- 11 Mar, 2015 1 commit
-
-
Michael Niedermayer authored
Found-by: Clang -fsanitize=shift Reported-by: Thierry Foucu <tfoucu@google.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 08 Mar, 2015 2 commits
-
-
Michael Niedermayer authored
No testcase available Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
Michael Niedermayer authored
Fixes Ticket4299 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 04 Feb, 2015 1 commit
-
-
Michael Niedermayer authored
Fixes integer overflow and out of array read Fixes: asan_heap-oob_1fb2f9b_3780_cov_3984375136_usf.mkv Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 15 Aug, 2014 1 commit
-
-
Diego Biurrun authored
-
- 23 Jun, 2014 1 commit
-
-
Diego Biurrun authored
-
- 12 Jun, 2014 1 commit
-
-
Michael Niedermayer authored
Fixes fate-vsynth3-wmv2 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 29 May, 2014 1 commit
-
-
Diego Biurrun authored
-
- 09 Apr, 2014 1 commit
-
-
wm4 authored
The most interesting parts are initialization in ff_MPV_common_init() and uninitialization in ff_MPV_common_end(). ff_mpeg_unref_picture and ff_thread_release_buffer have additional NULL checks for Picture.f, because these functions can be called on uninitialized or partially initialized Pictures. NULL pointer checks are added to ff_thread_release_buffer() stub function. Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
-
- 16 Mar, 2014 1 commit
-
-
Vittorio Giovara authored
-
- 13 Mar, 2014 1 commit
-
-
Diego Biurrun authored
-
- 09 Jan, 2014 1 commit
-
-
Anton Khirnov authored
Several decoders disable those anyway and they are not measurably faster on x86. They might be somewhat faster on other platforms due to missing emu edge SIMD, but the gain is not large enough (and those decoders relevant enough) to justify the added complexity.
-
- 15 Nov, 2013 1 commit
-
-
Ronald S. Bultje authored
Allow supporting files for which the image stride is smaller than the maximum block size + number of subpel mc taps, e.g. a 64x64 VP9 file or a 16x16 VP8 file with -fflags +emu_edge.
-
- 12 Nov, 2013 1 commit
-
-
Michael Niedermayer authored
Fixes out of array reads Fixes part of: MSVR 440 (the other issues seem to have been fixed already) Found-by: Jeremy Brown (jerbrown) of ReSP Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 15 Oct, 2013 4 commits
-
-
Luca Barbato authored
-
Luca Barbato authored
-
Luca Barbato authored
-
Ronald S. Bultje authored
-
- 29 Sep, 2013 1 commit
-
-
Ronald S. Bultje authored
This allows supporting files for which the image stride is smaller than the max. block size + number of subpel mc taps, e.g. a 64x64 VP9 file or a 16x16 VP8 file with -fflags +emu_edge.
-
- 28 Sep, 2013 1 commit
-
-
Ronald S. Bultje authored
This prevents emulated_edge_mc from not undoing mvy*stride-related integer overflows. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 04 Sep, 2013 2 commits
-
-
Michael Niedermayer authored
Currently all uses of the emu edge code as well as the code itself assume int linesize changing some but not changing all would introduce a security issue once all use this typedef a simple search and replace can be done to switch them all to ptrdiff_t Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
Martin Storsjö authored
This makes sure that linesize * start_y doesn't overflow, so that emulated_edge_mc can get back the original value if needed. Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st>
-
- 19 Apr, 2013 2 commits
-
-
Ronald S. Bultje authored
This also converts vc1, since that is mpegvideo-based. Signed-off-by: Martin Storsjö <martin@martin.st>
-
Michael Niedermayer authored
avcodec/mpegvideo_motion: Use a field from the current frame if the last is unavailable in DMV & 16x8 Fixes null pointer dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 18 Apr, 2013 1 commit
-
-
Michael Niedermayer authored
If a reference is unavailable use a field from the current picture Fixes null pointer dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 05 Apr, 2013 1 commit
-
-
Diego Biurrun authored
-
- 28 Mar, 2013 1 commit
-
-
Michael Niedermayer authored
The gmc functions access more pixels than there is allocated memory. Fixes out of array reads Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 13 Mar, 2013 1 commit
-
-
Ronald S. Bultje authored
This also converts vc1, since that is mpegvideo-based.
-
- 08 Mar, 2013 1 commit
-
-
Anton Khirnov authored
-
- 08 Feb, 2013 1 commit
-
-
Diego Biurrun authored
-
- 20 Dec, 2012 1 commit
-
-
Ronald S. Bultje authored
Move some functions from dsputil. The idea is that videodsp contains functions that are useful for a large and varied set of video decoders. Currently, it contains emulated_edge_mc() and prefetch(). Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
-
- 23 Nov, 2012 1 commit
-
-
Mans Rullgard authored
Signed-off-by: Mans Rullgard <mans@mansr.com>
-
- 26 Oct, 2012 1 commit
-
-
Janne Grunau authored
Fixes CID602232.
-
- 16 Sep, 2012 2 commits
-
-
Mans Rullgard authored
These arguments are either constants or copies of MpegEncContext fields just as easily accessed within the function. Signed-off-by: Mans Rullgard <mans@mansr.com>
-
Mans Rullgard authored
These functions do not benefit from being inlined. They are large, and there are no opportunities for constant propagation. Signed-off-by: Mans Rullgard <mans@mansr.com>
-
- 09 Aug, 2012 2 commits
-
-
Mans Rullgard authored
The main benefit of inlining this function is from constant propagation for the 'field_based' argument. Instead of inlining all calls, create two versions of the function for field_based values of 0 and 1. Signed-off-by: Mans Rullgard <mans@mansr.com>
-
Mans Rullgard authored
This file defines a single, huge function, MPV_motion(), which although being declared inline is not actually inlined by the compiler (for good reason). There is thus no sense in defining this function in a header file, resulting in multiple copies of it in the final library. Signed-off-by: Mans Rullgard <mans@mansr.com>
-
- 07 Aug, 2012 1 commit
-
-
Anton Khirnov authored
-
- 29 Jul, 2012 1 commit
-
-
Mans Rullgard authored
Signed-off-by: Mans Rullgard <mans@mansr.com>
-
- 05 Jul, 2012 1 commit
-
-
Michael Niedermayer authored
Using ff_mspel_motion assumes that s (a MpegEncContext poiinter) really is a Wmv2Context. This fixes crashes in error resilience on vc1/wmv3 videos. CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st>
-