Michael Niedermayer
bf8ab72ae9
avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()
...
Fixes: runtime error: signed integer overflow: 9 * 335544320 cannot be represented in type 'int'
Fixes: 2739/clusterfuzz-testcase-minimized-6737297955356672
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 16:28:22 +02:00
Michael Niedermayer
c0220c768c
avcodec/diracdec: Fix integer overflow in divide3()
...
Fixes: runtime error: signed integer overflow: -1073746548 * 21845 cannot be represented in type 'int'
Fixes: 2729/clusterfuzz-testcase-minimized-5902915464069120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 04:05:53 +02:00
Michael Niedermayer
2c630d159f
avcodec/takdec: Fix integer overflow in decode_subframe()
...
Fixes: runtime error: signed integer overflow: -536870912 - 1972191120 cannot be represented in type 'int'
Fixes: 2711/clusterfuzz-testcase-minimized-4975142398590976
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 04:05:53 +02:00
Michael Niedermayer
ffcc82219c
avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2
...
Fixes: out of array accesses
Found-by: JunDong Xie of Ant-financial Light-Year Security Lab
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 04:05:53 +02:00
Michael Niedermayer
08c073434e
avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2
...
Fixes: out of array accesses
Fixes: crash-9238fa9e8d4fde3beda1f279626f53812cb001cb-SEGV
Found-by: JunDong Xie of Ant-financial Light-Year Security Lab
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 03:54:39 +02:00
Kaustubh Raste
36ea41de37
libavcodec/mips: Improve avc dequant-idct luma dc msa function
...
Signed-off-by: Kaustubh Raste <kaustubh.raste@imgtec.com >
Reviewed-by: Manojkumar Bhosale <Manojkumar.Bhosale@imgtec.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 03:47:50 +02:00
Michael Niedermayer
8e275a74b0
avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH()
...
Fixes: runtime error: signed integer overflow: 1073741823 * 4 cannot be represented in type 'int'
Fixes: 2729/clusterfuzz-testcase-minimized-5902915464069120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-28 03:35:22 +02:00
Michael Niedermayer
aeddb3607b
avcodec/pixlet: Simplify nbits computation
...
Fixes multiple integer overflows
Fixes: runtime error: signed integer overflow: 1 + 2147483647 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-28 03:35:22 +02:00
Wan-Teh Chang
58fbcf885d
pthread_frame: revert 2e664b9c1e
.
...
The patch does not fix the tsan warning it was intended to fix.
Reverting the patch moves the av_log() back to the outside of the lock.
Signed-off-by: Wan-Teh Chang <wtc@google.com >
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com >
2017-07-27 17:14:17 -04:00
Wan-Teh Chang
8c3b329da2
avcodec/h264_slice: don't sync default_ref[] between threads.
...
default_ref[] is unconditionally initialized in h264_initialise_ref_list()
(called from ff_h264_build_ref_list(), called from h264_slice_init()).
This fixes the following tsan warning when running fate-h264:
WARNING: ThreadSanitizer: data race (pid=31070)
Write of size 8 at 0x7bbc000082a8 by thread T1 (mutexes: write M1628):
#0 memcpy /work/release-test/final/llvm.src/projects/compiler-rt/lib/tsan/../sanitizer_common/sanitizer_common_interceptors.inc:655:5
(ffmpeg+0x10de9d)
#1 h264_initialise_ref_list ffmpeg/libavcodec/h264_refs.c:214:29 (ffmpeg+0x1186b3f)
#2 ff_h264_build_ref_list ffmpeg/libavcodec/h264_refs.c:306 (ffmpeg+0x1186b3f)
#3 h264_slice_init ffmpeg/libavcodec/h264_slice.c:1900:11 (ffmpeg+0x1191149)
[..]
Previous read of size 8 at 0x7bbc000082a8 by main thread (mutexes:
write M1630):
#0 memcpy /work/release-test/final/llvm.src/projects/compiler-rt/lib/tsan/../sanitizer_common/sanitizer_common_interceptors.inc:655:5
(ffmpeg+0x10de9d)
#1 ff_h264_update_thread_context ffmpeg/libavcodec/h264_slice.c:411:5 (ffmpeg+0x118b7dc)
Signed-off-by: Wan-Teh Chang <wtc@google.com >
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com >
2017-07-27 17:14:17 -04:00
James Almer
9f449227a3
doc/APIChanges: add missing entry for ICC Profile side data type.
2017-07-27 14:21:41 -03:00
Paul B Mahol
9835ee60da
avcodec/dnxhdenc: enable frame threading
...
Signed-off-by: Paul B Mahol <onemda@gmail.com >
2017-07-27 15:23:45 +02:00
Tobias Rapp
60008c0fe9
fate: update pixfmt_best test to check for endianness
...
Signed-off-by: Tobias Rapp <t.rapp@noa-archive.com >
2017-07-27 08:53:37 +02:00
Michael Niedermayer
296debd213
avcodec/dnxhddec: Move mb height check out of non hr branch
...
Fixes: out of array access
Fixes: poc.dnxhd
Found-by: Bingchang, Liu@VARAS of IIE
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-27 03:07:12 +02:00
Rostislav Pehlivanov
133dafe24f
pngdec: fix potential memory leak
...
Fixes CID1412026.
Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com >
2017-07-26 23:54:14 +01:00
Michael Niedermayer
5d0b69f3b7
avcodec/jpeg2000dec: Fix h/vden typo
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-27 00:01:27 +02:00
foo86
6029b8a6bb
avformat/s337m: fix potentially undefined pointer arithmetic
...
Use integer position instead of pointer for loop variable. Also only
skip header fields after header has been fully validated.
2017-07-26 21:23:07 +03:00
foo86
5e715b583d
avcodec/dolby_e: fix potentially undefined pointer arithmetic
...
Avoid undefined behavior in skip_input() by checking that enough data is
available before incrementing input pointer.
Check return values of parse_key() and skip_input() and exit early with
error if there is not enough data.
2017-07-26 21:23:07 +03:00
foo86
0689cc2475
avcodec/dolby_e: add AV_CODEC_CAP_CHANNEL_CONF capability
2017-07-26 21:23:07 +03:00
foo86
56277f6d19
avcodec/dolby_e: add 'f' suffixes to floating point literals
2017-07-26 21:23:07 +03:00
Clément Bœsch
2ba20d799a
lavc/htmlsubtitles: simplify 1-char tags case insensitive test
2017-07-26 19:56:28 +02:00
Michael Niedermayer
1b00600319
avcodec/jpeg2000dec: Fix division by zero in jp2_find_codestream()
...
Fixes: 2707/clusterfuzz-testcase-minimized-5179636394754048
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 17:06:29 +02:00
Michael Niedermayer
74c1c22d7f
avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2
...
Fixes: runtime error: signed integer overflow: -2147483647 - 2 cannot be represented in type 'int'
Fixes: 2702/clusterfuzz-testcase-minimized-4511932591636480
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 17:06:29 +02:00
James Almer
c220fe008c
avcodec/webp: add support for ICCP chunks
...
Export the raw data as ICC Profile frame side data.
Reviwed-by: Rostislav Pehlivanov <atomnuker@gmail.com >
Signed-off-by: James Almer <jamrial@gmail.com >
2017-07-26 11:31:17 -03:00
James Almer
5e4e9afaa1
ffprobe: add support for ICC Profile frame side data
...
Print the name metadata entry and the buffer size.
Reviwed-by: Rostislav Pehlivanov <atomnuker@gmail.com >
Signed-off-by: James Almer <jamrial@gmail.com >
2017-07-26 11:31:17 -03:00
James Almer
4cebf0fc45
avutil/frame: add ICC Profile to av_frame_side_data_name
...
Reviwed-by: Rostislav Pehlivanov <atomnuker@gmail.com >
Signed-off-by: James Almer <jamrial@gmail.com >
2017-07-26 11:31:17 -03:00
Muhammad Faiz
c8305079da
avcodec/rdft: reorder calculation
...
old:
165188 decicycles in rdft, 65536 runs, 0 skips
165865 decicycles in irdft, 65536 runs, 0 skips
new:
142487 decicycles in rdft, 65536 runs, 0 skips
141498 decicycles in irdft, 65536 runs, 0 skips
Signed-off-by: Muhammad Faiz <mfcc64@gmail.com >
2017-07-26 06:13:05 +07:00
Michael Niedermayer
7140761481
avformat/oggparsecelt: Do not re-allocate os->private
...
Fixes: double free
Fixes: clusterfuzz-testcase-minimized-5080550145785856
Found-by: ClusterFuzz
Reviewed-by: Nicolas George <george@nsup.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-25 22:04:34 +02:00
Kaustubh Raste
a776cb2074
libavcodec/mips: Optimize avc idct 4x4 for msa
...
Removed memset call and improved performance.
Signed-off-by: Kaustubh Raste <kaustubh.raste@imgtec.com >
Reviewed-by: Manojkumar Bhosale <Manojkumar.Bhosale@imgtec.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-25 22:04:34 +02:00
Rostislav Pehlivanov
0563a5d175
mdct15: simplify prereindexing and forward transform postrotation
...
Equivalent.
Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com >
2017-07-25 20:15:17 +01:00
Rostislav Pehlivanov
2e08bbb282
pngdec: decode and expose iCCP chunks as side data
...
Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com >
2017-07-25 20:12:44 +01:00
Rostislav Pehlivanov
24de4fddca
lavu/frame: add new side data type for ICC profiles
...
Many image formats support embedding of ICC profiles directly in
their bitstreams. Add a new side data type to allow exposing them to
API users.
Signed-off-by: Rostislav Pehlivanov <atomnuker@gmail.com >
2017-07-25 20:11:06 +01:00
Nicolas George
bbc7cfbf1e
lavfi/testsrc2: fix completely transparent alpha.
2017-07-25 09:27:35 +02:00
James Almer
4a654be3fb
avcodec/mpegvideo_enc: fix mixed declarations and code warning
2017-07-25 00:58:24 -03:00
Steven Liu
805ce25b1d
avformat/hlsenc: improve hls encrypt get key file operation
...
get key file only once time is ok, no need more times.
Ticket-id: #6545
Found-by: JohnPi
Signed-off-by: Steven Liu <lq@onvideo.cn >
2017-07-25 10:31:29 +08:00
Michael Niedermayer
03a9e6ff30
avcodec/ylc: Fix shift overflow
...
Fixes: runtime error: shift exponent 32 is too large for 32-bit type 'unsigned int'
Fixes: 2698/clusterfuzz-testcase-minimized-4713541443518464
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 17:52:42 +02:00
Michael Niedermayer
0764fe1d09
avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()
...
Fixes: avcodec/aacps.c:511:40: runtime error: signed integer overflow: 1509077651 + 758068176 cannot be represented in type 'int'
Fixes: 2678/clusterfuzz-testcase-minimized-4702787684270080
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 17:52:42 +02:00
Clément Bœsch
850a45aef1
lavf/movenc: support GPMF track (gpmd) remuxing
...
See https://github.com/gopro/gpmf-parser for more information on the
data stream itself.
2017-07-24 14:43:40 +02:00
Steven Liu
f21457f8e0
avformat/hlsenc: fix hls fmp4 extention name bug
...
ticket-id: #6541
when use hls fmp4 muxer, the extention name is not .m4s, this
code can fix it.
Found-by: JohnPi
Signed-off-by: Steven Liu <lq@onvideo.cn >
2017-07-24 19:55:19 +08:00
Michael Niedermayer
aff93e1929
avcodec/mpegvideo_enc: Use intra/inter scantable matching mb type in quantization
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 02:42:33 +02:00
Michael Niedermayer
2dfb8c4178
avcodec/aacdec_fixed: fix: left shift of negative value -1
...
Fixes: 2699/clusterfuzz-testcase-minimized-5631303862976512
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 02:42:33 +02:00
Michael Niedermayer
69e7daf6ce
avcodec/dirac_vlc: Fix undefined shift
...
Fixes: runtime error: shift exponent 64 is too large for 64-bit type 'residual' (aka 'unsigned long')
Fixes: 2674/clusterfuzz-testcase-minimized-4999700518273024
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 02:42:33 +02:00
Muhammad Faiz
7e9f550003
avfilter/w3fdif: do not write to line before start line
...
That line has been written by previous job.
Fix tsan warning.
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Muhammad Faiz <mfcc64@gmail.com >
2017-07-23 20:32:42 +07:00
Brice Waegeneire
6a6eec485d
doc/filters: typo in frei0r
...
Signed-off-by: Brice Waegeneire <brice.wge@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-23 14:58:29 +02:00
Vodyannikov Aleksandr
47c9365724
avcodec/cfhd: Fix decoding regression due to height check
...
Fixes: Ticket6546
Regression since: 54aaadf648
Reviewed-by: Muhammad Faiz <mfcc64@gmail.com >
Reviewed-by: Kieran Kunhya <kierank@obe.tv >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-23 14:58:29 +02:00
foo86
dd4b7badb4
avcodec/dcaadpcm: fix use of uninitialized variable
...
Fixes CID 1409924.
2017-07-23 00:28:18 +03:00
foo86
34fb84a97d
avcodec/dcaadpcm: check for av_malloc() failure
...
Fixes CID 1409915.
2017-07-23 00:28:18 +03:00
Mark Thompson
f2c11b9337
pixdesc: Reindent after previous commit
2017-07-22 21:51:41 +01:00
Mark Thompson
f48efb14f9
pixdesc: Explicitly handle invalid arguments to av_find_best_pix_fmt_of_2()
2017-07-22 21:51:26 +01:00
Vittorio Giovara
d24a82d2e2
ffprobe: Print color properties from show_frames
...
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com >
2017-07-21 20:19:07 +02:00