:50 +01:00
Michael Niedermayer
967feea5eb
avcodec/vp6: clear dimensions on failed resolution change in vp6_parse_header()
...
Fixes: 807/clusterfuzz-testcase-6470061042696192
Fixes null pointer dereference
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-13 04:48:43 +01:00
Michael Niedermayer
a66c6e28b5
avcodec/rv34: Fix runtime error: signed integer overflow: 36880 * 66288 cannot be represented in type 'int'
...
Fixes: 768/clusterfuzz-testcase-4807444305805312
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-13 04:48:43 +01:00
Michael Niedermayer
a720b854b0
avcodec/mpeg12dec: Fix runtime error: left shift of negative value -1
...
Fixes: 764/clusterfuzz-testcase-6273034652483584
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-13 04:48:43 +01:00
Michael Niedermayer
ce010655a6
avcodec/dca_xll: Fix runtime error: signed integer overflow: 2147286116 + 6298923 cannot be represented in type 'int'
...
Fixes: 732/clusterfuzz-testcase-4872990070145024
See: [FFmpeg-devel] [PATCH 2/6] avcodec/dca_xll: Fix runtime error: signed integer overflow: 2147286116 + 6298923 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-12 04:38:14 +01:00
Michael Niedermayer
44e2105189
avcodec/amrwbdec: Fix runtime error: left shift of negative value -1
...
Fixes: 763/clusterfuzz-testcase-6007567320875008
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-12 04:38:14 +01:00
Michael Niedermayer
f4c2302ee2
avcodec/dca_xll: Fix runtime error: signed integer overflow: 1762028192 + 698372290 cannot be represented in type 'int'
...
Fixes: 762/clusterfuzz-testcase-5927683747741696
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-03-12 04:38:14 +01:00