Fixes #8289

Fixes #8288

Fixes #8287

Fixes: Timeout (? -> 2sec)
Fixes: 17886/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5728165124636672
Fixes: 18131/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5710803432374272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

Fixes: 17886/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5728165124636672
Fixes: 18131/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5710803432374272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

Fixes #8283

This is very hard to spot.

Fixes #8238

Fixes #8282

The pointer fp after the call to chromaprint_get_raw_fingerpoint() points to an array
of uint32_t whereas the current code assumed just a char stream. Thus when writing the
raw fingerprint, the output would be truncated by a factor of 4.

For reference the declaration of the function from chromaprint.h is:
int chromaprint_get_raw_fingerprint(ChromaprintContext *ctx, uint32_t **fingerprint, int *size);

Signed-off-by: Guo, Yejun <yejun.guo@intel.com>
Signed-off-by: Pedro Arthur <bygrandao@gmail.com>

Signed-off-by: Guo, Yejun <yejun.guo@intel.com>
Signed-off-by: Pedro Arthur <bygrandao@gmail.com>

and also change CONV to DLT_CONV2D for better description
Signed-off-by: Guo, Yejun <yejun.guo@intel.com>
Signed-off-by: Pedro Arthur <bygrandao@gmail.com>

Fixes ticket #8273.
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: James Almer <jamrial@gmail.com>

This should improve coverage
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

Signed-off-by: hwren <hwrenx@126.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

Fixes #8276

Fixes #8275

Fixes #8274

Based on commits 22bec0d3 and
cebb4469.
Signed-off-by: James Almer <jamrial@gmail.com>

Removed (new_size - pkt->nals_allocated) because this value is always 1
during the call.
Based on commit 78b86c30.
Signed-off-by: James Almer <jamrial@gmail.com>

Without reseting nal_buffer_size, av_fast_realloc will fail if
ff_h2645_packet_split is called with the unitialized pkt as argument.
Signed-off-by: James Almer <jamrial@gmail.com>

The "type" entry was hardcoded with an trailing comma, even if it was
the only entry in the section.

Fixes ticket #8228.
Signed-off-by: James Almer <jamrial@gmail.com>

Signed-off-by: mypopy@gmail.com

This should improve coverage
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

This should improve coverage
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

This should improve coverage
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

Somehow previous correct fix broke usage.

Signed-off-by: James Almer <jamrial@gmail.com>

Fixes #8261