- 27 Sep, 2019 4 commits
-
-
Paul B Mahol authored
Fixes #6704.
-
Paul B Mahol authored
-
Limin Wang authored
Signed-off-by:
Limin Wang <lance.lmwang@gmail.com> Signed-off-by:
Michael Niedermayer <michael@niedermayer.cc>
-
Limin Wang authored
Signed-off-by:
-
- 26 Sep, 2019 32 commits
-
-
Michael Niedermayer authored
Fixes: Infinite loop Fixes: signed integer overflow: 2147483644 + 16 cannot be represented in type 'int' Fixes: 16169/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5662570416963584 Fixes: 16782/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5743163859271680 Fixes: 17641/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5711603562971136 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
Paul B Mahol <onemda@gmail.com> Signed-off-by:
-
Michael Niedermayer authored
Fixes: Timeout (85sec -> 0.1sec) Fixes: 17634/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_LOCO_fuzzer-5666410809786368 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: Infinite loop Fixes: 17620/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ATRAC3_fuzzer-5086123012915200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Reviewed-by:
-
Michael Niedermayer authored
Reviewed-by:
-
Michael Niedermayer authored
This makes the decoder faster Improves/Fixes: Timeout (22sec -> 20sec) Testcase: 17619/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5078510820917248 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: out of array read Fixes: 17617/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCOM_fuzzer-5674970478280704 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: division by 0 Fixes: 15657/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FITS_fuzzer-5738154838982656 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: Timeout (? -> 2ms) Fixes: 17616/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DST_fuzzer-5198057947267072 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: Infinite loop Fixes: 17611/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ACELP_KELVIN_fuzzer-5765134928052224 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
-
Michael Niedermayer authored
Fixes: out of array access Fixes: 17609/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SBC_fuzzer-5758729319874560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by:
Moritz Barsnick <barsnick@gmx.net> Signed-off-by:
-
Andreas Rheinhardt authored
Affected the FATE-tests exr-rgb-scanline-pxr24-half-uint32-13x9 and exr-rgb-scanline-pxr24-uint32. Signed-off-by:
Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Signed-off-by:
-
James Almer authored
Fixes ticket #8183. Tested-by:
Thierry Foucu <tfoucu@gmail.com> Signed-off-by:
James Almer <jamrial@gmail.com>
-
Gyan Doshi authored
-
Limin Wang authored
Add layouts for existing examples. Reviewed-by:
Gyan <ffmpeg@gyani.pro> Signed-off-by:
-
James Almer authored
Signed-off-by: -
Paul B Mahol authored
-
Paul B Mahol authored
Fixes #8002.
-
Andriy Gelman authored
Since reading 4 bits always returns a value in the range [0, 15], the check for vps_id >= HEVC_MAX_VPS_COUNT, where HEVC_MAX_VPS_COUNT = 16, is redundant. Signed-off-by:
Andriy Gelman <andriy.gelman@gmail.com> Signed-off-by:
-
Paul B Mahol authored
-
Paul B Mahol authored
Fixes #7666.
-
Andreas Rheinhardt authored
Fixes the movenc FATE-test. Signed-off-by: -
Andreas Rheinhardt authored
The MPEG-1/2 decoder uses avpriv_find_start_code to search for start codes and worked with the resulting start code before checking that it is really a start code of a slice. In particular, if the picture is so big that a slice_vertical_position_extension is present, it added the slice_vertical_position_extension as if it had a slice. Then a left shift is performed, without making sure that the value to be shifted is nonnegative. Afterwards the end result is checked, but even if a start code of a non-slice has been found, it might pass these checks: If slice_vertical_position_extension is present a start code < SLICE_MIN_START_CODE can lead to a macroblock-row index that appears valid. Furthermore, the left shift might make an invalid start code appear valid by discarding the highest bit. This has been fixed by checking directly after avpriv_find_start_code has returned. Fixes ticket #8162 (which is about the undefined left shifts). Signed-off-by: -
Andreas Rheinhardt authored
Signed-off-by: -
Andreas Rheinhardt authored
Fixes the acodec-pcm-u16[lb]e FATE-tests. Signed-off-by: -
Andreas Rheinhardt authored
Fixes ticket #8161 and the acodec-wavpack FATE-test. Signed-off-by: -
Zhong Li authored
Signed-off-by:Zhong Li <zhong.li@intel.com>
-
Zhong Li authored
MSDK does not create internal acceleration device on Linux, So MFXVideoCORE_SetHandle() is necessary. It has been added for ff_qsv_init_session_device(). But missed for ff_qsv_init_internal_session() due to commit 1f26a231 overwrited commit db89f455 Fix #7030 Signed-off-by:
-
Andreas Rheinhardt authored
This is done so that its data is really owned by the packet. This was already true for the current callers. Signed-off-by: -
Ting Fu authored
Signed-off-by:Ting Fu <ting.fu@intel.com>
-
Ting Fu authored
Signed-off-by: -
Ting Fu authored
Signed-off-by:
Ruiling Song <ruiling.song@intel.com>
-
- 25 Sep, 2019 4 commits
-
-
Andreas Rheinhardt authored
Up until now, ff_packet_list_put had a flaw: When it moved a packet to the list (meaning, when it ought to move the reference to the packet list instead of creating a new one via av_packet_ref), it did not reset the original packet, confusing the ownership of the data in the packet. This has been done because some callers of this function were not compatible with resetting the packet. This commit changes these callers and fixes this flaw. In order to indicate that the ownership of the packet has moved to the packet list, pointers to constant AVPackets are used whenever the target of the pointer might already be owned by the packet list. Signed-off-by:
-
James Almer authored
Demuxers may have allocated a packet before encountering an error and aborting. Fixes ticket #8150 Signed-off-by: -
Andreas Rheinhardt authored
ff_read_packet had potential memleaks: 1. If av_packet_make_refcounted fails, it means that the packet is not refcounted, but it could nevertheless carry side data and therefore needs to be unreferenced. 2. If putting a packet on a packet list fails, it wasn't unreferenced. Furthermore, read_frame_internal leaked a packet's (side) data if a context update was required and failed. Signed-off-by:
-
Andreas Rheinhardt authored
There is currently an ordinary check for this (which would lead to a memleak), but given that no demuxer should ever return a packet with an invalid stream_index it is more appropriate for this to be an assert. FATE passes with this change. Signed-off-by:
-
