Based on 28_theora_malloc_checks.patch from the Google Chrome team.

Originally committed as revision 20008 to svn://svn.ffmpeg.org/ffmpeg/trunk

This fixes issue 1408

Originally committed as revision 20007 to svn://svn.ffmpeg.org/ffmpeg/trunk

patch by Anton Khirnov, wyskas gmail com

Originally committed as revision 20006 to svn://svn.ffmpeg.org/ffmpeg/trunk

patch by Anton Khirnov, wyskas gmail com

Originally committed as revision 20005 to svn://svn.ffmpeg.org/ffmpeg/trunk

patch by Anton Khirnov, wyskas gmail com

Originally committed as revision 20004 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 20003 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 20002 to svn://svn.ffmpeg.org/ffmpeg/trunk

10_vorbis_submap_indexes.patch by chrome.
I am applying this even though Reimar had some comments to improve it as it fixes
a serious security issue and I do not want to leave such things unfixed.

Originally committed as revision 20001 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 20000 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19999 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19998 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19997 to svn://svn.ffmpeg.org/ffmpeg/trunk

23_vorbis_sane_partition.patch by chrome.
Also this should be better documented but i prefer not to leave potential
security issues open due to missing documentation.

Originally committed as revision 19996 to svn://svn.ffmpeg.org/ffmpeg/trunk

22_fix_theora_frag_fencepost.patch by chrome

Originally committed as revision 19995 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavcodec/wmadec.c:629: warning: unused variable `i'
libavcodec/wmadec.c:628: warning: unused variable `b'
libavcodec/wmadec.c:628: warning: unused variable `a'

Originally committed as revision 19994 to svn://svn.ffmpeg.org/ffmpeg/trunk

18_fix_theora_header_bit_len.patch by chrome

Originally committed as revision 19993 to svn://svn.ffmpeg.org/ffmpeg/trunk

15_more_residue_book_indexes.patch by chrome.

Originally committed as revision 19992 to svn://svn.ffmpeg.org/ffmpeg/trunk

14_floor_masterbook_index.patch by chrome

Originally committed as revision 19991 to svn://svn.ffmpeg.org/ffmpeg/trunk

12_vorbis_mode_indexes.patch by chrome
maybe exploitable

Originally committed as revision 19990 to svn://svn.ffmpeg.org/ffmpeg/trunk

11_vorbis_residue_book_index.patch by chrome.

Originally committed as revision 19989 to svn://svn.ffmpeg.org/ffmpeg/trunk

based on 31_mp3_outlen.patch by chrome.

Originally committed as revision 19988 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19987 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19986 to svn://svn.ffmpeg.org/ffmpeg/trunk

Apparently some versions of armcc do not identify as RVCT.  This
changes the test to a string used by all versions.

Originally committed as revision 19985 to svn://svn.ffmpeg.org/ffmpeg/trunk

25_vorbis_floor0_index.patch by chrome.

Originally committed as revision 19984 to svn://svn.ffmpeg.org/ffmpeg/trunk

26_vorbis_mag_angle_index.patch by chrome

Originally committed as revision 19983 to svn://svn.ffmpeg.org/ffmpeg/trunk

27_vorbis_residue_loop_error.patch by chrome

Originally committed as revision 19982 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19981 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19980 to svn://svn.ffmpeg.org/ffmpeg/trunk

based on a patch by chrome

Originally committed as revision 19979 to svn://svn.ffmpeg.org/ffmpeg/trunk

with inverted sign.

Originally committed as revision 19978 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19977 to svn://svn.ffmpeg.org/ffmpeg/trunk

39_vorbis_zero_dims.patch from chrome

Originally committed as revision 19976 to svn://svn.ffmpeg.org/ffmpeg/trunk

This may be security relevant.
Based on 2 patches by chrome.

Originally committed as revision 19975 to svn://svn.ffmpeg.org/ffmpeg/trunk

branch and save around 45k-55k dezicycles per function run.

Originally committed as revision 19974 to svn://svn.ffmpeg.org/ffmpeg/trunk

This is said to be able to lead to a stack based buffer overflow.

Originally committed as revision 19973 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19972 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19971 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19970 to svn://svn.ffmpeg.org/ffmpeg/trunk

Originally committed as revision 19969 to svn://svn.ffmpeg.org/ffmpeg/trunk