Laurent Aimar
cf0052931d
h264: do not let invalid values in h->ref_count on ff_h264_decode_ref_pic_list_reordering() errors.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 2428b53f6d306d8d71dec34fa7b0af733d76cfac)
2011-10-02 21:29:51 +02:00
Laurent Aimar
6b998720b2
Reject video with non multiple of 16 width/height in the 4xm decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit db5b4875514eb7740844f514dbf236c9179a6a93)
2011-10-02 21:29:45 +02:00
Michael Niedermayer
55a070870f
4xm decoder: fix data size for i2 frames.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 0a19b4b0bae772cac7f8341e94c319c96356ee69)
2011-10-02 05:48:40 +02:00
Michael Niedermayer
54a1e7b0f2
4xm decoder: print some error messages in case of errors.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1008f639e2ebaa2b3d48ac765ca49c8869042d75)
2011-10-02 05:48:40 +02:00
Laurent Aimar
2c282e9679
Check for out of bound accesses in the 4xm decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 9c661e952fbcbf044709f9a7031c68cc4860336b)
2011-10-02 05:48:26 +02:00
Laurent Aimar
55a96a984e
Prevent block size from inreasing in the shorten decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit b399cbfba5d901608c18e1a2d48a24c30541a634)
2011-10-02 05:48:13 +02:00
Laurent Aimar
64a9004d07
Check for out of bound reads in PTX decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 581898ae882dc37967b689b6ea5f2b2a9acd257a)
2011-10-02 05:48:07 +02:00
Laurent Aimar
f421b53400
Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffers used in 4xm decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 90a69b2f61cbd2d58723d712bdf283e5e56b2ea2)
2011-10-02 05:47:51 +02:00
Laurent Aimar
d2a276a3fd
Fix the check for missing references in ff_er_frame_end() for H264.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2011-10-02 05:47:46 +02:00
Laurent Aimar
535112b365
Prevent NULL dereference when the huffman table is invalid in the 4xm decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 4a8ff0636d67c6df059f2ae2df49ad1181de14ca)
2011-10-02 05:45:01 +02:00
Michael Niedermayer
86491c5dbc
h264: increase ref_poc size to 32 as it can be per field.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8c851ef5a81fb0429453c43fdcfc974ce1b6e447)
2011-10-02 05:44:42 +02:00
Michael Niedermayer
3e0dbb8a7e
h264: set unused ref_counts to 0 as a precautionary meassure.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 3af2de76ac8b7aa762e4ee129ec29140e6247d81)
2011-10-02 05:44:35 +02:00
Michael Niedermayer
b0804f3705
Merge remote-tracking branch 'qatar/release/0.7' into release/0.8
...
* qatar/release/0.7: (73 commits)
Update Changelog for 0.7.2 release
Update RELEASE file for 0.7.2
lavf: do not set codec_tag for rawvideo
fate: allow testing with libavfilter disabled
fate: separate lavf-mxf_d10 test from lavf-mxf
Fix memory (re)allocation in matroskadec.c, related to MSVR-11-0080.
movenc: fix NULL reference in mov_write_tkhd_tag
movenc: create an alternate group for each media type
flvdec: Check for overflow before allocating arrays
ppc: fix some pointer to integer casts
ppc: fix 32-bit PIC build
rv34: Check for invalid slice offsets
rv34: Fix potential overreads
rv34: Avoid NULL dereference on corrupted bitstream
rv10: Reject slices that does not have the same type as the first one
lavf: Fix context pointer in av_open_input_stream when avformat_open_input fails
oggdec: fix out of bound write in the ogg demuxer
Fixed size given to init_get_bits().
smacker: fix a few off by 1 errors
Check for invalid VLC value in smacker decoder.
...
Conflicts:
RELEASE
libavcodec/avs.c
libavcodec/ppc/asm.S
libavcodec/rv34.c
libavcodec/xan.c
libavdevice/alsa-audio.h
libavformat/flvdec.c
libavformat/gxf.c
libavformat/utils.c
libswscale/x86/swscale_template.c
tests/ref/lavf/mov
tests/ref/lavf/mxf
Merged-by: Michael Niedermayer <michaelni@gmx.at>
2011-10-01 22:42:41 +02:00
Laurent Aimar
f144a70d60
Fix out of bound reads/writes in the TIFF decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 5ca5d432e028ffdd4067b87aed6702168c3207b6)
2011-10-01 21:03:49 +02:00
Laurent Aimar
b08df314dc
Check for out of bound writes in the QDM2 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 4a7876c6e4e62e94d51e364ba99aae4da7671238)
2011-10-01 21:03:45 +02:00
Laurent Aimar
e0fb22cea9
Fix out of bound reads in the QDM2 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 491eaf35ae1f9b619441314bec33766e31580184)
2011-10-01 21:03:40 +02:00
Laurent Aimar
802045777a
Fix out of bound reads due to integer overflow in the ADPCM IMA Electronic Arts EACS decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 346876ec168affe7c21be88d8f1acf1a75cc8409)
2011-10-01 21:03:35 +02:00
Laurent Aimar
e8fd4a43ba
Check for out of bound reads in the Electronic Arts CMV decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit a5d46235f3f70f0b620f8e54649ece45ecc5b170)
2011-10-01 21:03:31 +02:00
Laurent Aimar
d950461f59
Prevent NULL dereferences when missing the reference frame in the Electronic Arts CMV decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 113d7be62497c4e59db8f224fdb7f0a90cf17d03)
2011-10-01 21:03:26 +02:00
Laurent Aimar
df39708269
Fix potential pointer arithmetic overflows in the Electronic Arts CMV decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e9064c9ce8ed18c3a3aab61e58e663b8f5b0c551)
2011-10-01 20:59:57 +02:00
Laurent Aimar
1f2a93cf4b
Prevent infinite loop in the ANM decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 39993860e1525ca5d1b07521865b7e9e1b294ed7)
2011-10-01 20:59:49 +02:00
Laurent Aimar
3b840fab90
Check for out of bound reads in AVS decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 7afe9e5638242a3210a0fc378e34e3af41e29176)
2011-10-01 20:59:34 +02:00
Justin Ruggles
b8ab1adfcd
avcodec: reject audio packets with NULL data and non-zero size
...
There is no valid reason the user should ever send such packets in the
first place, but the documentation for CODEC_CAP_DELAY states that the
codec is guaranteed not to get a NULL packet unless that capability is
set. That isn't true without preventing this case.
(cherry picked from commit 6326afd5e90cfed9df08b652a1cd6f6a948c239a)
2011-10-01 20:56:18 +02:00
Laurent Aimar
107ea3057e
Fix out of bound writes in fix_bitshift() of the shorten decoder.
...
The data pointers s->decoded[*] already take into account s->nwrap.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit f42b3195d3f2692a4dfc0a8668bb4ac35301f2ed)
2011-10-01 20:54:48 +02:00
Laurent Aimar
375bd0cfb3
Check for out of bound reads in the Tiertex Limited SEQ decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 5d7e3d71673d64a16b58430a0027afadb6b3a54e)
2011-10-01 20:54:36 +02:00
Laurent Aimar
9b1bf08525
Fix the size of workspace buffers in the motion pixels decoder.
...
Some buffers must be mod 4 in width and/or height.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 62234a4d3a30f3949694781ef8a941ef55b210fa)
2011-10-01 20:54:31 +02:00
Laurent Aimar
376b099474
Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer used in motion pixels decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e60619f9b4bdaf9af46887cdb2c86454567b4a61)
2011-10-01 20:54:26 +02:00
Laurent Aimar
6e774cf67e
Check for out of bounds writes in the Delphine Software International CIN decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 3035c4034b6af3ad47f921e3385196e1b9d44ddf)
2011-10-01 20:54:21 +02:00
Laurent Aimar
18cfe0238d
Check for out of bounds reads in the Delphine Software International CIN decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8e5f093c2cf13eab3d68d893bf8f30c56ba4e733)
2011-10-01 20:54:17 +02:00
Laurent Aimar
603cb031f1
Check for out of bound reads in the QuickDraw decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 44e2f0c3cd2df68659e07ed3d5eab4974794eb33)
2011-10-01 20:54:12 +02:00
Laurent Aimar
f9efe1d76e
Check for out of bound reads in xan_huffman_decode() of the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit c8b835954ae4aef797112afda3b52f8dfe3c7b74)
2011-10-01 20:53:44 +02:00
Mans Rullgard
626f11b3bc
dca: clear inactive subbands only once in qmf_32_subbands()
...
Writing zeros to the high entries in the array need only be
done once as the cutoff position is constant throughout the
loop.
Signed-off-by: Mans Rullgard <mans@mansr.com>
(cherry picked from commit bf00a73ace9b1aba790b75dcb26d43adfceb769f)
2011-10-01 20:52:09 +02:00
Laurent Aimar
d414c77ded
Check for unsupported parameters in ff_j2k_dwt_init()
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit b4483a531a139f304f4370f470325facb107202f)
2011-10-01 20:51:35 +02:00
Laurent Aimar
dc9b708f4d
Check for out of bound reads in jpeg 2000 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 02660a871301adada14b0e0fe64c66f73c2e4541)
2011-10-01 20:51:28 +02:00
Laurent Aimar
f8eabfc16e
Prevent calling init_vlc() with invalid parameters in motionpixels decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 41b7389cade702383e59343561776f83bb26e17f)
2011-10-01 20:51:17 +02:00
Laurent Aimar
14617fa7b8
Prevent NULL dereference when the palette is missing in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 56ee5a9ad1b385129c40ba4773f99bc5943ae8af)
2011-10-01 20:51:12 +02:00
Laurent Aimar
485b4317bb
Fixed out of bound accesses in xan_unpack() of the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 5279141c1d7a72c467b7e0666fc2275cbcec4668)
2011-10-01 20:51:08 +02:00
Nicolas George
acfe2c9154
libvpxenc: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 769298a6869c3b16557280a63f6502409d1b5e49)
2011-10-01 20:49:34 +02:00
Nicolas George
bbb191c721
bitstream: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 198ed6474d603f930430067b8b56955d443e821c)
2011-10-01 20:49:26 +02:00
Laurent Aimar
fa816e01f4
Check for out of bound reads in the flic decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1f024b882094b26c85e87698faa002b8713b5f88)
2011-10-01 20:47:42 +02:00
Laurent Aimar
03a4b489f1
Prevent out of bound accesses in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit feca3ba053499e0d38f48910cef9bc431036956f)
2011-10-01 20:44:51 +02:00
Laurent Aimar
df0d418ce0
Check for invalid/corrupted bitstream in sun raster decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit b9596a503760ccbd82ca3c03d1c0d5b9449be12b)
2011-10-01 20:44:46 +02:00
Laurent Aimar
6b0565e5b8
Prevent NULL dereferences when missing the reference frame in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 19e95b88459e879d3e67a66350d937c32ed762ca)
2011-10-01 20:44:40 +02:00
Laurent Aimar
23197f5467
Check for out of bounds reads in sun rasterfile decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 039f3c33fffd2f4ae376b662ea4ec67c1d6a4c04)
2011-10-01 20:44:35 +02:00
Laurent Aimar
0a5e269f03
Check for corrupted extra data in wmavoice decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 61930119cbff7572ebe7ade6cd9268becbec37f4)
2011-10-01 20:44:30 +02:00
Laurent Aimar
70727e16ca
Check for out of bound writes in the wmavoice decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e09ae22ab7d9af7f1cbfd2445fa71ad9e7c28ee3)
2011-10-01 20:44:25 +02:00
Laurent Aimar
08decaeb95
Prevent NULL dereferences when missing the reference frame in the bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 66aae97a60fcd8658f18c484b5af898a48d0e3f9)
2011-10-01 20:44:19 +02:00
Laurent Aimar
1860053820
Check for out of bound writes when building tree in bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 254af56dd101bc756194dd080bb99e8f123500dd)
2011-10-01 20:39:17 +02:00
Laurent Aimar
184a156f7a
Check for various out of bound writes in the bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 36bf135d4c32973933000a819208df7da9dd3e16)
2011-10-01 20:39:06 +02:00
Laurent Aimar
9851184d30
Reset internal state on corrupted blocks in wavpack decoder.
...
wavpack_decode_block() supposes that it is called back with the exact
same buffer unless it has returned with an error. With multi-channels
files, wavpack_decode_frame() was breaking this assumption.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit c2a016ad4d9c29285813ba5806189e63e063e0fb)
2011-10-01 20:38:43 +02:00