eessppeelllloo/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-06-16 04:32:47 +02:00
Code Issues Packages Projects Releases Wiki Activity
87,977 Commits 39 Branches 423 Tags
28398a70a975813f8a110bf83172e3bbc825adde
Commit Graph

87977 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Niedermayer 28398a70a9 avcodec/aacdec_templat: Fix integer overflow in apply_ltp() 
Fixes: signed integer overflow: -1625276744 + -1041893960 cannot be represented in type 'int'
Fixes: 5948/clusterfuzz-testcase-minimized-5791479856365568

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 33fe17bdc8)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer c8f54bf87c avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53() 
Fixes: 5918/clusterfuzz-testcase-minimized-5120505435652096

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 793347a545)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 5c2e61f1f5 avcodec/diracdec: Use int64 in global mv to prevent overflow 
Fixes: runtime error: signed integer overflow: 361 * -6295541 cannot be represented in type 'int'
Fixes: 5911/clusterfuzz-testcase-minimized-6450382197751808

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit cbcbefdc3b)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 3fc7e88bfd avcodec/dxtory: Remove code that corrupts dimensions 
Fixes: Timeout
Fixes: 5796/clusterfuzz-testcase-minimized-5206729085157376

Does someone have a valid sample that triggers this path ?

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 3748746a4d)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer ad3ef9e896 avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i() 
Fixes: 5894/clusterfuzz-testcase-minimized-5315325420634112
Fixes: runtime error: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 647fa49495)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 4597b51e8a avcodec/hevcdec: Check luma/chroma_log2_weight_denom 
Fixes: signed integer overflow: 3 + 2147483647 cannot be represented in type 'int'
Fixes: 5888/clusterfuzz-testcase-minimized-5634701067812864

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit f82dd4c09b)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer fcc6932e09 avcodec/jpeg2000dec: Use av_image_check_size2() 
Fixes: OOM
Fixes: 5733/clusterfuzz-testcase-minimized-4906757966004224

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 01370b31ac)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 3f6f1c24eb avcodec/vp8: Check for bitstream end before vp7_fade_frame() 
Fixes: Timeout
Fixes: 5653/clusterfuzz-testcase-5497680018014208

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit de675648ce)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer fe435d11fb avcodec/exr: Check remaining bits in last get code loop 
Fixes: runtime error: shift exponent -7 is negative
Fixes: 3902/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_fuzzer-6081926122176512

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit dd8351b118)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 3c001b18ce avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c() 
Fixes: 5567/clusterfuzz-testcase-minimized-5769966247739392
Fixes: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ab6f571ef7)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer 1a8265487b avdevice/decklink_dec: Fix ;; 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 75027066d8)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Michael Niedermayer a1e983111e avcodec/h264_cabac: Tighten allowed coeff_abs range 
Fixes: integer overflows
Reported-by: "Xiaohan Wang (王消寒)" <xhwang@chromium.org>

Based on limits in "8.5 Transform coefficient decoding process and picture
construction process prior to deblocking  filter process"

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit f26a63c4ee)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
Xiaohan Wang 988e7a8fea avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc() 
When ff_h264_decode_mb_cavlc() failed due to wrong sl->qscale values,
e.g. dquant out of range, set the qscale to be a valid value before
returning -1 and exiting the function. The qscale value can be used
later e.g. in loop filter.

BUG=806122

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 71f39de2a5)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-06-18 01:16:03 +02:00
James Almer a877ab75eb avdevice/iec61883: free the private context at the end 
Fixes part of ticket #7146.

Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 5079e96bcc)
 2018-04-18 23:03:17 -03:00
James Almer 4264723b0e avdevice/iec61883: return reference counted packets 
Fixes part of ticket #7146, dealing with leaks of packet data since
commit 87c8812270.

Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit b8629654c6)
 2018-04-18 23:03:14 -03:00
Timo Rothenpieler 4faa01f20c configure: add nvcc to CMDLINE_SET 
This was somehow forgotten and nobody noticed until now.
 2018-04-16 22:38:11 +02:00
James Almer 1b9b469cdb avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed 
Nothing currently guarantees that the packet passed to the bsf will
be writable.

Based on commit 4f2ff3a53e

Signed-off-by: James Almer <jamrial@gmail.com>
 2018-03-28 01:42:33 -03:00
James Almer a45ba0881c avcodec/mp3_header_decompress: don't free the user provided packet on error 
It's owned by the caller.

Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit f18f973469)
 2018-03-28 01:17:51 -03:00
James Almer c289f4b6c9 avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers 
Reviewed-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit d168e78eff)
 2018-03-10 09:55:36 -03:00
James Almer e4b95f710b avformat/hvcc: zero initialize the nal buffers past the last written byte 
Prevents use of uninitialized values.

Fixes ticket #7038.

Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 9482ec1b20)
 2018-02-24 00:38:15 -03:00
Tobias Rapp 8be1edf47b swresample/rematrix: fix update of channel matrix if input or output layout is undefined 
Prefer direct in/out channel count values over channel layout, when
available. Fixes a pan filter bug (ticket #6790).

Signed-off-by: Tobias Rapp <t.rapp@noa-archive.com>
(cherry picked from commit 6325bd3717)
 2018-02-20 08:47:48 +01:00
James Almer 3fdff40a32 avformat/matroskadec: ignore CodecPrivate if the stream is VP9 
Defined in a recent revision of https://www.webmproject.org/docs/container/

This prevents storing the contents of CodecPrivate into extradata for
a codec that doesn't need nor expect any. It will among other things
prevent matroska specific binary data from being dumped onto other
formats during remuxing.

Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit acdea9e7c5)
 2018-02-19 22:16:58 -03:00
Michael Niedermayer 6a97ba5215 Changelog: update 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
n3.4.2 		2018-02-11 22:30:54 +01:00
Michael Niedermayer 2ad23b93b5 avcodec/vp3: Error out on invalid num_coeffs in unpack_vlcs() 
This fixes a hypothetical integer overflow

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit f2318aee8c)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer cec38382db avcodec/mpeg4videodec: Ignore multiple VOL headers 
Fixes: Ticket7005

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 63a4bdbf3b)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 0ff1825ea3 avcodec/vp3: Check eob_run 
Fixes: out of array access
Fixes: 5919/clusterfuzz-testcase-minimized-5859311382167552
Fixes: special case for theora (untested due to lack of sample)

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 570023eab3)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 4423cbf1b4 avcodec/pafvideo: Check allocated frame size 
Fixes: OOM
Fixes: 5549/clusterfuzz-testcase-minimized-5390553567985664

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 66acb63028)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer c4153d40d5 avcodec/scpr: Fix reading a pixel before the first 
Fixes: 5540/clusterfuzz-testcase-minimized-6122458273808384

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 0fb33a8289)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Nekopanda cc0d2f110d avcodec/mpeg2dec: Fix field selection for skipped macroblocks 
For B field pictures, the spec says,

> The prediction shall be made from the field of the same parity as the field being predicted.

I did it.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 8b154cb3e9)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 86296fe24d avcodec/huffyuvdec: Check input buffer size 
Fixes: Timeout
Fixes: 5487/clusterfuzz-testcase-4696837035393024

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 08c220d26c)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 342f1da134 avcodec/utvideodec: Fix bytes left check in decode_frame() 
Fixes: out of array read
Fixes: poc-2017.avi

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 118e1b0b33)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 5e67a2e13a avcodec/wavpack: Fix integer overflow in FFABS 
Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
Fixes: 5396/clusterfuzz-testcase-minimized-6558555529281536

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 8e50bd61e4)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer 9efd80dc09 avcodec/aacsbr_fixed: Fix overflows in rounding in sbr_hf_assemble() 
Fixes: runtime error: signed integer overflow: 2052929346 + 204817098 cannot be represented in type 'int'
Fixes: 5275/clusterfuzz-testcase-minimized-5367635958038528

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit b1bef755f6)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer ce7f65be6e avcodec/exr: Fix memleaks in decode_header() 
Fixes: 4793/clusterfuzz-testcase-minimized-5707366629638144

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 0a2560a977)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
James Almer 9b97afe7ad Changelog: update for the previous four commits 
Signed-off-by: James Almer <jamrial@gmail.com>
 2018-01-30 22:13:05 -03:00
James Almer af54886de8 avcodec/mediacodecdec: use ff_hevc_ps_uninit() 
Fixes memleaks.

Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 782e066e3e)
 2018-01-30 22:07:35 -03:00
James Almer e5bbb52194 avcodec/hevc_parser: use ff_hevc_uninit_parameter_sets() 
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 2159d4bbc3)
 2018-01-30 22:07:28 -03:00
James Almer d7d5a3379d avcodec/hevcdec: use ff_hevc_uninit_parameter_sets() 
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 1f0cf1b2f4)
 2018-01-30 22:07:21 -03:00
James Almer 64f0fd5998 avcodec/hevc_ps: add a function to uninitialize parameter set buffers 
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
(cherry picked from commit 9462b2b820)
 2018-01-30 22:06:59 -03:00
Michael Niedermayer dd93df46a6 Update for 3.4.2 
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-31 01:09:12 +01:00
Michael Niedermayer c1c50fc4a7 avcodec/dirac_dwt: Fix several integer overflows 
Fixes: runtime error: signed integer overflow: -2146071175 + -268479557 cannot be represented in type 'int'
Fixes: 5237/clusterfuzz-testcase-minimized-4569895275593728

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit fe1e6c06d0)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 23:55:43 +01:00
Michael Niedermayer d06972535e avcodec/indeo5: Do not leave frame_type set to an invalid value 
Fixes: null pointer dereference
Fixes: 5264/clusterfuzz-testcase-minimized-4621956621008896

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 2ff9f17851)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 23:45:10 +01:00
Michael Niedermayer 93437a18d8 avcodec/hevc_ps: Check log2_sao_offset_scale_* 
Fixes: 4868/clusterfuzz-testcase-minimized-6236542906400768
Fixes: runtime error: shift exponent 126 is too large for 32-bit type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 4a75a75c62)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 23:26:03 +01:00
Michael Niedermayer d07f78ae72 avcodec/mpeg4videodec: Avoid possibly aliasing violating casts 
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit d4967c04e0)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 23:08:58 +01:00
Michael Niedermayer cd478122b0 avcodec/get_bits: Document the return code of get_vlc2() 
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 4a94ff4ccd)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 22:50:23 +01:00
Michael Niedermayer 6723a43609 avcodec/mpeg4videodec: Check mb_num also against 0 
The spec implies that 0 is invalid in addition to the existing checks

Found-by: <kierank>
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 05f4703a16)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-30 22:49:55 +01:00
Michael Niedermayer 2980b95faf avfilter/vf_transpose: Fix used plane count. 
Fixes out of array access
Fixes: poc.mp4

Found-by: GwanYeong Kim <gy741.kim@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit c6939f65a1)
(cherry picked from commit 3f621455d6)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:33:09 +01:00
Michael Niedermayer 11498c22a0 avcodec/hevc_cabac: Check prefix so as to avoid invalid shifts in coeff_abs_level_remaining_decode() 
I suspect that this can be limited tighter, but i failed to find anything
in the spec that would confirm that.

Fixes: 4833/clusterfuzz-testcase-minimized-5302840101699584
Fixes: runtime error: left shift of 134217730 by 4 places cannot be represented in type 'int'

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit a026a3efae)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:33:09 +01:00
Michael Niedermayer 2fdb27b512 avcodec/mjpegdec: Fix integer overflow in DC dequantization 
Fixes: runtime error: signed integer overflow: -65535 * 65312 cannot be represented in type 'int'
Fixes: 4900/clusterfuzz-testcase-minimized-5769019744321536

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1bfc1aa004)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:33:09 +01:00
Michael Niedermayer c1b74d608c avcodec/dxtory: Fix bits left checks 
Fixes: Timeout
Fixes: 4863/clusterfuzz-testcase-6347354178322432

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 6e1a167c55)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-01-28 15:33:09 +01:00