virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2026-06-19 19:03:00 +02:00
Code Issues Releases Activity
85,993 Commits 39 Branches 425 Tags
6ce57fb3c2ef139bbe164d1811422b91e2dedc26
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Niedermayer 014d47ed74 doc/codecs: Change common boolean parameters listed to "bool" 
Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 14:00:20 +02:00
Michael Niedermayer ec1f869f0f doc/codecs: Add missing documentation for apply_cropping 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 14:00:20 +02:00
Michael Niedermayer ae6fd1790f avcodec/svq3: Fix multiple runtime error: signed integer overflow: -237341 * 24552 cannot be represented in type 'int' 
Fixes: 1429/clusterfuzz-testcase-minimized-5959951610544128

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 01:27:15 +02:00
Michael Niedermayer 2bd8eb05d2 avcodec/texturedsp: Fix runtime error: left shift of 218 by 24 places cannot be represented in type 'int' 
Fixes: 1428/clusterfuzz-testcase-minimized-5263281793007616

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 01:19:03 +02:00
Michael Niedermayer ed3c9b5b0d avcodec/lagarith: Check scale_factor 
Fixes: 1425/clusterfuzz-testcase-minimized-6295712339853312

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 01:10:55 +02:00
Michael Niedermayer ddb2dd7edb avcodec/lagarith: Fix runtime error: left shift of negative value -1 
Fixes: 1424/clusterfuzz-testcase-minimized-6088327159611392

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 01:10:55 +02:00
Michael Niedermayer c5d2fa2fdf avcodec/takdec: Fix multiple runtime error: left shift of negative value -1 
Fixes: 1423/clusterfuzz-testcase-minimized-5063889899225088

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-10 01:10:55 +02:00
Michael Niedermayer f1a4dd5e48 avcodec/scpr: Fix multiple runtime error: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int' 
Fixes: 1422/clusterfuzz-testcase-minimized-5030993939398656

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:46:17 +02:00
Michael Niedermayer 62c5949bec avcodec/cllc: Check prefix 
Fixes: runtime error: left shift of 1610706944 by 1 places cannot be represented in type 'int'
Fixes: 1421/clusterfuzz-testcase-minimized-6239947507892224

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:39:43 +02:00
Michael Niedermayer 72810d20b7 avcodec/webp: Update canvas size in vp8_lossy_decode_frame() as in vp8_lossless_decode_frame() 
Fixes: 1407/clusterfuzz-testcase-minimized-6044604124102656
Fixes: 1420/clusterfuzz-testcase-minimized-6059927359455232

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:11:58 +02:00
Michael Niedermayer c4f63b78b7 avcodec/webp: Factor update_canvas_size() out 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:11:58 +02:00
Michael Niedermayer 2f2bc2e246 avcodec/webp: Check for VP8X after other VP8 chunks 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:11:58 +02:00
Michael Niedermayer 78aa93807b avcodec/snowdec: Check width 
Fixes: out of array read
Fixes: 1419/clusterfuzz-testcase-minimized-6108700873850880

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 16:50:18 +02:00
Michael Niedermayer ea627dc094 avcodec/snowdec: Remove unneeded {} 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 16:50:18 +02:00
Michael Niedermayer 3f5a68533d avcodec/flacdec: Return error code instead of 0 for failures 
Fixes: infinite loop
Fixes: 1418/clusterfuzz-testcase-minimized-5934472438480896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 16:50:18 +02:00
Michael Niedermayer 28230a690e avcodec/clearvideo: Fix runtime error: signed integer overflow: 181 * 18050756 cannot be represented in type 'int' 
Fixes: 1417/clusterfuzz-testcase-minimized-6606778030620672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 00:42:20 +02:00
Michael Niedermayer 159fb8ff7e avcodec/indeo2: Check for invalid VLCs 
Fixes: timeout
Fixes: 1416/clusterfuzz-testcase-minimized-5536862435278848

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 00:42:20 +02:00
Michael Niedermayer 548459080b avcodec/fic: Check coefficients 
Fixes: signed integer overflow: 1258291200 * 2 cannot be represented in type 'int'
Fixes: 1413/clusterfuzz-testcase-minimized-5923451770503168

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 00:42:20 +02:00
Michael Niedermayer d3088e0fd8 avcodec/g723_1dec: Fix several integer related cases of undefined behaviour 
Fixes: 1412/clusterfuzz-testcase-minimized-6561308772139008

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 00:42:20 +02:00
Michael Niedermayer 8ef2c791c9 doc/build_system: Document how to build decoder fuzzer 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 17:02:02 +02:00
Michael Niedermayer 7b94df232a avcodec/srtdec: Check ff_htmlmarkup_to_ass() return code 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 17:02:02 +02:00
Michael Niedermayer 983e3fbcc5 avcodec/samidec: Check ff_htmlmarkup_to_ass() return code 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 17:02:02 +02:00
Michael Niedermayer f4ae3cce64 avcodec/htmlsubtitles: Check for string truncation and return error 
Fixes out of array access
Fixes: 1354/clusterfuzz-testcase-minimized-5520132195483648

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 17:02:02 +02:00
Michael Niedermayer aaeec1c654 avcodec/wavpack: Fix signed integer overflow: 1285114081 * 2 cannot be represented in type 'int' 
Fixes: 945/clusterfuzz-testcase-6037937588273152
Fixes: integer overflow

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 17:02:02 +02:00
Michael Niedermayer 29692023b2 avcodec/bmvvideo: Fix runtime error: left shift of 137 by 24 places cannot be represented in type 'int' 
Fixes: 1411/clusterfuzz-testcase-minimized-5776085184675840

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 15:47:29 +02:00
Michael Niedermayer ea59ef0c03 avcodec/dss_sp: Fix multiple runtime error: signed integer overflow: -15699 * -164039 cannot be represented in type 'int' 
Fixed: 1409/clusterfuzz-testcase-minimized-5237365020819456

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 15:41:15 +02:00
Michael Niedermayer 0075d9eced avcodec/dvbsubdec: check region dimensions 
Fixes: 1408/clusterfuzz-testcase-minimized-6529985844084736
Fixes: integer overflow

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 15:28:26 +02:00
Michael Niedermayer 8824b7370a avcodec/vp8dsp: Fixes: runtime error: signed integer overflow: 1330143360 - -1023040530 cannot be represented in type 'int' 
Fixes: 1406/clusterfuzz-testcase-minimized-5064865125236736

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 12:30:09 +02:00
Michael Niedermayer 5d5118f81b avcodec/hqxdsp: Fix multiple runtime error: signed integer overflow: 248220 * 21407 cannot be represented in type 'int' in idct_col() 
Fixes: 1405/clusterfuzz-testcase-minimized-5011491835084800

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 12:30:09 +02:00
Michael Niedermayer 279420b5a6 avcodec/cavsdec: Check sym_factor 
Fixes: runtime error: signed integer overflow: 25984 * 130560 cannot be represented in type 'int'

Fixes: 1404/clusterfuzz-testcase-minimized-5000441286885376

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 12:30:09 +02:00
Michael Niedermayer 1e42736b95 avcodec/cdxl: Check format for BGR24 
Fixes: out of array access
Fixes: 1427/clusterfuzz-testcase-minimized-5020737339392000

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 12:30:09 +02:00
Michael Niedermayer 5f928c5201 avcodec/rangecoder: Test for invalid corner case 
Fixes runtime error: left shift of 1912602815 by 8 places cannot be represented in type 'int'
Fixes: 1403/clusterfuzz-testcase-minimized-4724820484816896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 03:25:17 +02:00
Michael Niedermayer 3a4d387195 avcodec/ffv1dec: Fix copying planes of paletted formats 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 03:25:17 +02:00
Michael Niedermayer 8b1f66cf5c avcodec/wmv2dsp: Fix runtime error: signed integer overflow: 181 * -12156865 cannot be represented in type 'int' 
Fixes: 1401/clusterfuzz-testcase-minimized-6526248148795392

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 03:25:17 +02:00
Michael Niedermayer 3c3d4ce4fd doc: fix bistream typo 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 03:25:17 +02:00
Michael Niedermayer 80a3227be6 ffprobe: make function replacement macros behave correctly 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-08 03:25:17 +02:00
Michael Niedermayer 441026fcb1 avcodec/xwddec: Check bpp more completely 
Fixes out of array access
Fixes: 1399/clusterfuzz-testcase-minimized-4866094172995584

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 19:32:33 +02:00
Michael Niedermayer a5e0dbf530 avcodec/aacdec_template: Do not decode 2nd PCE if it will lead to failure 
Fixes: out of array read
Fixes: 1072/clusterfuzz-testcase-6456688074817536
Fixes: 1398/clusterfuzz-testcase-minimized-4576913622302720

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 19:32:33 +02:00
Michael Niedermayer a38e9797cb avcodec/s302m: Fix left shift of 8 by 28 places cannot be represented in type 'int' 
Fixes: 1395/clusterfuzz-testcase-minimized-5330939741732864

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 19:32:33 +02:00
Michael Niedermayer 0ac1c87194 avcodec/eamad: Fix runtime error: signed integer overflow: 49674 * 49858 cannot be represented in type 'int' 
Fixes: 1394/clusterfuzz-testcase-minimized-6493376885030912

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 19:32:33 +02:00
Michael Niedermayer c04aa14882 avcodec/g726: Fix runtime error: left shift of negative value -2 
Fixes: 1393/clusterfuzz-testcase-minimized-5948366791901184

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 19:32:33 +02:00
Michael Niedermayer 2162b862eb avcodec/magicyuv: Check len to be supported 
Fixes: shift exponent -1 is negative
Fixes: 1390/clusterfuzz-testcase-minimized-5452757630713856

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 15:31:00 +02:00
Michael Niedermayer 78bf446852 avcodec/ra144: Fix runtime error: left shift of negative value -798 
Fixes: 1388/clusterfuzz-testcase-minimized-6680800936329216

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 15:31:00 +02:00
Michael Niedermayer 464c4b86ee avcodec/mss34dsp: Fix multiple signed integer overflow 
Fixes: 1387/clusterfuzz-testcase-minimized-4802757766676480

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 15:31:00 +02:00
Michael Niedermayer 3e56db8926 avcodec/targa_y216dec: Fix width type 
Fixes out of array access
Fixes: 1376/clusterfuzz-testcase-minimized-6361794975105024

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 04:11:21 +02:00
Michael Niedermayer e92fb2bea1 avcodec/texturedsp: Fix multiple runtime error: left shift of 255 by 24 places cannot be represented in type 'int' 
Fixes: 1386/clusterfuzz-testcase-minimized-5323086394032128

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 04:11:21 +02:00
Michael Niedermayer 9e88cc94e5 avcodec/ivi_dsp: Fix multiple left shift of negative value -2 
Fixes: 1385/clusterfuzz-testcase-minimized-5552882663292928

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 04:11:21 +02:00
Michael Niedermayer 669419939c avcodec/svq3: Fix multiple runtime error: signed integer overflow: 44161 * 61694 cannot be represented in type 'int' 
Fixes: 1382/clusterfuzz-testcase-minimized-6013445293998080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 04:11:21 +02:00
Michael Niedermayer 1121d92707 avcodec/msmpeg4dec: Correct table depth 
Fixes undefined shift
Fixes: 1381/clusterfuzz-testcase-minimized-5513944540119040

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-07 04:11:21 +02:00
Michael Niedermayer 8a8335de03 avcodec/dds: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int' 
Fixes: 1380/clusterfuzz-testcase-minimized-650122545122508

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 23:23:39 +02:00
Michael Niedermayer e1b60aad77 avcodec/cdxl: Check format parameter 
Fixes out of array access
Fixes: 1378/clusterfuzz-testcase-minimized-5715088008806400

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 23:23:39 +02:00
Michael Niedermayer 277e397eb5 avutil/softfloat: Fix overflow in av_div_sf() 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 23:23:39 +02:00
Michael Niedermayer df8575584d avcodec/shorten: Check residual size 
Fixes assertion failure

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 19:53:25 +02:00
Michael Niedermayer 1283c42447 avcodec/hq_hqa: Fix runtime error: left shift of negative value -207 
Fixes: 1375/clusterfuzz-testcase-minimized-6070134701555712

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 19:12:14 +02:00
Michael Niedermayer 2ef0f39271 avcodec/mss3: Change types in rac_get_model_sym() to match the types they are initialized from 
Fixes integer overflow
Fixes: 1372/clusterfuzz-testcase-minimized-5712192982745088

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 19:10:50 +02:00
Michael Niedermayer 7b6a51f59c avcodec/shorten: Check k in get_uint() 
Fixes: undefined shift
Fixes: 1371/clusterfuzz-testcase-minimized-5770822591447040

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 18:28:57 +02:00
Michael Niedermayer 0884b1c5ff avcodec/golomb: Assert that k is valid in get_ur_golomb_jpegls() 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 18:25:02 +02:00
Michael Niedermayer 9bf4523e40 avcodec/webp: Fix null pointer dereference 
Fixes: 1369/clusterfuzz-testcase-minimized-5048908029886464

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 16:44:25 +02:00
Michael Niedermayer 12936a4585 avcodec/dfa: Fix signed integer overflow: -2147483648 - 1 cannot be represented in type 'int' 
Fixes: 1368/clusterfuzz-testcase-minimized-4507293276176384

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 16:40:29 +02:00
Michael Niedermayer 4ace2d2219 avcodec/g723_1: Fix multiple runtime error: left shift of negative value 
Fixes: 1367/clusterfuzz-testcase-minimized-571496882346393

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 16:33:31 +02:00
Michael Niedermayer fc2c420b82 avcodec/mimic: Fix runtime error: left shift of negative value -1 
Fixes: 1365/clusterfuzz-testcase-minimized-5624158450876416

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 15:18:00 +02:00
Michael Niedermayer 38e79d9d9c tools/target_dec_fuzzer: Do not attempt to fuzz VDPAU, its not supported 
Fixes: 1364/clusterfuzz-testcase-minimized-6459843441328128
Fixes: 1392

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 15:15:14 +02:00
Michael Niedermayer d58fe01774 tools/target_dec_fuzzer: Do not use codec_id to look up decoder, but use selected decoder directly 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 15:12:05 +02:00
Michael Niedermayer 4654baff12 avcodec/opus_silk: Fix integer overflow and out of array read 
Fixes: 1362/clusterfuzz-testcase-minimized-6097275002552320

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 14:29:12 +02:00
Michael Niedermayer c0ffcb34c7 avcodec/clearvideo: Fix multiple runtime error: left shift of negative value -1024 
Fixes: 1360/clusterfuzz-testcase-minimized-5606472043986944

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 12:17:54 +02:00
Michael Niedermayer b20c71409b avcodec/fic: Fix multiple left shift of negative value -15 
Fixes: 1356/clusterfuzz-testcase-minimized-6008489086287872

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 12:11:43 +02:00
Michael Niedermayer c535436cbe avcodec/mlpdec: Fix runtime error: left shift of negative value -22 
Fixes: 1355/clusterfuzz-testcase-minimized-6662205472768000

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 12:08:14 +02:00
Michael Niedermayer e813df4fa3 avcodec: Avoid splitting side data repeatedly 
Fixes Timeout
Fixes: 508/clusterfuzz-testcase-6245747678773248

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 03:54:17 +02:00
Michael Niedermayer 523205ce1e avcodec/snowdec: Check qbias 
Fixes: signed integer overflow: -1094995529 * 131 cannot be represented in type 'int'
Fixes: 1353/clusterfuzz-testcase-minimized-5208180449607680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 02:11:34 +02:00
Michael Niedermayer 35f3df0d76 avutil/softfloat: Fix multiple runtime error: left shift of negative value -8 
Fixes: 1352/clusterfuzz-testcase-minimized-5757565017260032

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 00:33:19 +02:00
Michael Niedermayer 12dea8a5a1 avcodec/ivi: Free custom blk_vlc 
Fixes memleak
Fixes: 1351/clusterfuzz-testcase-minimized-5861971645693952

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 00:33:19 +02:00
Michael Niedermayer a8ad83b793 avcodec/aacsbr_template: Do not leave bs_num_env invalid 
Fixes out of array read
Fixes: 1349/clusterfuzz-testcase-minimized-5370707196248064

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 00:33:19 +02:00
Michael Niedermayer a234b5ade3 avcodec/mdec: Fix signed integer overflow: 28835400 * 83 cannot be represented in type 'int' 
Fixes: 1346/clusterfuzz-testcase-minimized-5776732600664064

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-06 00:33:19 +02:00
Michael Niedermayer f52fbf4f3e avcodec/dfa: Fix off by 1 error 
Fixes out of array access
Fixes: 1345/clusterfuzz-testcase-minimized-6062963045695488

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 20:42:55 +02:00
Michael Niedermayer 0953736b7e avcodec/nellymoser: Fix multiple left shift of negative value -8591 
Fixes: 1342/clusterfuzz-testcase-minimized-5490842129137664

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 19:29:32 +02:00
Michael Niedermayer 1002932a3b avcodec/cdxl: Fix signed integer overflow: 14243456 * 164 cannot be represented in type 'int' 
Fixes: 1341/clusterfuzz-testcase-minimized-5441502618583040

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 19:26:36 +02:00
Michael Niedermayer f55df62998 avcodec/g722: Fix multiple runtime error: left shift of negative value -1 
Fixes: 1340/clusterfuzz-testcase-minimized-4669892148068352

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 18:33:38 +02:00
Michael Niedermayer 38152d9368 avcodec/dss_sp: Fix multiple left shift of negative value -466 
Fixes: 1339/clusterfuzz-testcase-minimized-4614671485108224

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 18:33:38 +02:00
Michael Niedermayer 9fac508ca4 avcodec/wnv1: Fix runtime error: left shift of negative value -1 
Fixes: 1338/clusterfuzz-testcase-minimized-6485546354343936

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 18:33:38 +02:00
Michael Niedermayer 527f89e059 avcodec/aacps: Fix undefined behavior 
Fixes: 1337/clusterfuzz-testcase-minimized-5212314171080704

Fixes the existence of a potentially invalid pointer intermediate

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 13:36:52 +02:00
Michael Niedermayer 1f5b6c7e1e avcodec/pixlet: Fix shift exponent 4294967268 is too large for 32-bit type 'int' 
Fixes: 1336/clusterfuzz-testcase-minimized-4761381930795008

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 13:36:52 +02:00
Michael Niedermayer ce551a3925 avcodec/tiertexseqv: set the fixed dimenasions, do not depend on the demuxer doing so 
Fixes: out of array access
Fixes: 1348/clusterfuzz-testcase-minimized-6195673642827776

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 13:36:52 +02:00
Michael Niedermayer a0e5f7f363 avcodec/cavsdec: Fix undefined behavior from integer overflow 
Fixes: 1335/clusterfuzz-testcase-minimized-5566961566089216

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 04:25:07 +02:00
Michael Niedermayer ce7098b8f2 avcodec/dvdsubdec: Fix runtime error: left shift of 242 by 24 places cannot be represented in type 'int' 
Fixes: 1080/clusterfuzz-testcase-5353236754071552

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-05 04:25:07 +02:00
Michael Niedermayer a78ae465fd avcodec/mjpegdec: Fix runtime error: signed integer overflow: -24543 * 2031616 cannot be represented in type 'int' 
Fixes: 943/clusterfuzz-testcase-5114865297391616

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 20:42:54 +02:00
Michael Niedermayer fc4f88375b avcodec/wavpack: Fix invalid shift and integer overflow 
Fixes: 940/clusterfuzz-testcase-5200378381467648

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 20:32:11 +02:00
Michael Niedermayer d2657d225c avcodec/flicvideo: Check for chunk overread 
Fixes integer overflow
Fixes: 1292/clusterfuzz-testcase-minimized-5795512143839232

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 19:52:23 +02:00
Michael Niedermayer c1c3a14073 libavcodec/mpeg4videodec: Convert sprite_offset to 64bit 
This avoids intermediates from overflowing (the final values are checked)
Fixes: runtime error: signed integer overflow: -167712 + -2147352576 cannot be represented in type 'int'

Fixes: 1298/clusterfuzz-testcase-minimized-5955580877340672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 19:49:45 +02:00
Michael Niedermayer a0296fc056 avcodec/pngdec: Use ff_set_dimensions() 
Fixes OOM
Fixes: 1314/clusterfuzz-testcase-minimized-4621997222920192

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 18:41:30 +02:00
Michael Niedermayer cabfed6895 avcodec/msvideo1: Check buffer size before re-getting the frame 
Fixes timeout
Fixes: 1306/clusterfuzz-testcase-minimized-6152296217968640

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 17:15:43 +02:00
Michael Niedermayer 92f4a4bf29 configure: Do not add omit-frame-pointer for ossfuzz 
ossfuzz works better without it

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 14:31:20 +02:00
Michael Niedermayer 390c6ee42c tools/target_dec_fuzzer: Fix memleak on open failure 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-04 13:51:50 +02:00
Michael Niedermayer dec2fa8cc7 tools/target_dec_fuzzer: Use decoder and not codec_id as argument 
This allows fuzzing decoders with the same codec_id
We also avoid register all to allow the linker to prune unused sections and symbols

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-03 17:22:13 +02:00
Michael Niedermayer 48b3117844 avcodec/svq3: Reject dx/dy beyond 16bit 
The code does use 16bit sized arrays later so larger deltas would not work

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-03 11:57:34 +02:00
Michael Niedermayer 382b4fc9b5 avcodec/svq3: Increase offsets to prevent integer overflows 
Fixes: 1280/clusterfuzz-testcase-minimized-6102353767825408

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-03 11:57:34 +02:00
Michael Niedermayer 79aa2ff199 avutil/softfloat: use ldexp(), fixes undefined shift 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-02 22:55:44 +02:00
Michael Niedermayer 56ddb923c6 tools/target_dec_fuzzer: Use avcodec_register_all() instead of register_all() 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-02 00:55:19 +02:00
Michael Niedermayer b29feec982 avcodec/indeo2: Check remaining bits in ir2_decode_plane() 
Fixes: 1290/clusterfuzz-testcase-minimized-5815578902134784
Fixes: timeout

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-01 18:54:41 +02:00
Michael Niedermayer 2f00300b77 avcodec/vp3: Check remaining bits in unpack_dct_coeffs() 
Decreases the time spend decoding junk.

May fix: 1283/clusterfuzz-testcase-minimized-6221126759874560

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-01 18:48:39 +02:00
Michael Niedermayer b706ddbae3 doc/developer: Add terse documentation of assumed C implementation defined behavior 
Suggested-by: "Ronald S. Bultje" <rsbultje@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-01 17:59:10 +02:00