1. 04 Sep, 2016 3 commits
  2. 03 Sep, 2016 1 commit
  3. 31 Aug, 2016 3 commits
  4. 30 Aug, 2016 8 commits
  5. 29 Aug, 2016 5 commits
  6. 26 Aug, 2016 9 commits
  7. 24 Aug, 2016 1 commit
  8. 23 Aug, 2016 2 commits
  9. 18 Aug, 2016 8 commits
    • Anton Khirnov's avatar
      mss12: validate display dimensions · 6755eb5b
      Anton Khirnov authored
      The code currently reads the coded dimensions from the extradata, but
      expects the display dimensions to be set by the caller, and does not
      check that they are compatible (i.e. that the displayed size is smaller
      than the coded size).
      
      Make sure that when the display dimensions are set, they are also valid.
      Fixes possible invalid memory access.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      6755eb5b
    • Anton Khirnov's avatar
      vc1: check that slices have a positive height · 33f10546
      Anton Khirnov authored
      Fixes possible invalid reads.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      33f10546
    • Anton Khirnov's avatar
      pcx: use the bytestream2 API for reading from input · 09b23786
      Anton Khirnov authored
      Fixes possible invalid reads.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      09b23786
    • Anton Khirnov's avatar
      pcx: check that the packet is large enough before reading the header · 221402c1
      Anton Khirnov authored
      Fixes possible invalid reads.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      221402c1
    • Anton Khirnov's avatar
      pcx: properly pad the scanline · 15ee419b
      Anton Khirnov authored
      It is passed to the get_bits API, which requires buffers to be padded.
      
      Fixes possible invalid reads.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      15ee419b
    • Anton Khirnov's avatar
      cook: use the bytestream2 API for reading extradata · 409d1cd2
      Anton Khirnov authored
      Fixes possible invalid reads in corrupted files.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      409d1cd2
    • Anton Khirnov's avatar
      qpeg: fix an off by 1 error in the MV check · bba9d8bd
      Anton Khirnov authored
      height - me_y is the line from which we read, so it must be strictly
      smaller than the frame height. Fixes possible invalid reads in corrupted
      files.
      
      Also, use a proper context for logging the error.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      bba9d8bd
    • Anton Khirnov's avatar
      alac: do not return success if nothing was decoded · 796dca02
      Anton Khirnov authored
      If we encounter an END element before anything is decoded, we would
      return success even though the output frame has not been allocated,
      which is invalid.
      
      CC: libav-stable@libav.org
      Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
      796dca02