Commits · feb13aed794a7f1a1f8395159e9b077351348a34 · Linshizhi / ffmpeg.wasm-core

13 Jun, 2017 13 commits
- avfilter/vf_signature: fix memory leaks in error cases · feb13aed
  Timo Rothenpieler authored Jun 11, 2017
```
Fixes CIDs 1403234 and 1403235
```
  feb13aed
- avformat/pcmdec: fix memory leak · a5b5ce26
  Timo Rothenpieler authored Jun 11, 2017
```
Fixes CID 1396267
```
  a5b5ce26
- avformat/librtmp: check return value of setsockopt · 4b2a2969
  Timo Rothenpieler authored Jun 11, 2017
```
Fixes CID 1396837
```
  4b2a2969
- avfilter/vf_scale_npp: fix out-of-bounds reads · 0fbc9bbb
  Timo Rothenpieler authored Jun 11, 2017
```
Fixes CIDs 1396414 and 1396415
```
  0fbc9bbb
- avfilter/unsharp: fix uninitialized pointer read · 21583e93
  Timo Rothenpieler authored Jun 11, 2017
```
Fixes CID 1396855
```
  21583e93
- lavc/aarch64/simple_idct: fix idct_col4_top coefficient · 8aa60606
  Matthieu Bouron authored Jun 13, 2017
```
Fixes regression introduced by 5d0b8b1a.
```
  8aa60606
- avcodec/aacsbr_fixed: Fix signed integer overflow in sbr_hf_inverse_filter() · 4cc2a357
  Michael Niedermayer authored Jun 13, 2017
```
Fixes: runtime error: signed integer overflow: 2147483584 + 128 cannot be represented in type 'int'
Fixes: 2164/clusterfuzz-testcase-minimized-4715936172998656

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  4cc2a357
- avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble() · d1992448
  Michael Niedermayer authored Jun 13, 2017
```
Fixes: runtime error: shift exponent -10 is negative

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  d1992448
- avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible · d549f026
  Michael Niedermayer authored Jun 13, 2017
```
Fixes: 1775/clusterfuzz-testcase-minimized-5330288148217856

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  d549f026
- avfilter: properly set SAR for A->V filters · f85cad79
  Paul B Mahol authored Jun 13, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
  f85cad79
- lavc/mediacodecdec: switch to the new generic filtering mechanism · 3839580b
  Matthieu Bouron authored Jun 09, 2017
  
  3839580b
- avcodec/put_bits: Implement put_bits32() in a single pass instead of 2 passes writing 16bits each · 4f9e958b
  Michael Niedermayer authored Jun 13, 2017
```
820 cpu cycles -> 660 cpu cycles for 100 put_bits32()
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  4f9e958b
- avcodec/golomb: Assert that the input is not too large in set_ue_golomb() · db93fd74
  Michael Niedermayer authored Jun 13, 2017
```
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
  db93fd74
12 Jun, 2017 5 commits
- tools/sofa2wavs: add license header · 6e09e126
  Paul B Mahol authored Jun 12, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
  6e09e126
- avcodec/vp9: ipred_dr_16x16_16 avx2 implementation · 81fc617c
  Ilia Valiakhmetov authored Jun 10, 2017
```
Signed-off-by: Ilia Valiakhmetov <zakne0ne@gmail.com>
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
```
  81fc617c
- tools: add sofa2wavs · 1a30bf60
  Paul B Mahol authored Jun 09, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
  1a30bf60
- avfilter: add native headphone spatialization filter · d4d1fc82
  Paul B Mahol authored Jun 07, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
  d4d1fc82
- x86inc: Add some additional cpuflag relations · aad1b678
  Henrik Gramner authored May 06, 2017
```
Simplifies writing assembly code that depends on available instructions.

LZCNT implies SSE2
BMI1 implies AVX+LZCNT
AVX2 implies BMI2
```
  aad1b678
11 Jun, 2017 11 commits

avcodec/libvpxdec: Check that display dimensions fit in the storage dimensions · f8593c2f

Michael Niedermayer authored Jun 07, 2017

Fixes assertion failure
Fixes: 2112/clusterfuzz-testcase-minimized-4526878557732864

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

f8593c2f

avcodec/avpacket: Limit iterations in ff_packet_split_and_drop_side_data() · 07339a45

Michael Niedermayer authored Jun 11, 2017

This avoids scaning beyond what a valid packet can contain
Fixes: Timeout
Fixes: 541/clusterfuzz-testcase-610189291657625

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

07339a45

avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123 · d24043e1

Michael Niedermayer authored Jun 11, 2017

Fixes: 2208/clusterfuzz-testcase-minimized-5976593765761024

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

d24043e1

avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 +... · c996374d

Michael Niedermayer authored Jun 11, 2017

avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int'

Fixes: 2181/clusterfuzz-testcase-minimized-6314784322486272

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

c996374d

avformat/mov: add support for reading VP Codec Configuration Box · e3887c0a

James Almer authored May 27, 2017

As defined in "VP Codec ISO Media File Format Binding v1.0"
https://github.com/webmproject/vp9-dash/blob/master/VPCodecISOMediaFileFormatBinding.mdSigned-off-by: James Almer <jamrial@gmail.com>

e3887c0a

avcodec/snowdec: Fix runtime error: left shift of negative value -1 · 2e441263

Michael Niedermayer authored Jun 11, 2017

Fixes: 2197/clusterfuzz-testcase-minimized-6010716676947968

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

2e441263

avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616 · 6d499ece

Michael Niedermayer authored Jun 11, 2017

Fixes: 2195/clusterfuzz-testcase-minimized-4736721533009920

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

6d499ece

avcodec/gdv: fix compiler warnings · 9a949cdf
Paul B Mahol authored Jun 11, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
9a949cdf
avformat: add Gremlin Digital Video demuxer · c9484148
Paul B Mahol authored Jun 02, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
c9484148
avcodec: add Gremlin Digital Video decoder · d1c08027
Paul B Mahol authored Jun 02, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
d1c08027
avcodec: add Gremlin DPCM decoder · 29bdcf58
Paul B Mahol authored Jun 02, 2017
```
Signed-off-by: Paul B Mahol <onemda@gmail.com>
```
29bdcf58

10 Jun, 2017 6 commits

avcodec/tiff: Fix leak of geotags[].val · 22a25ab3

Michael Niedermayer authored Jun 10, 2017

Fixes: 2176/clusterfuzz-testcase-minimized-5908197216878592

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

22a25ab3

avcodec/fft_template: Fix multiple runtime error: signed integer overflow:... · 1197c048

Michael Niedermayer authored May 27, 2017

avcodec/fft_template: Fix multiple runtime error: signed integer overflow: -1943918714 - 1935113003 cannot be represented in type 'int'

Fixes: 1735/clusterfuzz-testcase-minimized-5350472347025408

This uses unsigned instead of SUINT because the later was rejected by multiple developers
See: [FFmpeg-devel] [PATCH] avcodec/fft_template: Fix multiple runtime error: signed integer overflow: -1943918714 - 1935113003 cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

1197c048

avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073... · 71da0a5c

Michael Niedermayer authored Jun 10, 2017

avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int'

Fixes: 2175/clusterfuzz-testcase-minimized-5809657849315328

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

71da0a5c

avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296... · 90e8317b

Michael Niedermayer authored Jun 10, 2017

avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'

Fixes: 2174/clusterfuzz-testcase-minimized-5739234533048320

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

90e8317b

avcodec/cfhd: Check band parameters before storing them · 54aaadf6

Michael Niedermayer authored Jun 10, 2017

Fixes out of array read
Fixes: 2169/clusterfuzz-testcase-minimized-5688641642823680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

54aaadf6

fate: add test for -time_base option · 50be8f21

Michael Bradshaw authored Jun 09, 2017

Signed-off-by: Michael Bradshaw <mjbshaw@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

50be8f21

09 Jun, 2017 5 commits

avcodec/h264_parse: Check picture structure when initializing weight table · 09096fb6

Michael Niedermayer authored Jun 09, 2017

Fixes: runtime error: index 49 out of bounds for type 'int [48][2][2]'
Fixes: 2159/clusterfuzz-testcase-minimized-5267945972301824

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

09096fb6

avcodec/dvbsubdec: Check pixel buffer size constraint from ETSI EN 300 743 V1.3.1 · e1b0044c

Michael Niedermayer authored Jun 09, 2017

Fixes: OOM
Fixes: 2143/clusterfuzz-testcase-minimized-5482288060039168

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: Michael Niedermayer <michael@niedermayer.cc>

e1b0044c

avcodec/dvbsubdec: Use av_image_check_size2() · 4bcde261
Michael Niedermayer authored Jun 09, 2017
```
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
```
4bcde261

lavf/mov.c: offset index timestamps by the minimum pts to make first pts zero · 93db5e3f

Sasi Inguva authored Jun 06, 2017

If the videos starts with B frame, then the minimum composition time
as computed by stts + ctts will be non-zero. Hence we need to shift
the DTS, so that the first pts is zero. This was the intention of that
code-block. However it was subtracting by the wrong amount.

For example, for one of the videos in the bug nonFormatted.mp4 we have

stts:
sample_count  duration
960           1001

ctts:
sample_count  duration
1             3003
2             0
1             3003
....

The resulting composition times are :  3003, 1001, 2002, 6006, ...

The minimum composition time or PTS is 1001, which should be used to
offset DTS. However the code block was wrongly using ctts[0] which is
3003. Hence the PTS was negative. This change computes the minimum pts
encountered while fixing the index, and then subtracts it from all the
timestamps after the edit list fixes are applied.

Samples files available from:

https://bugs.chromium.org/p/chromium/issues/detail?id=721451
https://bugs.chromium.org/p/chromium/issues/detail?id=723537

fate-suite/h264/twofields_packet.mp4 is a similar file starting with 2
B frames. Before this change the PTS of first two B-frames was -6006
and -3003, and I am guessing one of them got dropped when being decoded
and remuxed  to the framecrc before, and now it is not being dropped.
Signed-off-by: Sasi Inguva <isasi@google.com>

93db5e3f

vf_colorspace: Add a pixdesc API alias name for bt2020nc color space · c12e8f5f
Vittorio Giovara authored Jun 09, 2017

c12e8f5f