Commits · cfd1ecdc0bb039014fbb40b45edb88121bad92f9 · Linshizhi / ffmpeg.wasm-core

22 May, 2017 13 commits

avcodec/asvdec: Check buf_size · cfd1ecdc

Michael Niedermayer authored May 22, 2017

Fixes Timeout
Fixes: 1746/clusterfuzz-testcase-minimized-6687393392361472

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

cfd1ecdc

avcodec/takdec: Fix runtime error: signed integer overflow: 2146548196 +... · f95f9f97

Michael Niedermayer authored May 22, 2017

avcodec/takdec: Fix runtime error: signed integer overflow: 2146548196 + 2156738 cannot be represented in type 'int'

Fixes: 1743/clusterfuzz-testcase-minimized-4994834022531072

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

f95f9f97

avcodec/takdec: Fix runtime error: left shift of negative value -360 · 0ce7cf0c

Michael Niedermayer authored May 22, 2017

Fixes: 1739/clusterfuzz-testcase-minimized-5399237707694080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

0ce7cf0c

avcodec/takdec: Fix multiple runtime error: signed integer overflow: -512 *... · 64d0dad9

Michael Niedermayer authored May 20, 2017

avcodec/takdec: Fix multiple runtime error: signed integer overflow: -512 * 4563386 cannot be represented in type 'int'

Fixes: 1706/clusterfuzz-testcase-minimized-6112772670619648

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

64d0dad9

avcodec/mlpdec: Fix runtime error: shift exponent -5 is negative · 42e42af7

Michael Niedermayer authored May 20, 2017

Fixes part of 1708/clusterfuzz-testcase-minimized-5035111957397504

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

42e42af7

avcodec/escape124: Check depth against num_superblocks · da617408

Michael Niedermayer authored May 20, 2017

Fixes: runtime error: left shift of 66184 by 15 places cannot be represented in type 'int'
Fixes: 1707/clusterfuzz-testcase-minimized-6502767008940032

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

da617408

lavf/hls: do not transfer custom IO flag · ef010612
Clément Bœsch authored May 22, 2017
```
See 0dcac9c3
```
ef010612

lavf/concatdec: do not transfer custom IO flag · 0dcac9c3

Clément Bœsch authored May 22, 2017

If the source is using a custom IO, setting this flag causes heavy leaks
since the segments will not have their avio context closed.

Regression since f5da453b.

0dcac9c3

Use AVOnce as a static variable consistently · 9fb293cf

Hendrik Leppkes authored May 22, 2017

Using AVOnce as a stack variable makes no sense as the state is lost
when the function exits.

This fixes repeated calls to av(filter/device)_register_all

9fb293cf

avfilter/avf_showspectrum: properly initialize pts · 49d06781
Paul B Mahol authored May 22, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
49d06781

avcodec/ivi_dsp: Fix multiple runtime error: left shift of negative value -71 · 8fb00b3e

Michael Niedermayer authored May 21, 2017

Fixes: 1734/clusterfuzz-testcase-minimized-5385630815092736

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

8fb00b3e

avcodec/dct32_template: Fix runtime error: signed integer overflow:... · a1cbf53c

Michael Niedermayer authored May 21, 2017

avcodec/dct32_template: Fix runtime error: signed integer overflow: -1071326067 - 1088238847 cannot be represented in type 'int'

Fixes: 1731/clusterfuzz-testcase-minimized-5123972414832640

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

a1cbf53c

avcodec/mjpegdec: Fix runtime error: signed integer overflow: -32767 * 130560... · 40fa6a2f

Michael Niedermayer authored May 21, 2017

avcodec/mjpegdec: Fix runtime error: signed integer overflow: -32767 * 130560 cannot be represented in type 'int'

Fixes: 1724/clusterfuzz-testcase-minimized-4842395432648704

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

40fa6a2f

21 May, 2017 14 commits

lavf/img2: Add svg and svgz to allow reading image sequences. · 7f60dc03
Carl Eugen Hoyos authored May 21, 2017
```
Increase the return value for svg_probe() to make it != AVPROBE_SCORE_EXTENSION.
```
7f60dc03
lavf/riff: Support more vlc fourcc's for 12 and 16 bit yuv4xx. · 017a68e8
Carl Eugen Hoyos authored May 21, 2017

017a68e8

avcodec/aacdec_fixed: Fix runtime error: shift exponent 34 is too large for 32-bit type 'int' · b5228e44

Michael Niedermayer authored May 21, 2017

Fixes: 1721/clusterfuzz-testcase-minimized-4719352135811072

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

b5228e44

avcodec/mpeg4videodec: Check for multiple VOL headers · efeb47fd

Michael Niedermayer authored May 21, 2017

Fixes multiple: runtime error: signed integer overflow: 2147115008 + 413696 cannot be represented in type 'int'
Fixes: 1723/clusterfuzz-testcase-minimized-5309409372667904
Fixes: 1727/clusterfuzz-testcase-minimized-5900685306494976
Fixes: 1737/clusterfuzz-testcase-minimized-5922321338466304

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

efeb47fd

avcodec/vp9block: fix runtime error: signed integer overflow: 196675 * 20670... · d4ee7678

Michael Niedermayer authored May 21, 2017

avcodec/vp9block: fix runtime error: signed integer overflow: 196675 * 20670 cannot be represented in type 'int'

Fixes: 1710/clusterfuzz-testcase-minimized-4837032931098624

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegReviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

d4ee7678

avcodec/vmnc: Check location before use · ec2b76aa

Michael Niedermayer authored May 21, 2017

Fixes: runtime error: signed integer overflow: 65535 * 64256 cannot be represented in type 'int'
Fixes: 1717/clusterfuzz-testcase-minimized-5491696676634624

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

ec2b76aa

avcodec/takdec: Fix runtime error: signed integer overflow: 8192 * 524308... · 955db411

Michael Niedermayer authored May 16, 2017

avcodec/takdec: Fix runtime error: signed integer overflow: 8192 * 524308 cannot be represented in type 'int'

Fixes: 1630/clusterfuzz-testcase-minimized-6326111917047808

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

955db411

avcodec/wavpack: Fix multiple runtime error: signed integer overflow: 548 *... · 3b09d7c2

Michael Niedermayer authored May 18, 2017

avcodec/wavpack: Fix multiple runtime error: signed integer overflow: 548 * -2147483648 cannot be represented in type 'int'

Fixes: 1659/clusterfuzz-testcase-minimized-5396490639900672

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

3b09d7c2

avcodec/aac_defines: Fix: runtime error: left shift of negative value -2 · c3547dcb

Michael Niedermayer authored May 21, 2017

Fixes: 1716/clusterfuzz-testcase-minimized-4691012196761600

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

c3547dcb

avcodec/takdec: Fix runtime error: left shift of negative value -63 · d6619325

Michael Niedermayer authored May 21, 2017

Fixes: 1713/clusterfuzz-testcase-minimized-5791887476654080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

d6619325

avcodec/mlpdsp: Fix runtime error: signed integer overflow: -24419392 * 128... · 1d04fc94

Michael Niedermayer authored May 21, 2017

avcodec/mlpdsp: Fix runtime error: signed integer overflow: -24419392 * 128 cannot be represented in type 'int'

Fixes: 1711/clusterfuzz-testcase-minimized-5248503515185152

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

1d04fc94

avcodec/sbrdsp_fixed: fix runtime error: left shift of 1 by 31 places cannot... · 384508b2

Michael Niedermayer authored May 20, 2017

avcodec/sbrdsp_fixed: fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int'

Fixes: part of 1709/clusterfuzz-testcase-minimized-4513580554649600

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

384508b2

avcodec/aacsbr_fixed: Fix multiple runtime error: shift exponent 170 is too... · 6310fc71

Michael Niedermayer authored May 20, 2017

avcodec/aacsbr_fixed: Fix multiple runtime error: shift exponent 170 is too large for 32-bit type 'int'

Fixes part of 1709/clusterfuzz-testcase-minimized-4513580554649600

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

6310fc71

configure: fix --tempprefix option · 8794cfbb
James Almer authored May 21, 2017
```
It was broken in 091c9860
```
8794cfbb

20 May, 2017 13 commits

avfilter: take_samples: do not directly return frame when samples are skipped · fc3a03fc

Muhammad Faiz authored May 18, 2017

Modifying data pointer when skipping samples may make it unaligned.
Workaround for Ticket6349.

This should fix the crash of ticket's testcase and a crash/regression
with avxsynth (reported by Michael Niedermayer).

Also change frame->nb_samples < max to frame->nb_samples <= max.
This improves performance. Benchmark:
./ffmpeg -filter_complex "aevalsrc=0:n=1166,firequalizer=fixed=on" -f null null
old:
  25767 decicycles in take_samples,    1023 runs,      1 skips
  25422 decicycles in take_samples,    2047 runs,      1 skips
  25181 decicycles in take_samples,    4095 runs,      1 skips
  24904 decicycles in take_samples,    8191 runs,      1 skips

new:
    550 decicycles in take_samples,    1024 runs,      0 skips
    548 decicycles in take_samples,    2048 runs,      0 skips
    545 decicycles in take_samples,    4096 runs,      0 skips
    544 decicycles in take_samples,    8192 runs,      0 skips
Reviewed-by: Nicolas George <george@nsup.org>
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Muhammad Faiz <mfcc64@gmail.com>

fc3a03fc

avcodec/decode: fix function name · f20161d8
James Almer authored May 20, 2017

f20161d8
decode: fix the code reducing cropping to preserve alignment · 02327d12
Anton Khirnov authored May 19, 2017
```
Currently it does not work at all.

Libav Bug-Id: 1058
(cherry picked from commit 8652a2c2)
```
02327d12

avcodec/g723_1dec: Clip after shift in estimate_sid_gain() · 23868ad5

Michael Niedermayer authored May 20, 2017

Fixes: runtime error: left shift of 706 by 22 places cannot be represented in type 'int'
See: L_shl() in the reference software
Fixes: 1609/clusterfuzz-testcase-minimized-5102163007111168

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

23868ad5

Merge commit '' · 1a950f32

Clément Bœsch authored May 20, 2017

* commit 'e519dcd9':
  dashenc: separate segments based on current segment duration
Merged-by: Clément Bœsch <u@pkh.me>

1a950f32

Merge commit '' · e8151113

Clément Bœsch authored May 20, 2017

* commit '1920382a':
  dashenc: add option to provide UTC timing source

Also use E instead of AV_OPT_FLAG_ENCODING_PARAM to be consistent with
the other AVOption.
Merged-by: Clément Bœsch <u@pkh.me>

e8151113

Merge commit '' · a8ad127a

Clément Bœsch authored May 20, 2017

* commit 'ba6a49e6':
  configure: Clean up temporary files on interrupt
Merged-by: Clément Bœsch <u@pkh.me>

a8ad127a

Merge commit '' · 091c9860

Clément Bœsch authored May 20, 2017

* commit '78489822':
  configure: Place all temporary files in one separate directory
Merged-by: Clément Bœsch <u@pkh.me>

091c9860

Merge commit '' · e78dc578

Clément Bœsch authored May 20, 2017

* commit '11e225db':
  rtmp: Account for bytes_read wraparound

This commit is a noop, see 0849a0ebMerged-by: Clément Bœsch <u@pkh.me>

e78dc578

Merge commit '' · 1ff55e12

Clément Bœsch authored May 20, 2017

* commit 'ca6ae3b7':
  vaapi_encode: Add MPEG-2 support

This commit is a noop, see 3b95c7c1Merged-by: Clément Bœsch <u@pkh.me>

1ff55e12

Merge commit '' · ba3adea9

Clément Bœsch authored May 20, 2017

* commit '3c2717e4':
  dashenc: increase buffer time hint in the manifest
Merged-by: Clément Bœsch <u@pkh.me>

ba3adea9

Merge commit '' · 77a20cff

Clément Bœsch authored May 20, 2017

* commit '95f1004b':
  dashenc: add mandatory id to AdaptationSet and Period in manifest
Merged-by: Clément Bœsch <u@pkh.me>

77a20cff

Merge commit '' · 93bf0480

Clément Bœsch authored May 20, 2017

* commit '1ae6cb7d':
  dashenc: fix ISO8601 UTC parsing
Merged-by: Clément Bœsch <u@pkh.me>

93bf0480