* commit 'd872fb0f':
  lavf: Reset the entry count and allocation size variables on av_reallocp failures

Conflicts:
	libavformat/avienc.c
Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '06ebc0bf':
  lavf: Allocate arrays with av_realloc if they will be realloced later
Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '1af78b86':
  rtpdec_qt: Add an accidentally removed allocation return value check
Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '705b748e':
  tls: Add support for listen mode

Conflicts:
	doc/protocols.texi
	libavformat/tls.c
	libavformat/version.h

See: 4f4eb380Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '5c53bf7a':
  http: Pass options through to the nested protocol

Conflicts:
	libavformat/http.c

See: b6f435fbMerged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '8b09d917':
  tls: Add options for verifying the peer certificate

Conflicts:
	doc/protocols.texi
	libavformat/tls.c
	libavformat/version.h

See: b2460858
See: 973a758fMerged-by: Michael Niedermayer <michaelni@gmx.at>

When av_reallocp fails, the associated variables that keep track of
the number of elements in the array (and in some cases, the
separate number of allocated elements) need to be reset.

Not all of these might technically be needed, but it's better to
reset them if in doubt, to make sure variables don't end up
conflicting.
Signed-off-by: Martin Storsjö <martin@martin.st>

Pointers returned from av_malloc can't in general be passed
to av_realloc.
Signed-off-by: Martin Storsjö <martin@martin.st>

This check was mistakenly removed in 5626f994.
Signed-off-by: Martin Storsjö <martin@martin.st>

Also add options for specifying a certificate and key, which can
be used both when operating as client and as server.

Partially based on a patch by Peter Ross.
Signed-off-by: Martin Storsjö <martin@martin.st>

When passing a dict to the nested protocol, it will consume
the used options from it, so a separate copy needs to be used
when reopening the connection multiple times.
Signed-off-by: Martin Storsjö <martin@martin.st>

A file containing the trusted CA certificates needs to be
supplied via the ca_file AVOption, unless the TLS library
has got a system default file/database set up.

This doesn't check the hostname of the peer certificate with
openssl, which requires a non-trivial piece of code for
manually matching the desired hostname to the string provided
by the certificate, not provided as a library function.

That is, with openssl, this only validates that the received
certificate is signed with the right CA, but not that it is
the actual server we think we're talking to.

Verification is still disabled by default since we can't count
on a proper CA database existing at all times.
Signed-off-by: Martin Storsjö <martin@martin.st>

Fixes Ticket2982
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes Ticket2962
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Values outside would not be possible due to limitations of jpeg itself

Fixes very long running loop
Fixes Ticket2977
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

* qatar/master:
  g2meet: Respect cursor_stride properly everywhere

See: c88ac1e0Merged-by: Michael Niedermayer <michaelni@gmx.at>

This prevents underflows in quite constrained cases
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes infinite loop
Fixes Ticket2979
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes #2995.
Reported-by: Piotr Bandurski <ami_stuff@o2.pl>
Signed-off-by: Paul B Mahol <onemda@gmail.com>

Fixes infinite loop
Fixes Ticket2987
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Prevents infinite loop
Fixes Ticket2988
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

This fixes a regression with rgb cursors since b1e46988.
Signed-off-by: Martin Storsjö <martin@martin.st>

The only use case of it was the selftest code, and there the slightly more
complex indexing that is needed after its removial doesnt matter.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

* qatar/master:
  lavc doxy: document that avcodec_flush_buffers() invalidates decoded frames
Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '2725f2d4':
  doc/filters: fix an option name in the unsharp docs

Conflicts:
	doc/filters.texi

See: b7b72963Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit 'cab8c5f8':
  h264: do not reinitialize the global cabac tables at each slice header

See: 1e2e2c80Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit 'e8804186':
  cabac: remove write-only h264_mps_state[]

Conflicts:
	libavcodec/cabac.c
Merged-by: Michael Niedermayer <michaelni@gmx.at>

* commit '668643b9':
  matroskadec: check av_strdup() when setting defaults
Merged-by: Michael Niedermayer <michaelni@gmx.at>

Fix infinite loop
Fix Ticket2978
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes Ticket2990
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Fixes Ticket2972
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

This is in line with the other functions
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>