1. 28 May, 2015 2 commits
  2. 19 Apr, 2015 1 commit
  3. 17 Feb, 2015 1 commit
  4. 08 Jan, 2015 2 commits
    • wm4's avatar
      avcodec/dvdsubdec: fix accessing dangling pointers · 81657771
      wm4 authored
      dvdsub_decode() can call append_to_cached_buf() 2 times, the second time
      with ctx->buf as argument. If the second append_to_cached_buf() reallocs
      ctx->buf, the argument will be a pointer to the previous, freed block.
      This can cause invalid reads at least with some fuzzed files - and
      possibly with valid files.
      
      Since packets can apparently not be larger than 64K (even if packets are
      combined), just use a fixed size buffer. It will be allocated as part of
      the DVDSubContext, and although some memory is "wasted", it's relatively
      minimal by modern standards and should be acceptable.
      Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
      81657771
    • wm4's avatar
      avcodec/dvdsubdec: error on bitmaps with size 0 · bcaa9099
      wm4 authored
      Attemtping to decode them could lead to invalid writes with some fuzzed
      samples.
      Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
      bcaa9099
  5. 05 Jan, 2015 1 commit
  6. 13 Dec, 2014 1 commit
  7. 21 Nov, 2014 1 commit
  8. 16 Nov, 2014 1 commit
  9. 15 Nov, 2014 1 commit
  10. 22 Sep, 2014 1 commit
  11. 19 Sep, 2014 1 commit
  12. 16 Aug, 2014 1 commit
  13. 15 Aug, 2014 2 commits
  14. 31 Jul, 2014 1 commit
  15. 03 Jul, 2014 2 commits
  16. 04 Apr, 2014 1 commit
  17. 13 Mar, 2014 1 commit
  18. 10 Dec, 2013 1 commit
  19. 07 Nov, 2013 1 commit
  20. 06 Nov, 2013 1 commit
  21. 31 Oct, 2013 1 commit
  22. 04 Oct, 2013 3 commits
  23. 03 Oct, 2013 1 commit
  24. 30 Jun, 2013 1 commit
  25. 15 May, 2013 1 commit
  26. 05 May, 2013 1 commit
  27. 04 May, 2013 1 commit
  28. 08 Apr, 2013 1 commit
  29. 07 Mar, 2013 1 commit
  30. 03 Mar, 2013 1 commit
  31. 19 Jan, 2013 1 commit
  32. 15 Jan, 2013 1 commit
  33. 12 Jan, 2013 1 commit
  34. 05 Dec, 2012 1 commit