Commits · 1efaac69328bdc17680924c71be7ec990f0e8f2c · Linshizhi / ffmpeg.wasm-core

20 Oct, 2019 14 commits

avformat/pjsdec: Check duration for overflow · 1efaac69

Michael Niedermayer authored Oct 04, 2019

Fixes: signed integer overflow: -3 - 9223372036854775807 cannot be represented in type 'long'
Fixes: 17828/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5645915116797952

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

1efaac69

avcodec/agm: Check for reference frame earlier · 315a4459

Michael Niedermayer authored Oct 03, 2019

Fixes: Timeout (14sec - 120ms)
Fixes: 17824/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AGM_fuzzer-5639825457152000

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

315a4459

avcodec/ptx: Check that the input contains at least one line · a6ad3282

Michael Niedermayer authored Oct 02, 2019

Fixes: Timeout (19sec -> 44ms)
Fixes: 17816/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PTX_fuzzer-5704459950227456

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

a6ad3282

avcodec/alac: Fix integer overflow in LPC · 44b73a05

Michael Niedermayer authored Sep 30, 2019

Fixes: signed integer overflow: 2147483628 + 128 cannot be represented in type 'int'
Fixes: 17783/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-5146470595952640

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

44b73a05

avcodec/smacker: Fix integer overflows in pred[] in smka_decode_frame() · a76897e1

Michael Niedermayer authored Sep 30, 2019

Fixes: signed integer overflow: -2147481503 + -32732 cannot be represented in type 'int'
Fixes: 17782/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SMACKAUD_fuzzer-5769672225456128

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

a76897e1

avcodec/aliaspixdec: Check input size against minimal picture size · 8c693104

Michael Niedermayer authored Sep 30, 2019

Fixes: Timeout (15sec -> 72ms)
Fixes: 17774/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALIAS_PIX_fuzzer-5193929107963904

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

8c693104

avcodec/ffwavesynth: Fix integer overflows in pink noise addition · 7916b686

Michael Niedermayer authored Sep 29, 2019

Fixes: signed integer overflow: -1795675744 + -1926578528 cannot be represented in type 'int'
Fixes: 17741/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5131336402075648

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

7916b686

avcodec/vc1_block: Fixes integer overflow in vc1_decode_i_block_adv() · 6fdeb208

Michael Niedermayer authored Sep 28, 2019

Fixes: signed integer overflow: 62220 * 262144 cannot be represented in type 'int'
Fixes: 17145/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer-5667394743173120

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

6fdeb208

tools/target_dec_fuzzer: Adjust threshold for DXV · fe63ace9

Michael Niedermayer authored Sep 28, 2019

Fixes: TImeout (20sec -> 4sec)
Fixes: 17735/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-5723368317255680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

fe63ace9

avcodec/wmalosslessdec: Check block_align · c1c79927

Michael Niedermayer authored Oct 19, 2019

Fixes: NULL pointer dereference
Fixes: 18331/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-5652847445671936

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

c1c79927

avfilter/vf_tile: fix memory leak · 673fce6d
Paul B Mahol authored Oct 19, 2019
```
Fixes #8313
```
673fce6d
avfilter/vf_atadenoise: add support for commands · 357f11ec
Paul B Mahol authored Oct 20, 2019

357f11ec
avfilter/vf_shuffleframes: improve error message · 824b026d
Paul B Mahol authored Oct 20, 2019

824b026d

avformat/options: don't call avformat_free_context() within avformat_alloc_context() · 31aafdac

James Almer authored Oct 19, 2019

avformat_free_context() expects AVFormatContext->internal to not be NULL.
Reviewed-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Signed-off-by: James Almer <jamrial@gmail.com>

31aafdac

19 Oct, 2019 23 commits
- avformat/nutenc: free all missing dynamic AVIOContext on header writing failure · 90e37ada
  James Almer authored Oct 19, 2019
```
Fixes part of ticket #8316
Signed-off-by: James Almer <jamrial@gmail.com>
```
  90e37ada
- avfilter/af_tremolo: fix heap-buffer overflow · 58bb9d3a
  Paul B Mahol authored Oct 19, 2019
```
Fixes #8317
```
  58bb9d3a
- avfilter/vf_fftdnoiz: round toward nearest integer · 26876fdb
  Paul B Mahol authored Oct 19, 2019
```
Instead of rounding toward zero and thus producing
darker output.
```
  26876fdb
- avfilter/vf_bm3d: round values toward nearest integer · a60232ab
  Paul B Mahol authored Oct 19, 2019
```
Instead of rounding toward zero and thus producing
darker output.
```
  a60232ab
- avfilter/vf_bm3d: forward status back · 7080bbfe
  Paul B Mahol authored Oct 19, 2019
  
  7080bbfe
- mpeg4_unpack_bframes: Merge close and flush · fee1bffb
  Andreas Rheinhardt authored Jul 10, 2019
```
They are identical now.
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  fee1bffb
- avcodec/zmbv: Call decode_intra directly · 6090ac1d
  Andreas Rheinhardt authored Oct 17, 2019
```
zmbv has only one function for decoding intra frames, namely
decode_intra; and yet up until now it has been called via a function
pointer. This has been changed.

This also removes spec-incompliant conversions between function pointers
and pointers of type void * and thereby fixes the warning "ISO C forbids
assignment between function pointer and ‘void *’" that GCC emits with
the -pedantic option.
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  6090ac1d
- avcodec/g729dec: Avoid computing invalid temporary pointers for ff_acelp_weighted_vector_sum() · 2c78a76c
  Michael Niedermayer authored Oct 17, 2019
```
Fixes: Ticket8176
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  2c78a76c
- avcodec/g729postfilter: Fix left shift of negative value · 5f0acc50
  Michael Niedermayer authored Oct 17, 2019
```
Fixes: Ticket8176
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  5f0acc50
- avfilter/vf_fieldhint: add support for duplicating fields · 7056ddc0
  Paul B Mahol authored Oct 19, 2019
```
Fixes #7066
```
  7056ddc0
- avfilter/vf_fieldmatch: fix heap-buffer overflow · ce5274c1
  Paul B Mahol authored Oct 19, 2019
```
Also fix use of uninitialized values.

Fixes #8239
```
  ce5274c1
- avfilter/vf_decimate: fix memory leaks · c8f3915f
  Paul B Mahol authored Oct 19, 2019
```
Fixes #8311
```
  c8f3915f
- avfilter/vf_lagfun: fix heap-buffer overflow · 723d69f9
  Paul B Mahol authored Oct 19, 2019
```
Fixes #8310
```
  723d69f9
- avfilter/vf_datascope: fix heap buffer overflow · d4d6b7b0
  Paul B Mahol authored Oct 19, 2019
```
Fixes #8309
```
  d4d6b7b0
- doc/utils: add hexadecagonal channel layout · ed78ca41
  Gyan Doshi authored Oct 19, 2019
  
  ed78ca41
- avformat/sapdec: check av_strdup() return value and fix memleak · 9f023017
  Steven Liu authored Oct 10, 2019
```
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  9f023017
- avformat/mvdec: check av_strdup() return value · b1071b40
  Steven Liu authored Oct 10, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  b1071b40
- avformat/mtv: check av_strdup() return value · 53928e0b
  Steven Liu authored Oct 10, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  53928e0b
- avformat/mpeg: check av_strdup() return value · f5263172
  Steven Liu authored Oct 10, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  f5263172
- avformat/libsrt: check av_strdup() return value and fix memleak · 1f7b5271
  Steven Liu authored Oct 10, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  1f7b5271
- avformat/hlsenc: check av_strdup() return value · 17d96c15
  Steven Liu authored Oct 19, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  17d96c15
- avformat/cinedec: check av_strdup() return value · 25f5d67a
  Steven Liu authored Oct 10, 2019
```
Signed-off-by: Steven Liu <lq@chinaffmpeg.org>
```
  25f5d67a
- avformat/mpegenc: check for stream private data during deinit · 0700e724
  James Almer authored Oct 19, 2019
```
Prevents pointer dereferences when streams were not fully initialized.
Signed-off-by: James Almer <jamrial@gmail.com>
```
  0700e724
18 Oct, 2019 3 commits
- avformat/nutenc: don't allocate a dynamic AVIOContext if no index is going to be written · 1d479300
  James Almer authored Oct 18, 2019
```
Fixes ticket #8295
Signed-off-by: James Almer <jamrial@gmail.com>
```
  1d479300
- avfilter/vf_shuffleplanes: add mising query_formats() · 0528adbd
  Paul B Mahol authored Oct 18, 2019
```
Fixes #8298
```
  0528adbd
- avfilter/vf_maskfun: fix memleak · 3b580f9d
  Paul B Mahol authored Oct 18, 2019
```
Fixes #8305
```
  3b580f9d