- 17 Jan, 2016 6 commits
-
-
Michael Niedermayer authored
Fixes: 451b3e0cf956c0bd2f27ed753ac24050/asan_heap-oob_2873c01_3231_7ed10a9464d15f0d57277f5917c566a8.AVI Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:Michael Niedermayer <michael@niedermayer.cc>
-
Eddie Hao authored
Signed-off-by: -
Michael Niedermayer authored
Fixes: 372d2df1f04b49e25f109f07f90b1505/asan_heap-oob_2835d2e_8501_99e0114d7ba3a6db885d0b4684d200c1.cine Fixes out of array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
Fixes: 372d2df1f04b49e25f109f07f90b1505/asan_heap-oob_2835d2e_8501_99e0114d7ba3a6db885d0b4684d200c1.cine Fixes out of array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
Fixes: 1b79b985cdf860ffa228c00ee5497051/signal_sigsegv_1f99d24_3549_86d92054a79f6ff900fbaf03f8012b32.aif Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
James Almer authored
Reviewed-by:
Paul B Mahol <onemda@gmail.com> Signed-off-by:
James Almer <jamrial@gmail.com>
-
- 16 Jan, 2016 4 commits
-
-
Michael Niedermayer authored
Fixes out of array read Fixes: 1b79b985cdf860ffa228c00ee5497051/signal_sigsegv_1f99d24_315_f0f1fdb451264b1138e9c24eb7d49181.wv Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
Fixes null pointer dereference Fixes: 10412fc52ecc6eab40ed67f82ca7b372/signal_sigsegv_2618c99_2129_f808373959e46afb165593332799ffbc.aif Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Mats Peterson authored
Signed-off-by: -
Mats Peterson authored
Signed-off-by:
-
- 15 Jan, 2016 16 commits
-
-
Michael Niedermayer authored
This decreases the MV related encoding table sizes This should have little effect on real world video encoding performance Signed-off-by: -
Andreas Cadhalpun authored
s->ac_val[0][0] is of type 'int16_t [16]', but points into a larger buffer. Here it is used as base pointer to find the correct position in the larger buffer by adding 's->block_index[n] * 16' and thus as 'int16_t *'. This fixes clang's ubsan runtime error: index out of bounds for type 'int16_t [16]' Fixes: test_case.mp4 Found-by:
Tyson Smith <twsmith@mozilla.com> Reviewed-by:
Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-
Ganesh Ajjanagadde authored
This improves accuracy (very slightly) and speed for processors having fma3. Sample benchmark (fate flac-16-lpc-cholesky, Haswell): old: 5993610 decicycles in ff_lpc_calc_coefs, 64 runs, 0 skips 5951528 decicycles in ff_lpc_calc_coefs, 128 runs, 0 skips new: 5252410 decicycles in ff_lpc_calc_coefs, 64 runs, 0 skips 5232869 decicycles in ff_lpc_calc_coefs, 128 runs, 0 skips Tested with FATE and --disable-fma3, also examined contents of lavu/lls-test. Reviewed-by:
Henrik Gramner <henrik@gramner.com> Signed-off-by:
Ganesh Ajjanagadde <gajjanagadde@gmail.com>
-
Paul B Mahol authored
Fixes regression causing segfault. Signed-off-by: -
Piotr Bandurski authored
-
Piotr Bandurski authored
-
Paul B Mahol authored
Signed-off-by: -
James Almer authored
Signed-off-by: -
Michael Niedermayer authored
this should fix checkasm on x86_64-archlinux-gcc-valgrind Signed-off-by: -
Michael Niedermayer authored
Signed-off-by: -
Michael Niedermayer authored
This fixes a null pointer dereference at least Signed-off-by: -
Michael Niedermayer authored
No case is known where these are needed Signed-off-by: -
James Almer authored
Also change the format specifier to expect an unsigned int Signed-off-by: -
Mats Peterson authored
Confine the 0x00000000 to 'raw '/'twos' fourcc mapping to old version 0 sound sample descriptions, since they are the only valid sample descriptions for this type of mapping. Signed-off-by: -
Michael Niedermayer authored
Fixes out of array accesses Fixes: 0cf176e6d3ab9fe924f39738e513f547/asan_generic_4a54aa_3431_aaa28be1cb32e307a9890cad06f84fba.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
Fixes out of array access Fixes: 0cf176e6d3ab9fe924f39738e513f547/asan_generic_4a54aa_3431_aaa28be1cb32e307a9890cad06f84fba.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by:
-
- 14 Jan, 2016 14 commits
-
-
Andreas Cadhalpun authored
This fixes infinite loops due to seeking back. Reviewed-by:
Alexandra Hájková <alexandra.khirnova@gmail.com> Signed-off-by:
-
Andreas Cadhalpun authored
asf_read_payload can unset eof_reached, so check it also before calling that function. This fixes infinite loops. Reviewed-by:
-
Andreas Cadhalpun authored
This fixes infinite loops due to seeking back. Reviewed-by:
-
Andreas Cadhalpun authored
This fixes infinite loops. Reviewed-by:
-
Andreas Cadhalpun authored
The loop can be very long, even though the file is very short. Reviewed-by:
-
Andreas Cadhalpun authored
Both avio_skip and detect_unknown_subobject use int64_t for the size parameter. This fixes a segmentation fault due to infinite recursion. Reviewed-by:
-
Andreas Cadhalpun authored
Otherwise invalid values are used unchecked in the next run. This can cause NULL pointer dereferencing. Reviewed-by:
-
Andreas Cadhalpun authored
This fixes ubsan runtime error: signed integer overflow: 8388608 + 2140274688 cannot be represented in type 'int' Reviewed-by:
-
Ganesh Ajjanagadde authored
Reviewed-by:
Claudio Freire <klaussfreire@gmail.com> Signed-off-by:
-
Michael Niedermayer authored
Fixes: asan_heap-oob_445b39_1741_d00eb645ab48eb2203b4a04a5b997103.ivr Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
Fixes out of array access Fixes: asan_heap-oob_445b39_1741_d00eb645ab48eb2203b4a04a5b997103.ivr Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: -
Michael Niedermayer authored
No case known where that makes a difference Signed-off-by: -
Aman Gupta authored
Sometimes rollup captions can move around the screen. This fixes "ghost" captions from below the current rollup area from continuing to be captured when a rollup moves higher up on the screen.
-
Aman Gupta authored
-
