- 22 Feb, 2017 1 commit
-
-
Michael Niedermayer authored
Fixes: 644/clusterfuzz-testcase-4726434209726464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>
-
- 17 Nov, 2016 2 commits
-
-
Michael Niedermayer authored
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-
Michael Niedermayer authored
Fixes Ticket5936 Regression since c5fc8ae1Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-
- 16 Sep, 2016 1 commit
-
-
Michael Niedermayer authored
Fix out of bounds read. Bug-Id: 962 Found by: F4B3CD@STARLAB and Agostino Sarubbo Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
-
- 17 Aug, 2016 1 commit
-
-
Diego Biurrun authored
-
- 04 May, 2016 1 commit
-
-
Vittorio Giovara authored
Signed-off-by: Diego Biurrun <diego@biurrun.de>
-
- 05 Mar, 2016 2 commits
-
-
Luca Barbato authored
-
Luca Barbato authored
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
-
- 27 Jul, 2015 1 commit
-
-
Vittorio Giovara authored
Convert doxygen to multiline and express bitfields more simply. Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
-
- 08 Jun, 2015 1 commit
-
-
Vittorio Giovara authored
-
- 31 May, 2015 1 commit
-
-
Vittorio Giovara authored
-
- 22 May, 2015 1 commit
-
-
Vittorio Giovara authored
They are just duplicates of AVCodecContext members so use those instead.
-
- 11 Mar, 2015 1 commit
-
-
Michael Niedermayer authored
Found-by: Clang -fsanitize=shift Reported-by: Thierry Foucu <tfoucu@google.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 08 Mar, 2015 2 commits
-
-
Michael Niedermayer authored
No testcase available Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
Michael Niedermayer authored
Fixes Ticket4299 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 04 Feb, 2015 1 commit
-
-
Michael Niedermayer authored
Fixes integer overflow and out of array read Fixes: asan_heap-oob_1fb2f9b_3780_cov_3984375136_usf.mkv Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 15 Aug, 2014 1 commit
-
-
Diego Biurrun authored
-
- 23 Jun, 2014 1 commit
-
-
Diego Biurrun authored
-
- 12 Jun, 2014 1 commit
-
-
Michael Niedermayer authored
Fixes fate-vsynth3-wmv2 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 29 May, 2014 1 commit
-
-
Diego Biurrun authored
-
- 09 Apr, 2014 1 commit
-
-
wm4 authored
The most interesting parts are initialization in ff_MPV_common_init() and uninitialization in ff_MPV_common_end(). ff_mpeg_unref_picture and ff_thread_release_buffer have additional NULL checks for Picture.f, because these functions can be called on uninitialized or partially initialized Pictures. NULL pointer checks are added to ff_thread_release_buffer() stub function. Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
-
- 16 Mar, 2014 1 commit
-
-
Vittorio Giovara authored
-
- 13 Mar, 2014 1 commit
-
-
Diego Biurrun authored
-
- 09 Jan, 2014 1 commit
-
-
Anton Khirnov authored
Several decoders disable those anyway and they are not measurably faster on x86. They might be somewhat faster on other platforms due to missing emu edge SIMD, but the gain is not large enough (and those decoders relevant enough) to justify the added complexity.
-
- 15 Nov, 2013 1 commit
-
-
Ronald S. Bultje authored
Allow supporting files for which the image stride is smaller than the maximum block size + number of subpel mc taps, e.g. a 64x64 VP9 file or a 16x16 VP8 file with -fflags +emu_edge.
-
- 12 Nov, 2013 1 commit
-
-
Michael Niedermayer authored
Fixes out of array reads Fixes part of: MSVR 440 (the other issues seem to have been fixed already) Found-by: Jeremy Brown (jerbrown) of ReSP Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 15 Oct, 2013 4 commits
-
-
Luca Barbato authored
-
Luca Barbato authored
-
Luca Barbato authored
-
Ronald S. Bultje authored
-
- 29 Sep, 2013 1 commit
-
-
Ronald S. Bultje authored
This allows supporting files for which the image stride is smaller than the max. block size + number of subpel mc taps, e.g. a 64x64 VP9 file or a 16x16 VP8 file with -fflags +emu_edge.
-
- 28 Sep, 2013 1 commit
-
-
Ronald S. Bultje authored
This prevents emulated_edge_mc from not undoing mvy*stride-related integer overflows. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 04 Sep, 2013 2 commits
-
-
Michael Niedermayer authored
Currently all uses of the emu edge code as well as the code itself assume int linesize changing some but not changing all would introduce a security issue once all use this typedef a simple search and replace can be done to switch them all to ptrdiff_t Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
Martin Storsjö authored
This makes sure that linesize * start_y doesn't overflow, so that emulated_edge_mc can get back the original value if needed. Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st>
-
- 19 Apr, 2013 2 commits
-
-
Ronald S. Bultje authored
This also converts vc1, since that is mpegvideo-based. Signed-off-by: Martin Storsjö <martin@martin.st>
-
Michael Niedermayer authored
avcodec/mpegvideo_motion: Use a field from the current frame if the last is unavailable in DMV & 16x8 Fixes null pointer dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 18 Apr, 2013 1 commit
-
-
Michael Niedermayer authored
If a reference is unavailable use a field from the current picture Fixes null pointer dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 05 Apr, 2013 1 commit
-
-
Diego Biurrun authored
-
- 28 Mar, 2013 1 commit
-
-
Michael Niedermayer authored
The gmc functions access more pixels than there is allocated memory. Fixes out of array reads Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-
- 13 Mar, 2013 1 commit
-
-
Ronald S. Bultje authored
This also converts vc1, since that is mpegvideo-based.
-