virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2026-06-19 19:03:00 +02:00
Code Issues Releases Activity
90,771 Commits 39 Branches 425 Tags
b8629654c6460a28c507f816a977914e3a6f2520
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Niedermayer ec8a5262b0 doc/APIchanges: Fix typos in hashes 
Thanks-to: Moritz Barsnick <barsnick@gmx.net> for finding the correct ones

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-16 19:24:31 +02:00
Michael Niedermayer 3c1ecb057d Bump minor versions after release/4.0 branching 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-16 12:35:12 +02:00
Michael Niedermayer 7e3a070d9a Bump minor versions for branching release/4.0 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-16 12:35:12 +02:00
Michael Niedermayer 1b7b7c6a62 doc/APIchanges: Add 4.0 cut point 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-16 12:35:12 +02:00
Michael Niedermayer e8be46dfe0 doc/APIchanges: Fill in missing stuff 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-16 12:35:12 +02:00
Michael Niedermayer 18d6ff2b42 tests/checkasm/checkasm: Provide verbose failure information on float_near_abs_eps() failures 
This will make understanding failures and adjusting EPS easier

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-14 15:54:06 +02:00
Michael Niedermayer 37d46dc21d avformat/utils: Check cur_dts in update_initial_timestamps() more 
Fixes: runtime error: signed integer overflow: 18133149658382192 - -9223090561878065151 cannot be represented in type 'long long'
Fixes: crbug 831552

Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-13 22:08:27 +02:00
Michael Niedermayer 544324827e avcodec/utils: Enforce minimum width also for VP5/6 
Fixes: out of array access
Fixes: poc_0411

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Tested-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-13 21:46:42 +02:00
Michael Niedermayer f6304af234 avcodec/truemotion2: Propagate out of bounds error from GET_TOK() 
Fixes: Timeout
Fixes: 6389/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2_fuzzer-5695918121680896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-13 21:46:37 +02:00
Michael Niedermayer c48ceff786 avformat/utils: Fix integer overflow in end time calculation in update_stream_timings() 
Fixes: crbug 829153

Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-13 21:46:16 +02:00
Michael Niedermayer 5c62a3dbda tests/fate/filter-video: Use a bitexact/lossless input sample for fate-filter-metadata-silencedetect 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-13 21:44:28 +02:00
Michael NiedermayerandJames Almer 876f9ac9a6 configure: make the C11 atomics check more robust 
C11 atomics allow direct access. This check should prevent the usage
of bogus stdatomic.h available on some systems.

Signed-off-by: James Almer <jamrial@gmail.com>
 2018-04-13 11:08:17 -03:00
Michael Niedermayer 8d381b57fd avcodec/mjpegdec: Check input buffer size. 
Fixes: Timeout
Fixes: 6381/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer-5665032743419904

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-12 23:52:59 +02:00
Michael Niedermayer 8c02cd8ca0 avcodec/h264_slice: Fix integer overflow with last_poc 
Fixes: signed integer overflow: 2147483646 - -2816 cannot be represented in type 'int'
Fixes: crbug 823145

Reported-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-12 23:52:59 +02:00
Michael Niedermayer 0a8133119c avformat/mov: Fix extradata memleak 
Fixes: crbug 822705

Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-12 23:52:59 +02:00
Michael Niedermayer 249aca8f98 avcodec/movtextdec: Check style_start/end 
Limits based on 3GPP TS 26.245 V14.0.0
Fixes: Timeout
Fixes: 6377/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MOVTEXT_fuzzer-5175929115508736

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Philip Langdale <philipl@overt.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-09 03:09:08 +02:00
Michael Niedermayer c837918f50 avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble() 
Fixes: runtime error: signed integer overflow: 2052929346 + 204817098 cannot be represented in type 'int'

This was missed in b1bef755f6
Fixes: 5275/clusterfuzz-testcase-minimized-5367635958038528

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-07 23:34:47 +02:00
Michael Niedermayer 6cd81d68c5 libavcodec/rv34: error out earlier on missing references 
Fixes visual corruption on seeking

Fixes: downloadTest_clip_24M.rmvb

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-07 19:16:37 +02:00
Michael Niedermayer 6261ef4251 avcodec/get_bits: Document skip_bits_long() 
Found-by: Kieran
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-07 19:16:37 +02:00
Michael Niedermayer 197a4e8fee avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed() 
I was not able to reproduce this, this fix is based on just the fuzzer log.
Fixes: 4959/clusterfuzz-testcase-minimized-6035350934781952

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-02 23:27:51 +02:00
Michael Niedermayer d52be5d4e9 avcodec/cscd: Error out when LZ* decompression fails 
Fixes: Timeout
Fixes: 6304/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CSCD_fuzzer-5754772461191168

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-02 23:27:51 +02:00
Michael Niedermayer 35eeff30ca avfilter/vf_signature: use av_strlcpy() 
Fixes: out of array access

Found-by: Kira <kira_cxy@foxmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-01 02:58:51 +02:00
Michael Niedermayer 47b7c68ae5 avcodec/utvideodec: Set pro flag based on fourcc 
This avoids mixing 8bit variants with pro and 10bit with non pro mode.
Fixes: out of array read
Fixes: poc_03_30.avi

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-04-01 02:58:51 +02:00
Michael Niedermayer 8247e0304e configure: fix build 
regression since 8f1382f80e
 2018-04-01 02:58:42 +02:00
Michael Niedermayer ea15915b2d avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame() 
Fixes: 2018_03_23_poc.wav
Found-by: GwanYeong Kim <gy741.kim@gmail.com>

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-29 22:41:36 +02:00
Michael Niedermayer 5c75438b89 avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables 
Found-by: James Almer <jamrial@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-29 01:11:45 +02:00
Michael Niedermayer b3e9f3f5f5 doc/examples/hw_decode: Remove logically dead code in decode_write() 
Fixes CID1415951

Reviewed-by: Jun Zhao <mypopydev@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-27 23:01:44 +02:00
Michael Niedermayer 49a0b3f6bc doc/examples/hw_decode: Remove useless NULL check 
Reviewed-by: Jun Zhao <mypopydev@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-27 23:01:44 +02:00
Michael Niedermayer db77230894 avcodec/mpeg4videodec: Use more specific error codes 
Forward error codes where possible.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-26 02:17:13 +02:00
Michael Niedermayer eb60b9d3aa avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry() 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-26 02:16:48 +02:00
Michael Niedermayer e529fe7633 avcodec/get_bits: Make sure the input bitstream with padding can be addressed 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-26 02:12:15 +02:00
Michael Niedermayer 9e67447a4f avformat/mov: Check STSC and remove invalid entries 
Fixes assertion failure
Fixes: crbug 822547, crbug 822666 and crbug 823009

Affects: aark15sd_9A62E2FA.mp4

Found-by: ClusterFuzz
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-20 22:59:40 +01:00
Michael Niedermayer 939440ad1a avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it 
Fixes: Timeout
Fixes: 6297/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_NUV_fuzzer-4882404863901696

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-12 01:32:42 +01:00
Michael Niedermayer 8ee3265dbe avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg 
Fixes: Timeout
Fixes: 6297/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_NUV_fuzzer-4882404863901696

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-12 01:32:42 +01:00
Michael Niedermayer 64c9ce0abc avcodec/wmalosslessdec: Reset num_saved_bits on error path 
Fixes: NULL pointer dereference
Fixes: poc-201803.wav
Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-12 01:32:42 +01:00
Michael Niedermayer 2f37082827 avformat/mov: Fix integer overflows related to sample_duration 
Fixes: runtime error: signed integer overflow: -9166684017437101870 + -2495066639299164439 cannot be represented in type

Fixes: Chromium bug 791349

Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-12 01:32:42 +01:00
Michael Niedermayer a6cba06205 avformat/img2dec: fix infinite loop 
Fixes: kira-poc

Found-by: Kira <kira_cxy@foxmail.com>
Change suggested by Kira
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer f655ddfb47 avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE 
Fixes: potential signed integer overflow

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer 3e7c847aaf avformat/oggparseogm: Check lb against psize 
No testcase, this was found during code review

Found-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer 010b7b30b7 avformat/oggparseogm: Fix undefined shift in ogm_packet() 
Fixes: shift exponent 48 is too large for 32-bit type 'int'
Fixes: Chromium bug 786793
Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer 06e092e781 avformat/avidec: Fix integer overflow in cum_len check 
Fixes: signed integer overflow: 3775922176 * 4278190080 cannot be represented in type 'long'
Fixes: Chromium bug 791237

Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer 02ecda4aba avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE 
Fixes: Chromium bug 795653
Fixes: signed integer overflow: 9223372036854775807 + 1 cannot be represented in type 'long'
Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-10 02:44:45 +01:00
Michael Niedermayer 1b1362e408 avformat/utils: Fix integer overflow of fps_first/last_dts 
Fixes: runtime error: signed integer overflow: 7738135736989908991 - -7898362169240453118 cannot be represented in type 'long'
Fixes: Chromium bug 796778
Reported-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer da069e9c68 avformat/oggdec: Fix metadata memleak on multiple headers 
Fixes: Chromium bug 800123
Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer 3934aa495d libavformat/oggparsevorbis: Fix memleak on multiple headers 
Fixes: Chromium bug 800123
Reported-by: Matt Wolenetz <wolenetz@google.com>
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer 367929bed9 avformat/mov: Fix integer overflow in mov_get_stsc_samples() 
Fixes: runtime error: signed integer overflow: 5 * -2147483647 cannot be represented in type 'int'
Fixes: Chromium bug 817338
Reviewed-by: Matt Wolenetz <wolenetz@google.com>
Reported-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer c87bf5b6d0 avfilter/vf_*_vaapi: Add missing AV_OPT_FLAG_FILTERING_PARAM 
Reviewed-by: Jun Zhao <mypopydev@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer 5735a390a6 avformat/internal: Document the freeing behavior of ff_alloc_extradata() 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-03-07 20:37:33 +01:00
Michael Niedermayer f9cb17f988 avcodec/msmpeg4dec: Check for input end in msmpeg4v34_decode_mb() 
Fixes: Timeout
Fixes: 6276/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMV1_fuzzer-5881196690014208

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 19:37:06 +01:00
Michael Niedermayer 8b5c29b6c2 avcodec/truemotion2rt: Check input buffer size 
Fixes: Timeout
Fixes: 6250/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2RT_fuzzer-5479814011027456

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 19:37:06 +01:00
Michael Niedermayer 3981fb8d2a avcodec/g2meet: Check tile dimensions with av_image_check_size2() 
Fixes: OOM
Fixes: 6216/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_G2M_fuzzer-4983807968018432

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 19:37:06 +01:00
Michael Niedermayer 49062a9017 avcodec/exr: fix invalid shift in unpack_14() 
Fixes: 6154/clusterfuzz-testcase-minimized-5762231061970944
Fixes: runtime error: shift exponent 63 is too large for 32-bit type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 19:37:06 +01:00
Michael Niedermayer 090c0abff9 avcodec/bintext: sanity check dimensions 
Fixes: Timeout
Fixes: 6277/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_XBIN_fuzzer-6047202288861184

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 19:37:06 +01:00
Michael Niedermayer 7414d0bda7 avcodec/utvideodec: Check subsample factors 
Fixes: Out of array read
Fixes: heap_poc

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 12:23:23 +01:00
Michael Niedermayer bbed942dfd avcodec/rscc: Skip empty frames (nb_tiles == 0) 
Fixes: Timeout
Fixes: 6266/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RSCC_fuzzer-5692431816196096

Its not known if nb_tiles is allowed so it is not treated as an error

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-27 12:23:23 +01:00
Michael Niedermayer 0293663483 avcodec/smc: Check input packet size 
Fixes: Timeout
Fixes: 6261/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SMC_fuzzer-5811309653262336

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-24 04:50:55 +01:00
Michael Niedermayer ae2eb04648 avcodec/cavsdec: Check alpha/beta offset 
Fixes: Integer overflow
Fixes: 6183/clusterfuzz-testcase-minimized-6269224436629504

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-22 00:29:27 +01:00
Michael Niedermayer 47e65ad63b avcodec/diracdec: Fix integer overflow in mv computation 
Fixes: signed integer overflow: -2072 + -2147483646 cannot be represented in type 'int'
Fixes: 6097/clusterfuzz-testcase-minimized-5034145253163008

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer 85c85fffff avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table() 
Fixes: 6037/clusterfuzz-testcase-minimized-5030249784934400
Fixes: signed integer overflow: 256 * 16992036 cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer 33fe17bdc8 avcodec/aacdec_templat: Fix integer overflow in apply_ltp() 
Fixes: signed integer overflow: -1625276744 + -1041893960 cannot be represented in type 'int'
Fixes: 5948/clusterfuzz-testcase-minimized-5791479856365568

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer 793347a545 avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53() 
Fixes: 5918/clusterfuzz-testcase-minimized-5120505435652096

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer cbcbefdc3b avcodec/diracdec: Use int64 in global mv to prevent overflow 
Fixes: runtime error: signed integer overflow: 361 * -6295541 cannot be represented in type 'int'
Fixes: 5911/clusterfuzz-testcase-minimized-6450382197751808

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer 3748746a4d avcodec/dxtory: Remove code that corrupts dimensions 
Fixes: Timeout
Fixes: 5796/clusterfuzz-testcase-minimized-5206729085157376

Does someone have a valid sample that triggers this path ?

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-20 15:27:51 +01:00
Michael Niedermayer 647fa49495 avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i() 
Fixes: 5894/clusterfuzz-testcase-minimized-5315325420634112
Fixes: runtime error: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-18 23:27:03 +01:00
Michael Niedermayer f82dd4c09b avcodec/hevcdec: Check luma/chroma_log2_weight_denom 
Fixes: signed integer overflow: 3 + 2147483647 cannot be represented in type 'int'
Fixes: 5888/clusterfuzz-testcase-minimized-5634701067812864

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-18 23:27:02 +01:00
Michael Niedermayer 1be49cee34 avcodec/h264: Increase field_poc to 64bit in ff_h264_init_poc() to detect overflows 
Fixes: Integer overflow
Fixes: 5746/clusterfuzz-testcase-minimized-6270097623613440

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-17 20:31:39 +01:00
Michael Niedermayer 01370b31ac avcodec/jpeg2000dec: Use av_image_check_size2() 
Fixes: OOM
Fixes: 5733/clusterfuzz-testcase-minimized-4906757966004224

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-17 20:31:39 +01:00
Michael Niedermayer de675648ce avcodec/vp8: Check for bitstream end before vp7_fade_frame() 
Fixes: Timeout
Fixes: 5653/clusterfuzz-testcase-5497680018014208

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-17 20:31:39 +01:00
Michael Niedermayer dd8351b118 avcodec/exr: Check remaining bits in last get code loop 
Fixes: runtime error: shift exponent -7 is negative
Fixes: 3902/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_fuzzer-6081926122176512

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-17 15:56:59 +01:00
Michael Niedermayer ab6f571ef7 avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c() 
Fixes: 5567/clusterfuzz-testcase-minimized-5769966247739392
Fixes: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-17 15:56:55 +01:00
Michael Niedermayer 75027066d8 avdevice/decklink_dec: Fix ;; 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-15 13:48:52 +01:00
Michael Niedermayer 173939259a avfilter/avf_avectorscope: Fix ;; 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-15 13:48:25 +01:00
Michael Niedermayer f26a63c4ee avcodec/h264_cabac: Tighten allowed coeff_abs range 
Fixes: integer overflows
Reported-by: "Xiaohan Wang (王消寒)" <xhwang@chromium.org>

Based on limits in "8.5 Transform coefficient decoding process and picture
construction process prior to deblocking  filter process"

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-15 04:36:00 +01:00
Michael NiedermayerandSean McGovern 5b6213ef6b avcodec/vc1dec: fix mby_start for interlaced content 
Bug-Id: 1100
Bug-Id: ffmpeg/Ticket2531
Cc: libav-stable@libav.org
 2018-02-11 23:48:54 -05:00
Michael Niedermayer f2318aee8c avcodec/vp3: Error out on invalid num_coeffs in unpack_vlcs() 
This fixes a hypothetical integer overflow

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 17:20:17 +01:00
Michael Niedermayer 63a4bdbf3b avcodec/mpeg4videodec: Ignore multiple VOL headers 
Fixes: Ticket7005

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 12:06:04 +01:00
Michael Niedermayer 570023eab3 avcodec/vp3: Check eob_run 
Fixes: out of array access
Fixes: 5919/clusterfuzz-testcase-minimized-5859311382167552
Fixes: special case for theora (untested due to lack of sample)

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 03:04:48 +01:00
Michael Niedermayer 76cc0f0f67 avcodec/utvideodec: Add several out of array read related checks 
Fixes: OV_decode_plane.avi

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 03:04:48 +01:00
Michael Niedermayer 66acb63028 avcodec/pafvideo: Check allocated frame size 
Fixes: OOM
Fixes: 5549/clusterfuzz-testcase-minimized-5390553567985664

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 02:49:15 +01:00
Michael Niedermayer 0fb33a8289 avcodec/scpr: Fix reading a pixel before the first 
Fixes: 5540/clusterfuzz-testcase-minimized-6122458273808384

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 02:49:15 +01:00
Michael Niedermayer 08c220d26c avcodec/huffyuvdec: Check input buffer size 
Fixes: Timeout
Fixes: 5487/clusterfuzz-testcase-4696837035393024

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-09 03:01:30 +01:00
Michael Niedermayer ddd851f7cb avcodec: Document that init_static_data() is not intended for time consuming operations. 
Reviewed-by: Muhammad Faiz <mfcc64@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-08 04:42:40 +01:00
Michael Niedermayer 8f6a71f7f1 avformat/bintext: Implement bin_probe() 
Fixes misdetection of sbQ9.bin

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-06 23:07:10 +01:00
Michael Niedermayer 118e1b0b33 avcodec/utvideodec: Fix bytes left check in decode_frame() 
Fixes: out of array read
Fixes: poc-2017.avi

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-05 02:54:02 +01:00
Michael Niedermayer 8e50bd61e4 avcodec/wavpack: Fix integer overflow in FFABS 
Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
Fixes: 5396/clusterfuzz-testcase-minimized-6558555529281536

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-03 21:37:19 +01:00
Michael Niedermayer b1bef755f6 avcodec/aacsbr_fixed: Fix overflows in rounding in sbr_hf_assemble() 
Fixes: runtime error: signed integer overflow: 2052929346 + 204817098 cannot be represented in type 'int'
Fixes: 5275/clusterfuzz-testcase-minimized-5367635958038528

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-02 00:18:24 +01:00
Michael Niedermayer 0a2560a977 avcodec/exr: Fix memleaks in decode_header() 
Fixes: 4793/clusterfuzz-testcase-minimized-5707366629638144

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-02 00:18:24 +01:00
Michael Niedermayer fe1e6c06d0 avcodec/dirac_dwt: Fix several integer overflows 
Fixes: runtime error: signed integer overflow: -2146071175 + -268479557 cannot be represented in type 'int'
Fixes: 5237/clusterfuzz-testcase-minimized-4569895275593728

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 22:08:32 +01:00
Michael Niedermayer 2ff9f17851 avcodec/indeo5: Do not leave frame_type set to an invalid value 
Fixes: null pointer dereference
Fixes: 5264/clusterfuzz-testcase-minimized-4621956621008896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 22:08:32 +01:00
Michael Niedermayer 4a75a75c62 avcodec/hevc_ps: Check log2_sao_offset_scale_* 
Fixes: 4868/clusterfuzz-testcase-minimized-6236542906400768
Fixes: runtime error: shift exponent 126 is too large for 32-bit type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 22:08:32 +01:00
Michael Niedermayer d4967c04e0 avcodec/mpeg4videodec: Avoid possibly aliasing violating casts 
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-29 04:11:28 +01:00
Michael Niedermayer 4a94ff4ccd avcodec/get_bits: Document the return code of get_vlc2() 
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-29 04:11:28 +01:00
Michael Niedermayer 05f4703a16 avcodec/mpeg4videodec: Check mb_num also against 0 
The spec implies that 0 is invalid in addition to the existing checks

Found-by: <kierank>
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-29 04:11:28 +01:00
Michael Niedermayer 293f24b42c fate: test the transpose filter more fully 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:10:52 +01:00
Michael Niedermayer 3f621455d6 avfilter/vf_transpose: Fix regression with packed pixel formats 
Regression since: c6939f65a1
Found-by: Paul B Mahol <onemda@gmail.com>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:10:52 +01:00
Michael Niedermayer a026a3efae avcodec/hevc_cabac: Check prefix so as to avoid invalid shifts in coeff_abs_level_remaining_decode() 
I suspect that this can be limited tighter, but i failed to find anything
in the spec that would confirm that.

Fixes: 4833/clusterfuzz-testcase-minimized-5302840101699584
Fixes: runtime error: left shift of 134217730 by 4 places cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-27 04:29:30 +01:00
Michael Niedermayer 1bfc1aa004 avcodec/mjpegdec: Fix integer overflow in DC dequantization 
Fixes: runtime error: signed integer overflow: -65535 * 65312 cannot be represented in type 'int'
Fixes: 4900/clusterfuzz-testcase-minimized-5769019744321536

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-27 04:29:30 +01:00
Michael Niedermayer c6939f65a1 avfilter/vf_transpose: Fix used plane count. 
Fixes out of array access
Fixes: poc.mp4

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-27 04:29:30 +01:00
Michael Niedermayer 6e1a167c55 avcodec/dxtory: Fix bits left checks 
Fixes: Timeout
Fixes: 4863/clusterfuzz-testcase-6347354178322432

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-23 21:48:31 +01:00
Michael Niedermayer 94d4237a7a avcodec/hevc_cabac: Move prefix check in coeff_abs_level_remaining_decode() down 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-23 21:48:31 +01:00