* commit 'b769cf4b':
  hevc: do not dereference pointer before NULL check in verify_md5()

See: f2eca8d0Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '3bb91a1b':
  configure: Add -D__USE_MINGW_ANSI_STDIO=1 to CPPFLAGS on MinGW64

Conflicts:
	configure
Merged-by: Michael Niedermayer <michaelni@gmx.at>

Fixess CID1135761
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135760
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135751
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Anton Khirnov <anton@khirnov.net>

Fixes CID1135750
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

This enables a more POSIX-compliant printf implementation, that
allows using length modifiers like 'z'.

Fixes CID1135763, CID1135764
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Timothy Gu <timothygu99@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135762
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135748
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135769
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135776
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135744
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Based on eeb975f5
Fixes ticket #3217.

Reviewed-by: Nicolas George

based on code from oggparsevorbis
Fixes Ticket3124
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

* qatar/master:
  alsdec: check block length

See: 0ceca269Merged-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135742
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135767
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

This is currently redundant as the checks before it are tighter than
the checks in ff_set_dimensions() but its more robust not to depend
on that.

Fixes CID1135740
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes mixed flushing and decoding NULL packets
Found-by: wm4
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes hypothetical integer overflows
Related to CID1135770 & CID1135771
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

This is currently redundant as the checks before it are tighter than
the checks in ff_set_dimensions() but its more robust not to depend
on that.

Fixes CID1135739
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes CID1135765
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

- Try reading the time_base information from the VPS too, not just the VUI
- Only set time_base when an SPS is activated, not when it's decoded.
- Reduce the fraction before setting it.
- Don't set anything if the fraction is invalid (because the VUI is not
  present or because the encoded value is invalid).

Conflicts:
	libavcodec/hevc_ps.c
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

significantly improves compression rate

This also bumps version to 2 and drops support for version 0/1
If someone used version 0/1 despite their experimental status then support
for these can and should be added back
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fix writing over the end

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Addresses: CVE-2013-0845

* qatar/master:
  configure: Move log2 dependency declaration to a place it takes effect
Merged-by: Michael Niedermayer <michaelni@gmx.at>

It was incorrectly moved in c869fcde.

Reviewed-by: James Zern <jzern@google.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

0-0.7% improved compression
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>