- 04 Nov, 2018 1 commit
-
-
Michael Niedermayer authored
partitioned_frame is also set/cleared in decode_vop_header() Fixes: out of array read Fixes: 9789/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5638681627983872 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
- 22 Oct, 2018 1 commit
-
-
Michael Niedermayer authored
Fixes: Integer overflow Fixes: 10890/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5636062181851136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 19 Sep, 2018 2 commits
-
-
Michael Niedermayer authored
Fixes: runtime error: shift exponent -1 is negative Fixes: 9938/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5653783529914368 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
Michael Niedermayer authored
Fixes: out of array read Fixes: 10064/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5766801384800256 Fixes: 10225/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5071833448054784 Fixes: 10261/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5115048024866816 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 25 Aug, 2018 2 commits
-
-
Kieran Kunhya authored
-
Michael Niedermayer authored
Signed-off-by:
-
- 04 Jul, 2018 2 commits
-
-
Michael Niedermayer authored
Fixes: out of array read Fixes: asff-crash-0e53d0dc491dfdd507530b66562812fbd4c36678 Found-by:
Paul Ch <paulcher@icloud.com> Signed-off-by:
-
Michael Niedermayer authored
The profile field is changed by code inside and outside the decoder, its not a reliable indicator of the internal codec state. Maintaining it consistency with studio_profile is messy. Its easier to just avoid it and use only studio_profile Fixes: assertion failure Fixes: ffmpeg_crash_9.avi Found-by: Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu with AFLSmart Signed-off-by:
-
- 28 Jun, 2018 1 commit
-
-
Michael Niedermayer authored
Fixes: null pointer dereference Fixes: ffmpeg_crash_7.avi Found-by: Thuan Pham, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu with AFLSmart Signed-off-by:
-
- 13 Jun, 2018 1 commit
-
-
Michael Niedermayer authored
Fixes: assertion failure Fixes: ffmpeg_crash_5.avi Found-by: Thuan Pham <thuanpv@comp.nus.edu.sg>, Marcel Böhme, Andrew Santosa and Alexandru Razvan Caciulescu with AFLSmart Signed-off-by:
-
- 17 May, 2018 4 commits
-
-
Michael Niedermayer authored
Signed-off-by: -
Michael Niedermayer authored
Fixes: runtime error: shift exponent -1 is negative Fixes: 7486/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-4977380939530240 Fixes: runtime error: index 36 out of bounds for type 'const uint8_t [32]' Fixes: 7566/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-6536620682510336 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
Michael Niedermayer authored
Reviewed-by:
Kieran Kunhya <kierank@obe.tv> Signed-off-by:
-
Michael Niedermayer authored
Signed-off-by:
-
- 03 May, 2018 2 commits
-
-
Michael Niedermayer authored
Signed-off-by: -
Michael Niedermayer authored
avcodec/mpeg4videodec: Move decode_studiovisualobject() parsing in the branch for visual object parsing Fixes: runtime error: shift exponent -1 is negative Fixes: 7510/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5024523356209152 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 04 Apr, 2018 2 commits
-
-
James Almer authored
Should fix double free related crashes. Signed-off-by:James Almer <jamrial@gmail.com>
-
James Almer authored
Fixes memleaks. Signed-off-by:
-
- 02 Apr, 2018 1 commit
-
-
Kieran Kunhya authored
This is a profile supporting > 8-bit video and has a higher quality DCT
-
- 26 Mar, 2018 1 commit
-
-
Michael Niedermayer authored
Forward error codes where possible. Signed-off-by:
-
- 11 Feb, 2018 1 commit
-
-
Michael Niedermayer authored
Fixes: Ticket7005 Signed-off-by:
-
- 29 Jan, 2018 2 commits
-
-
Michael Niedermayer authored
Found-by: kierank Reviewed-by:
Kieran Kunhya <kieran618@googlemail.com> Signed-off-by:
-
Michael Niedermayer authored
The spec implies that 0 is invalid in addition to the existing checks Found-by: <kierank> Reviewed-by:
-
- 26 Dec, 2017 1 commit
-
-
Mark Thompson authored
video_format is not used.
-
- 21 Dec, 2017 1 commit
-
-
Michael Niedermayer authored
Signed-off-by:
-
- 19 Dec, 2017 1 commit
-
-
Mark Thompson authored
This includes a pointer to the associated hwaccel for decoders using hwaccels - these will be used later to implement the hwaccel setup without needing a global list. Also added is a new file listing all hwaccels as external declarations - this will be used later to generate the hwaccel list at configure time.
-
- 27 Nov, 2017 1 commit
-
-
James Almer authored
Signed-off-by:
-
- 26 Nov, 2017 1 commit
-
-
Mark Thompson authored
This includes a pointer to the associated hwaccel for decoders using hwaccels - these will be used later to implement the hwaccel setup without needing a global list. Also added is a new file listing all hwaccels as external declarations - this will be used later to generate the hwaccel list at configure time.
-
- 21 Nov, 2017 2 commits
-
-
Michael Niedermayer authored
Signed-off-by: -
Dale Curtis authored
decode_user_data() attempts to create an integer |build| value with 8 bits of spacing for 3 components. However each component is an int32_t, so shifting each component is undefined for values outside of the 8 bit range. This patch simply clamps input to 8-bits per component and prints out a warning that the values were clamped. Signed-off-by:
Dale Curtis <dalecurtis@chromium.org> Signed-off-by:
-
- 10 Oct, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: runtime error: signed integer overflow: -104713 * 65536 cannot be represented in type 'int' Fixes: 3453/clusterfuzz-testcase-minimized-5555554657239040 Fixes: 3528/clusterfuzz-testcase-minimized-6283628420005888 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 11 Aug, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: runtime error: signed integer overflow: 2146467840 + 1032192 cannot be represented in type 'int' Fixes: 2826/clusterfuzz-testcase-minimized-5901511613743104 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 24 Jun, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: runtime error: shift exponent -1 is negative Fixes: 2338/clusterfuzz-testcase-minimized-5153426541379584 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 21 Jun, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: runtime error: signed integer overflow: 262144 * -16120 cannot be represented in type 'int' Fixes: 2292/clusterfuzz-testcase-minimized-6156080415506432 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 14 Jun, 2017 2 commits
-
-
Michael Niedermayer authored
Fixes: runtime error: signed integer overflow: -268386304 * 16 cannot be represented in type 'int' Fixes: 2204/clusterfuzz-testcase-minimized-5616756909408256 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
Michael Niedermayer authored
Fixes: runtime error: signed integer overflow: 131072 + 2147352576 cannot be represented in type 'int' Fixes: 2192/clusterfuzz-testcase-minimized-5370387988742144 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 06 Jun, 2017 1 commit
-
-
Michael Niedermayer authored
avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int' Fixes: 2106/clusterfuzz-testcase-minimized-6136503639998464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 21 May, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes multiple: runtime error: signed integer overflow: 2147115008 + 413696 cannot be represented in type 'int' Fixes: 1723/clusterfuzz-testcase-minimized-5309409372667904 Fixes: 1727/clusterfuzz-testcase-minimized-5900685306494976 Fixes: 1737/clusterfuzz-testcase-minimized-5922321338466304 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by:
-
- 14 May, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: Integer overflow Fixes: 1572/clusterfuzz-testcase-minimized-4578773729017856 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpegSigned-off-by:
-
- 04 May, 2017 1 commit
-
-
Michael Niedermayer authored
This avoids intermediates from overflowing (the final values are checked) Fixes: runtime error: signed integer overflow: -167712 + -2147352576 cannot be represented in type 'int' Fixes: 1298/clusterfuzz-testcase-minimized-5955580877340672 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpegSigned-off-by:
-
