fdd09e5d7b
wma: Check channel number before init.
...
Fixes Ticket240
Based on patch by ami_stuff
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 20431a9982michaelni@gmx.at >
2011-11-18 21:05:12 +01:00
00d35e82b2
Do not try to read 16bit gray png files with alpha channel.
...
FFmpeg does not support gray16a.
Fixes the crash in ticket #644 .
(cherry picked from commit 0c5fd6372emichaelni@gmx.at >
2011-11-18 21:05:12 +01:00
807342e1cf
cook: fix apparent typo in extradata parsing
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 554caed2d3michaelni@gmx.at >
2011-11-18 21:05:12 +01:00
abaf8c386e
ffplay: limit lowres to the maximum supported. Fixes Ticket591
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
Signed-off-by: Marton Balint <cus@passwd.hu >
(cherry picked from commit d8407ee2b1michaelni@gmx.at >
2011-11-18 21:05:12 +01:00
e5578ad3cd
v4l2: fix uninitialized variable
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-18 21:05:12 +01:00
4e0fae982e
vf_transpose: remove pix_fmts which can currently not be supported.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 3fd0f6ed25michaelni@gmx.at >
2011-11-18 21:05:12 +01:00
f62fa1ce9f
vp5: Fix illegal read.
...
Found with Address Sanitizer
(cherry picked from commit bb4b0ad83bmichaelni@gmx.at >
2011-11-18 14:29:52 +01:00
8a63deab15
vp6: Fix illegal read.
...
Found with Address Sanitizer
Signed-off-by: Alex Converse <alex.converse@gmail.com >
(cherry picked from commit e0966eb140michaelni@gmx.at >
2011-11-18 14:29:52 +01:00
fe06305b0d
vf_transpose: avoid multiple calls to avfilter_draw_slice()
...
avfilter_draw_slice() is already called in the end_frame() callback,
this avoids multiple calls. This is done by adding a null draw_slice()
callback.
In particular fix crash occurring with -vf transpose=3,hflip, fix trac
issue #371 .
(cherry picked from commit d9c23a0d5a
2011-11-13 23:22:06 +01:00
d58c5586ec
nuv: Fix combination of size changes and LZO compression.
...
There were multiple issues, for example might we have to re-run
the decompression when the size of the buffer increased,
we should always use a decompression buffer large enough for
the header (so we do not get stuck when the size is too small).
Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de >
2011-11-08 19:48:14 +01:00
0411b19289
av_lzo1x_decode: properly handle negative buffer length.
...
Treating them like 0 is safest, current code would invoke
undefined pointer arithmetic behaviour in this case.
Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de >
(cherry picked from commit b9242fd12f
2011-11-08 19:45:12 +01:00
fd30240e98
libavformat: add support for G726 audio decoder in RTP and RTSP streams
...
Fixes Ticket611
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit df9c1cfb48
2011-11-08 19:04:26 +01:00
54e4bf3296
Do not call parse_keyframes_index with NULL stream.
...
Seems to fix trac issue #569 .
Sample is unfortunately not available, but it might be caused by
an index existing for non-existing audio stream (?).
Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de >
(cherry picked from commit 6ea6ff053a
2011-11-08 19:03:22 +01:00
1e1015fd22
Version numbers for 0.8.6
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:37:27 +01:00
c4a34f4025
snow: emu edge support
...
Fixes Ticket592
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 4416931fc0michaelni@gmx.at >
2011-11-04 13:36:28 +01:00
cba03dc667
imc: validate channel count
...
ask for a sample if not mono
(cherry picked from commit 7b7f47e733michaelni@gmx.at >
2011-11-04 13:34:42 +01:00
5a3f494466
imc: check for ff_fft_init() failure
...
(cherry picked from commit 95fee70d67michaelni@gmx.at >
2011-11-04 13:34:35 +01:00
112431705d
libgsmdec: check output buffer size before decoding
...
(cherry picked from commit b03761b130michaelni@gmx.at >
2011-11-04 13:33:38 +01:00
864581fea3
configure: fix arch x86_32
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 078811d9e4michaelni@gmx.at >
2011-11-04 13:33:33 +01:00
d8acee792f
mp3enc: avoid truncating id3v1 tags by one byte
...
Avoid writing the trailing null-byte for id3v1 tags if length reaches max length.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 0f39fa0279michaelni@gmx.at >
2011-11-04 13:32:59 +01:00
0e3dec6b08
asfdec: Check packet_replic_size earlier
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 60fcc19bffmichaelni@gmx.at >
2011-11-04 13:32:50 +01:00
711e6c947b
cin audio: validate the channel count
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:32:18 +01:00
8491677ab6
binkaudio: add some buffer overread checks.
...
This stops decoding before overreads instead of after.
(cherry picked from commit 101ef19ef4michaelni@gmx.at >
2011-11-04 13:31:15 +01:00
f98bb0d3ec
atrac1: validate number of channels
...
(cherry picked from commit bff5b2c1camichaelni@gmx.at >
2011-11-04 03:40:42 +01:00
346e089d25
atrac1: check output buffer size before decoding
...
(cherry picked from commit 33684b9c12michaelni@gmx.at >
2011-11-04 03:40:35 +01:00
0ac6777a34
vp3: fix oob read for negative tokens and memleaks on error.
...
(cherry picked from commit 8370e426e4michaelni@gmx.at >
2011-11-04 03:37:06 +01:00
ae2d3d6be0
apedec: set s->currentframeblocks after validating nblocks
2011-11-04 03:32:39 +01:00
998fc04bcf
apedec: use unsigned int for 'nblocks' and make sure that it's within int range
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:30:44 +01:00
43fa5bf55e
apedec: check for data buffer realloc failure
...
(cherry picked from commit 11ca8b2d74michaelni@gmx.at >
2011-11-04 03:23:39 +01:00
f19b8d9533
apedec: check for filter buffer allocation failure
...
(cherry picked from commit 7500781313michaelni@gmx.at >
2011-11-04 03:23:34 +01:00
4a66fe2107
mpegaudiodec: check output data size based on avctx->frame_size
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:23:13 +01:00
edf3c5a3eb
resample: Fix array size
...
Found-by: Jim Radford
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 3e7db0a9eemichaelni@gmx.at >
2011-11-04 03:22:03 +01:00
a39b5e8b32
resample2: fix potential overflow
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
6ae93d0304
resample: Fix overflow
...
Found-by: Jim Radford
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
241f15f1c9
tta: check for extradata allocation failure in tta demuxer
...
(cherry picked from commit f540ca22c5michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
2137d99086
vorbisdec: check output buffer size before writing output
...
(cherry picked from commit 60aa1a358dmichaelni@gmx.at >
2011-11-04 03:18:52 +01:00
e9de2d98a9
twinvq: check output buffer size before decoding
...
(cherry picked from commit e53eecd0e7michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
93f1159af5
vp6: Fix illegal read.
...
(cherry picked from commit 2a6eb06254michaelni@gmx.at >
2011-11-04 01:54:13 +01:00
b08001e00a
shorten: check output buffer size before decoding
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:30:29 +01:00
e1ea35fb52
shorten: check for realloc failure
...
(cherry picked from commit 9e5e2c2d01michaelni@gmx.at >
2011-11-04 01:24:03 +01:00
cbfd34246c
mpegts: do not return from ff_mpegts_parse_packet() after having seen the first PMT
...
It prevents leaving the AVPacket uninitialized.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit bc38e83793michaelni@gmx.at >
2011-11-04 01:23:56 +01:00
feef77ec3a
mpegts: fix return value when enough ts packets have been parsed or when the first PMT has been seen.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 49ec0c818dmichaelni@gmx.at >
2011-11-04 01:23:52 +01:00
f531193690
Fixes avpicture_layout to not write past buffer end.
...
avpicture_get_size() returns the size of buffer required for avpicture_layout.
For pseudo-paletted formats (gray8...) this size does not include the palette.
However, avpicture_layout doesn't know this and still writes the palette. Consequently,
avpicture_layout writes passed the length of the buffer. This fixes it
by fixing avpicture_layout so that it doesn't write the palette for these formats.
Signed-off-by: Matthew Einhorn <moiein2000@gmail.com >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e662b263d9michaelni@gmx.at >
2011-11-04 01:23:47 +01:00
e86e9f8b7a
avio: Check for invalid buffer length.
...
(cherry picked from commit ab2940691bmichaelni@gmx.at >
2011-11-04 01:23:33 +01:00
15a7fe106c
pthread: copy coded frame dimensions in update_context_from_thread
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit feadcd1bdcmichaelni@gmx.at >
2011-11-04 01:23:28 +01:00
d32f509de1
vp8: prevent read from uninitialized memory in decode_mvs
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 0f0b5d6434michaelni@gmx.at >
2011-11-04 01:22:59 +01:00
5f5f36b52e
vp8: force reallocation in update_thread_context after frame size change
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 5653579381michaelni@gmx.at >
2011-11-04 01:22:52 +01:00
d1166f03be
vp8: fix return value if update_dimensions fails
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit f05c2fb6ebmichaelni@gmx.at >
2011-11-04 01:22:45 +01:00
d51c7b4cbe
matroskadec: fix out of bounds write
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 723229c11fmichaelni@gmx.at >
2011-11-04 01:22:38 +01:00
e58870a587
mov: 10l: Terminate string with 0 not '0'
...
(cherry picked from commit 7ad06beb2cmichaelni@gmx.at >
2011-11-04 01:21:57 +01:00
Michael Niedermayer