1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2024-12-28 20:53:54 +02:00
FFmpeg/libavformat
Michael Niedermayer 2437e69aec avformat/matroskadec: Check desc_bytes
Fixes: Division by 0
Fixes: 44035/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fuzzer-4826721386364928

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 5038933977)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2022-02-16 20:10:30 +01:00
..
4xm.c avformat/4xm: Check for duplicate track ids 2022-01-13 22:50:52 +01:00
a64.c
aacdec.c
aadec.c avformat/aadec: Check toc_size to contain the minimum to demuxer uses 2020-07-05 12:43:08 +02:00
ac3dec.c
act.c
adp.c
adtsenc.c avformat/adtsenc: return value check for init_get_bits in adts_decode_extradata 2021-10-17 21:34:53 +02:00
adxdec.c
aea.c
afc.c
aiff.h
aiffdec.c avformat/aiffdec: Check for size overflow in header parsing 2021-10-17 21:34:53 +02:00
aiffenc.c lavf/aiffenc: Clarify an error message. 2015-09-05 10:53:55 +02:00
allformats.c avformat/allformats: Making av_register_all() thread-safe. 2016-08-15 18:54:34 +02:00
amr.c libavformat/amr.c: Check return value from avio_read() 2020-04-23 21:29:01 +02:00
anm.c
apc.c
ape.c
apetag.c
apetag.h
apngdec.c avformat/apng: fix setting frame delay when max_fps is set to no limit 2017-03-21 20:21:12 -03:00
apngenc.c
aqtitledec.c
asf.c
asf.h
asfcrypt.c
asfcrypt.h
asfdec_f.c avformat/asfdec_f: Check for negative ext_len 2021-10-17 21:34:53 +02:00
asfdec_o.c avformat/asfdec_o: Check for EOF in asf_read_marker() 2021-10-17 21:34:53 +02:00
asfenc.c avformat/asfenc: Check pts 2016-01-15 12:30:40 +01:00
assdec.c
assenc.c
ast.c
ast.h
astdec.c
astenc.c
async.c avformat/async: replace strerror with av_err2str 2015-09-06 11:56:54 +02:00
au.c
audiointerleave.c
audiointerleave.h
avc.c
avc.h
avformat.h avformat: Add max_streams option 2017-02-08 21:17:50 +01:00
avformatres.rc
avi.h
avidec.c oavformat/avidec: Check offset in odml 2021-10-17 21:34:53 +02:00
avienc.c
avio_internal.h
avio.c avformat/avio: Limit url option parsing to the documented cases 2016-01-28 15:53:54 +01:00
avio.h
aviobuf.c avformat/aviobuf: Fix signed integer overflow in avio_seek() 2017-08-24 12:08:07 +02:00
avisynth.c
avlanguage.c
avlanguage.h
avr.c
avs.c avformat/avs: Use 64bit for the avio_tell() output 2021-10-17 21:34:53 +02:00
bethsoftvid.c avformat/bethsoftvid: Check image dimensions before use 2021-10-17 21:34:53 +02:00
bfi.c avformat/bfi: check nframes 2021-10-17 21:34:53 +02:00
bink.c
bintext.c avformat/bintext: Check width in idf_read_header() 2021-10-17 21:34:53 +02:00
bit.c
bluray.c
bmv.c
boadec.c
brstm.c brstm: fix missing closing brace 2016-01-27 23:45:44 +01:00
c93.c
cache.c avformat/cache: Fix memleak of tree entries 2016-04-27 04:40:11 +02:00
caf.c
caf.h
cafdec.c avformat/cafdec: Do not build an index if all packets are the same 2021-10-17 21:34:53 +02:00
cafenc.c
cavsvideodec.c
cdg.c avformat/cdg: Fix integer overflow in duration computation 2021-10-17 21:34:53 +02:00
cdxl.c avformat/cdxl: Fix integer overflow in intermediate 2019-12-06 20:30:57 +01:00
cinedec.c avformat/cinedec: Fix index_entries size check 2021-10-17 21:34:53 +02:00
concat.c avformat/concat: Check protocol prefix 2016-01-28 15:53:54 +01:00
concatdec.c avformat/concatdec: use av_strstart() 2021-10-17 21:34:53 +02:00
crcenc.c
crypto.c
cutils.c
dashenc.c
data_uri.c
dauddec.c
daudenc.c
dfa.c
diracdec.c
dnxhddec.c
dsfdec.c
dsicin.c avformat/dsicin: Check packet size for overflow 2021-10-17 21:34:53 +02:00
dss.c
dtsdec.c
dtshddec.c
dump.c avformat/dump: Fix integer overflow in av_dump_format() 2015-12-06 02:51:27 +01:00
dv.c
dv.h
dvbsub.c
dvenc.c
dxa.c avformat/dxa: Check fps to be within the supported range more precissely 2021-10-17 21:34:53 +02:00
eacdata.c
electronicarts.c avformat/electronicarts: Clear partial_packet on error 2021-10-17 21:34:53 +02:00
epafdec.c
ffm.h
ffmdec.c avformat/ffmdec: Check media type for chunks 2016-12-03 17:46:37 +01:00
ffmenc.c
ffmeta.h
ffmetadec.c
ffmetaenc.c
file_open.c
file.c avformat/file: Fix copy and paste error 2015-09-03 12:42:40 +02:00
filmstripdec.c filmstripdec: correctly check image dimensions 2016-11-27 00:46:36 +01:00
filmstripenc.c
flac_picture.c
flac_picture.h
flacdec.c avformat/flacdec: Check avio_read result when reading flac block header. 2017-02-08 21:17:51 +01:00
flacenc_header.c
flacenc.c
flacenc.h
flic.c
flv.h
flvdec.c avformat/flvdec: timestamps cannot use the full int64 range 2022-01-13 23:10:59 +01:00
flvenc.c avformat/flvenc: Check audio packet size 2018-11-02 19:32:43 +01:00
format.c avformat/format: Fix registering a format more than once and related races 2016-08-15 20:25:13 +02:00
framecrcenc.c
framehash.c
frmdec.c
ftp.c avformat/ftp: Check for av_strtok() failure 2021-10-17 21:34:53 +02:00
g722.c
g723_1.c
g729dec.c
gif.c
gifdec.c
golomb_tab.c
gopher.c
gsmdec.c
gxf.c avformat/gxf: Check pkt_len 2021-10-17 21:34:53 +02:00
gxf.h
gxfenc.c
h261dec.c
h263dec.c
h264dec.c
hdsenc.c
hevc.c avformat/hvcc: zero initialize the nal buffers past the last written byte 2018-02-24 00:36:57 -03:00
hevc.h
hevcdec.c
hls.c avformat/hls: Pass a copy of the URL for probing 2020-07-05 13:01:36 +02:00
hlsenc.c avformat/hlsenc: Check the return code of avformat_write_header() 2015-12-13 02:59:32 +01:00
hlsproto.c
hnm.c
http.c avformat/http: Fix Out-of-Bounds access in process_line() 2019-12-02 19:41:47 +01:00
http.h
httpauth.c avformat/httpauth: Add space after commas in HTTP/RTSP auth header 2015-10-08 13:15:42 +02:00
httpauth.h
icecast.c
icodec.c avformat/icodec: Check for zero streams and stream creation failure 2021-10-17 21:34:53 +02:00
icoenc.c
id3v1.c
id3v1.h
id3v2.c avformat/id3v2: Check end for overflow in id3v2_parse() 2021-10-17 21:34:53 +02:00
id3v2.h
id3v2enc.c
idcin.c
idroqdec.c avformat/idroqdec: Check chunk_size for being too large 2016-12-01 23:50:40 +01:00
idroqenc.c
iff.c avformat/iff: Check size before skip 2021-10-17 21:34:53 +02:00
ilbc.c
img2_alias_pix.c
img2_brender_pix.c
img2.c
img2.h avformat/img2dec: do not interpret the filename by default if a IO context has been opened 2016-01-28 15:53:54 +01:00
img2dec.c avformat/img2dec: Use AVOpenCallback 2016-01-28 15:53:54 +01:00
img2enc.c
ingenientdec.c
internal.h
ipmovie.c avformat/ipmovie: put video decoding_map_size into packet and use it in decoder 2016-01-27 23:28:49 +01:00
ircam.c
ircam.h
ircamdec.c
ircamenc.c
isom.c
isom.h avformat/mov.c: require tfhd to begin parsing trun 2019-12-02 19:41:47 +01:00
iss.c
iv8.c
ivfdec.c
ivfenc.c avformat/ivfenc: fix division by zero 2016-01-15 12:30:40 +01:00
jacosubdec.c avformat/jacosubdec: Check for min in t overflow in get_shift() 2021-10-17 21:34:53 +02:00
jacosubenc.c
jvdec.c jvdec: avoid unsigned overflow in comparison 2015-11-07 14:10:41 +01:00
latmenc.c avformat/latmenc: Add assert to avoid coverity warning 2015-09-03 11:28:29 +02:00
libavformat.v
libgme.c
libmodplug.c
libnut.c
libquvi.c avformat/libquvi: Set default demuxer and protocol limitations 2016-01-28 15:53:54 +01:00
librtmp.c librtmp: Avoid an infiniloop setting connection arguments 2016-07-26 12:08:58 -07:00
libsmbclient.c
libssh.c avformat/libssh: check the user provided a password before trying to use it 2018-01-11 10:42:34 -03:00
lmlm4.c
loasdec.c
log2_tab.c
lrc.c
lrc.h
lrcdec.c avformat/lrcdec: Clip timestamps 2021-10-17 21:34:53 +02:00
lrcenc.c
lvfdec.c avformat/lvfdec: Check stream_index before use 2021-10-17 21:34:53 +02:00
lxfdec.c
m4vdec.c
Makefile libavformat/Makefile: Fix build issues with async test 2020-04-24 13:48:04 +02:00
matroska.c
matroska.h
matroskadec.c avformat/matroskadec: Check desc_bytes 2022-02-16 20:10:30 +01:00
matroskaenc.c avformat/matroskaenc: Check codecdelay before use 2015-12-09 18:27:54 +01:00
md5enc.c
md5proto.c
metadata.c
metadata.h
mgsts.c
microdvddec.c avformat/microdvddec: use 64bit for durations 2021-10-17 21:34:53 +02:00
microdvdenc.c
mkvtimestamp_v2.c
mlvdec.c avformat/mlvdec: fail reading a packet with 0 streams 2020-07-05 12:43:08 +02:00
mm.c avformat/mm: Check for existence of audio stream 2020-07-13 08:54:33 +02:00
mmf.c
mms.c avformat/mms: Add missing chunksize check 2018-07-10 01:52:56 +02:00
mms.h
mmsh.c
mmst.c
mov_chan.c
mov_chan.h
mov.c avformat/mov: Check size before subtraction 2022-02-16 18:55:58 +01:00
movenc.c avformat/movenc: Fix segfault when remuxing rtp hint stream 2021-10-31 18:56:48 +01:00
movenc.h
movenchint.c
mp3dec.c avformat/mp3dec: improve junk skipping heuristic 2015-10-20 12:35:43 +02:00
mp3enc.c avformat/mp3enc: Avoid SEEK_END as it is unsupported 2019-12-02 19:41:48 +01:00
mpc8.c avformat/mpc8: Check for position overflow in mpc8_handle_chunk() 2021-10-17 21:34:53 +02:00
mpc.c
mpeg.c avformat/mpeg: Check avio_read() return value in get_pts() 2021-10-17 21:34:53 +02:00
mpeg.h
mpegenc.c avformat/mpegenc: Fix integer overflow with AV_NOPTS_VALUE 2020-07-05 12:43:08 +02:00
mpegts.c avformat/mpegts: Fix argument type for av_log 2021-10-17 21:34:53 +02:00
mpegts.h
mpegtsenc.c mpegencts: Fix overflow in cbr mode period calculations 2015-12-06 02:51:27 +01:00
mpegvideodec.c
mpjpeg.c
mpjpegdec.c
mpl2dec.c avformat/mpl2dec: Fix integer overflow with duration 2020-07-05 12:43:08 +02:00
mpsubdec.c avformat/mpsubdec: Clear queue on error 2019-12-06 20:30:57 +01:00
msnwc_tcp.c
mtv.c
mux.c avformat/mux: Fix copy an paste typo 2017-06-05 23:16:54 +02:00
mvdec.c avformat/mvdec: Check for EOF in read_index() 2021-10-17 21:34:53 +02:00
mvi.c avformat/mvi: Check audio size for more overflows 2021-10-17 21:34:53 +02:00
mxf.c lavf/mxf: Support video essence container uls for vc1. 2015-09-05 00:09:13 +02:00
mxf.h
mxfdec.c avformat/mxfdec: Check for duplicate mxf_read_index_entry_array() 2022-01-13 22:44:14 +01:00
mxfenc.c avformat/mxfenc: Do not crash if there is no packet in the first stream 2015-12-13 17:27:04 +01:00
mxg.c
ncdec.c
network.c
network.h
nistspheredec.c
noproxy-test.c
nsvdec.c avformat/nsvdec: Fix memleaks on errors while reading the header 2020-04-23 21:29:01 +02:00
nullenc.c
nut.c
nut.h
nutdec.c avformat/nutdec: Check tmp_size 2021-10-17 21:34:53 +02:00
nutenc.c avformat/nutenc: Do not pass NULL to memcmp() in get_needed_flags() 2019-12-06 20:30:57 +01:00
nuv.c nuv: sanitize negative fps rate 2015-12-20 13:39:45 +01:00
oggdec.c avformat/oggdec: Check for EOF after page header 2020-04-23 21:29:01 +02:00
oggdec.h avformat/oggdec: Fix integer overflow with invalid pts 2016-08-15 20:25:13 +02:00
oggenc.c
oggparsecelt.c avformat/oggparsecelt: Do not re-allocate os->private 2017-07-26 00:22:55 +02:00
oggparsedirac.c
oggparseflac.c
oggparseogm.c avformat/oggparseogm: Check lb against psize 2018-07-10 01:18:52 +02:00
oggparseopus.c avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c 2016-08-15 18:54:34 +02:00
oggparseskeleton.c
oggparsespeex.c avformat/oggparsespeex: Check frames_per_packet and packet_size 2016-12-03 04:10:31 +01:00
oggparsetheora.c avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE 2018-07-10 01:18:52 +02:00
oggparsevorbis.c libavformat/oggparsevorbis: Fix memleak on multiple headers 2018-07-10 01:18:52 +02:00
oggparsevp8.c Don't manipulate duration when it's AV_NOPTS_VALUE. 2018-01-31 22:56:14 +01:00
oma.c
oma.h
omadec.c
omaenc.c
options_table.h avformat/options_table: Set the default maximum number of streams to 1000 2017-02-08 21:17:50 +01:00
options.c
os_support.c
os_support.h
paf.c avformat/paf: Check for EOF before allocation in read_header() 2021-10-17 21:34:53 +02:00
pcm.c
pcm.h
pcmdec.c
pcmenc.c
pjsdec.c avformat/pjsdec: Check duration for overflow 2019-12-06 20:30:57 +01:00
pmpdec.c
psxstr.c
pva.c avformat/pva: Check for EOF before retrying in read_part_of_packet() 2018-07-10 01:52:56 +02:00
pvfdec.c
qcp.c avformat/qcp: Avoid negative nb_rates 2021-10-17 21:34:53 +02:00
qtpalette.h
r3d.c
rawdec.c
rawdec.h
rawenc.c lavf/rawenc: Only accept the appropriate stream type for raw muxers. 2021-10-17 21:35:41 +02:00
rawenc.h
rawvideodec.c
rdt.c
rdt.h
realtextdec.c avformat/realtextdec: Check the pts difference before using it for the duration computation 2021-10-17 21:34:53 +02:00
redspark.c
replaygain.c
replaygain.h
riff.c lavf/riff: Support fourcc AVd1 for dvvideo. 2015-09-05 00:09:06 +02:00
riff.h
riffdec.c avformat/riffdec: Initialize bitrate 2015-12-06 02:51:27 +01:00
riffenc.c
rl2.c avformat/rl2: Fix DoS due to lack of eof check 2017-08-28 01:43:04 +02:00
rm.c
rm.h
rmdec.c avformat/rmdec: Use 64bit for intermediate for DEINT_ID_INT4 2021-10-17 21:34:53 +02:00
rmenc.c
rmsipr.c
rmsipr.h
rpl.c avformat/rpl: The associative law doesnt hold for signed integers in C 2021-10-17 21:34:53 +02:00
rsd.c
rso.c
rso.h
rsodec.c
rsoenc.c
rtmp.h
rtmpcrypt.c rtmpcrypt: Do the xtea decryption in little endian mode 2015-11-26 16:06:39 +01:00
rtmpcrypt.h
rtmpdh.c
rtmpdh.h
rtmphttp.c
rtmppkt.c avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2 2017-07-29 14:17:59 +02:00
rtmppkt.h
rtmpproto.c
rtp.c
rtp.h
rtpdec_ac3.c
rtpdec_amr.c
rtpdec_asf.c libavformat/rtpdec_asf: zero initialize the AVIOContext struct 2016-08-15 20:25:13 +02:00
rtpdec_dv.c
rtpdec_formats.h
rtpdec_g726.c
rtpdec_h261.c
rtpdec_h263_rfc2190.c
rtpdec_h263.c
rtpdec_h264.c
rtpdec_hevc.c
rtpdec_ilbc.c
rtpdec_jpeg.c avformat/rtpdec_jpeg: fix low contrast image on low quality setting 2016-04-27 04:40:11 +02:00
rtpdec_latm.c
rtpdec_mpa_robust.c
rtpdec_mpeg4.c
rtpdec_mpeg12.c
rtpdec_mpegts.c
rtpdec_qcelp.c
rtpdec_qdm2.c
rtpdec_qt.c
rtpdec_svq3.c
rtpdec_vp8.c
rtpdec_vp9.c
rtpdec_xiph.c
rtpdec.c
rtpdec.h
rtpenc_aac.c
rtpenc_amr.c
rtpenc_chain.c
rtpenc_chain.h
rtpenc_h261.c
rtpenc_h263_rfc2190.c
rtpenc_h263.c
rtpenc_h264_hevc.c
rtpenc_jpeg.c lavf/rtpenc_jpeg: Less strict check for standard Huffman tables. 2015-12-02 14:56:53 +01:00
rtpenc_latm.c
rtpenc_mpegts.c
rtpenc_mpv.c
rtpenc_vp8.c
rtpenc_xiph.c
rtpenc.c avformat/rtpenc: Fix integer overflow in NTP_TO_RTP_FORMAT 2016-04-27 04:40:11 +02:00
rtpenc.h
rtpproto.c
rtpproto.h
rtsp.c avformat/rtsp: Check number of streams in sdp_parse_line() 2019-12-02 19:41:47 +01:00
rtsp.h
rtspcodes.h
rtspdec.c
rtspenc.c
samidec.c avformat/samidec: Sanity check pts 2021-10-17 21:34:53 +02:00
sapdec.c
sapenc.c
sauce.c
sauce.h
sbgdec.c avformat/sbgdec: Check for overflow in timestamp preparation 2021-10-17 21:34:53 +02:00
sctp.c
sdp.c
sdr2.c
seek-test.c
segafilm.c avformat/segafilm: Check that there is a stream 2021-10-17 21:34:53 +02:00
segment.c
sierravmd.c
siff.c avformat/siff: Reject audio packets without audio stream 2021-10-17 21:34:53 +02:00
smacker.c avformat/smacker: fix integer overflow with pts_inc 2015-12-06 02:51:27 +01:00
smjpeg.c
smjpeg.h
smjpegdec.c avformat/smjpegdec: Check the existence of referred streams 2020-07-07 19:28:34 +02:00
smjpegenc.c
smoothstreamingenc.c
smush.c
sol.c
sox.h
soxdec.c
soxenc.c
spdif.c
spdif.h
spdifdec.c
spdifenc.c
srtdec.c avformat/srtdec: make sure we probe a number 2015-10-09 10:56:31 +02:00
srtenc.c
srtp.c
srtp.h
srtpproto.c
stldec.c
subfile.c
subtitles.c avformat/subtitles: Check nb_subs in ff_subtitles_queue_finalize() 2019-12-06 20:30:57 +01:00
subtitles.h
subviewer1dec.c
subviewerdec.c avformat/subviewerdec: fail on AV_NOPTS_VALUE 2021-10-17 21:34:53 +02:00
supdec.c
swf.c
swf.h
swfdec.c avformat/swfdec: Fix inflate() error code check 2016-08-19 11:03:50 +02:00
swfenc.c
takdec.c
tcp.c
tedcaptionsdec.c avformat/tedcaptionsdec: Check for overflow in parse_int() 2021-10-17 21:34:53 +02:00
tee.c lavf/tee: fix side data double free. 2015-12-13 10:14:24 +01:00
thp.c avformat/thp: Check fps 2020-07-05 12:43:08 +02:00
tiertexseq.c
tls_gnutls.c
tls_openssl.c
tls_securetransport.c
tls.c
tls.h
tmv.c
tta.c avformat/tta: Check for EOF in index reading loop 2021-10-17 21:34:53 +02:00
tty.c avformat/tty: add probe function 2021-10-31 18:45:40 +01:00
txd.c
udp.c
uncodedframecrcenc.c
unix.c
url-test.c
url.c
url.h
urldecode.c
urldecode.h
utils.c avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value() 2022-02-16 20:09:36 +01:00
vc1test.c
vc1testenc.c
version.h
vivo.c
voc.c
voc.h
vocdec.c
vocenc.c
vorbiscomment.c
vorbiscomment.h
vplayerdec.c
vqf.c avformat/vqf: Check len for COMM chunks 2021-10-17 21:34:53 +02:00
w64.c
w64.h
wavdec.c avformat/wavdec: Check smv_block_size 2021-10-17 21:34:53 +02:00
wavenc.c
wc3movie.c avformat/wc3movie: Move wc3_read_close() up 2021-10-17 21:34:53 +02:00
webm_chunk.c avformat/webm_chunk: Specify expected argument length of get_chunk_filename() 2019-12-02 19:41:48 +01:00
webmdashenc.c avformat/webmdashenc: Check id in adaption_sets 2019-12-02 19:41:47 +01:00
webpenc.c
webvttdec.c
webvttenc.c lavf/webvttenc: Require webvtt file to contain exactly one WebVTT stream. 2015-10-08 13:15:42 +02:00
westwood_aud.c
westwood_vqa.c
wtv_common.c
wtv.h
wtvdec.c avformat/wtvdec: Check for EOF before seeking back in parse_media_type() 2021-10-17 21:34:53 +02:00
wtvenc.c
wv.c
wv.h
wvdec.c avformat/wvdec: detect and error out on WavPack DSD files 2019-12-02 19:41:47 +01:00
wvenc.c
xa.c
xmv.c avformat/xmv: Make bitrate 64bit 2019-12-02 19:41:48 +01:00
xwma.c avformat/xwma: Check for EOF in dpds_table read code 2021-10-17 21:34:53 +02:00
yop.c
yuv4mpeg.h
yuv4mpegdec.c
yuv4mpegenc.c