Laurent Aimar
375bd0cfb3
Check for out of bound reads in the Tiertex Limited SEQ decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 5d7e3d7167
)
2011-10-01 20:54:36 +02:00
Laurent Aimar
9b1bf08525
Fix the size of workspace buffers in the motion pixels decoder.
...
Some buffers must be mod 4 in width and/or height.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 62234a4d3a
)
2011-10-01 20:54:31 +02:00
Laurent Aimar
376b099474
Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer used in motion pixels decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e60619f9b4
)
2011-10-01 20:54:26 +02:00
Laurent Aimar
6e774cf67e
Check for out of bounds writes in the Delphine Software International CIN decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 3035c4034b
)
2011-10-01 20:54:21 +02:00
Laurent Aimar
18cfe0238d
Check for out of bounds reads in the Delphine Software International CIN decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 8e5f093c2c
)
2011-10-01 20:54:17 +02:00
Laurent Aimar
603cb031f1
Check for out of bound reads in the QuickDraw decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 44e2f0c3cd
)
2011-10-01 20:54:12 +02:00
Tomas Härdin
2451228b0c
mov: Only touch extradata in mov_read_extradata() if codec_id is what we expect
...
Extradata should only be parsed from the avss, fiel, jp2h and alac atoms for
AVS, MJPEG, Motion JPEG 2000 and ALAC respectively.
This also fixes the mov demuxer coming up with bogus extradata for some
AVC-Intra samples due to the presence of fiel atoms.
(cherry picked from commit e571305a71
)
2011-10-01 20:53:53 +02:00
Laurent Aimar
f9efe1d76e
Check for out of bound reads in xan_huffman_decode() of the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit c8b835954a
)
2011-10-01 20:53:44 +02:00
Mans Rullgard
626f11b3bc
dca: clear inactive subbands only once in qmf_32_subbands()
...
Writing zeros to the high entries in the array need only be
done once as the cutoff position is constant throughout the
loop.
Signed-off-by: Mans Rullgard <mans@mansr.com >
(cherry picked from commit bf00a73ace
)
2011-10-01 20:52:09 +02:00
Stefano Sabatini
8d61c68442
vf_unsharp: set default chroma size value to 5x5
...
The previous default value 0x0 was not good, since it is not even
valid.
Signed-off-by: Anton Khirnov <anton@khirnov.net >
(cherry picked from commit 1ee2014190
)
2011-10-01 20:51:52 +02:00
Stefano Sabatini
d155fdefb8
vf_unsharp: fix out-of-buffer read
...
In apply_unsharp(), when y is >= height, prevent out-of-buffer reading
from src, read from the last buffer line in src2 instead.
The check was implemented in the original unsharp libmpcodecs code and
lost in the port.
This also fixes output discrepancy between the two filters.
Signed-off-by: Anton Khirnov <anton@khirnov.net >
(cherry picked from commit 998e8519ef
)
2011-10-01 20:51:43 +02:00
Laurent Aimar
d414c77ded
Check for unsupported parameters in ff_j2k_dwt_init()
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit b4483a531a
)
2011-10-01 20:51:35 +02:00
Laurent Aimar
dc9b708f4d
Check for out of bound reads in jpeg 2000 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 02660a8713
)
2011-10-01 20:51:28 +02:00
Laurent Aimar
f8eabfc16e
Prevent calling init_vlc() with invalid parameters in motionpixels decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 41b7389cad
)
2011-10-01 20:51:17 +02:00
Laurent Aimar
14617fa7b8
Prevent NULL dereference when the palette is missing in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 56ee5a9ad1
)
2011-10-01 20:51:12 +02:00
Laurent Aimar
485b4317bb
Fixed out of bound accesses in xan_unpack() of the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 5279141c1d
)
2011-10-01 20:51:08 +02:00
Nicolas George
17b6abab50
movenc: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 194c2432ee
)
2011-10-01 20:50:19 +02:00
Nicolas George
cfff8db729
gxfenc: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit af84d9bb9e
)
2011-10-01 20:50:08 +02:00
Nicolas George
431937883f
aviobuf: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 247a1dc847
)
2011-10-01 20:50:02 +02:00
Nicolas George
7bc9c32573
avienc: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e47cfe9e5c
)
2011-10-01 20:49:55 +02:00
Nicolas George
1537f86a93
avidec: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 71e23d39a3
)
2011-10-01 20:49:48 +02:00
Nicolas George
2a934e87b1
4xm: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 0cc44facf1
)
2011-10-01 20:49:41 +02:00
Nicolas George
acfe2c9154
libvpxenc: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 769298a686
)
2011-10-01 20:49:34 +02:00
Nicolas George
bbb191c721
bitstream: Replace av_realloc by av_realloc_f when relevant.
...
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 198ed6474d
)
2011-10-01 20:49:26 +02:00
Nicolas George
a75b5a89d1
Introduce av_realloc_f.
...
av_realloc_f helps avoiding memory-leaks in typical uses of realloc.
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 5cd754bca2
)
2011-10-01 20:48:59 +02:00
Nicolas George
651e21f584
Introduce av_size_mult.
...
av_size_mult helps checking for overflow when computing the size of a memory
area.
Signed-off-by: Nicolas George <nicolas.george@normalesup.org >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit b2600509fe
)
2011-10-01 20:48:53 +02:00
Laurent Aimar
fa816e01f4
Check for out of bound reads in the flic decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 1f024b8820
)
2011-10-01 20:47:42 +02:00
Laurent Aimar
03a4b489f1
Prevent out of bound accesses in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit feca3ba053
)
2011-10-01 20:44:51 +02:00
Laurent Aimar
df0d418ce0
Check for invalid/corrupted bitstream in sun raster decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit b9596a5037
)
2011-10-01 20:44:46 +02:00
Laurent Aimar
6b0565e5b8
Prevent NULL dereferences when missing the reference frame in the xan decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 19e95b8845
)
2011-10-01 20:44:40 +02:00
Laurent Aimar
23197f5467
Check for out of bounds reads in sun rasterfile decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 039f3c33ff
)
2011-10-01 20:44:35 +02:00
Laurent Aimar
0a5e269f03
Check for corrupted extra data in wmavoice decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 61930119cb
)
2011-10-01 20:44:30 +02:00
Laurent Aimar
70727e16ca
Check for out of bound writes in the wmavoice decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e09ae22ab7
)
2011-10-01 20:44:25 +02:00
Laurent Aimar
08decaeb95
Prevent NULL dereferences when missing the reference frame in the bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 66aae97a60
)
2011-10-01 20:44:19 +02:00
Laurent Aimar
1860053820
Check for out of bound writes when building tree in bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 254af56dd1
)
2011-10-01 20:39:17 +02:00
Laurent Aimar
184a156f7a
Check for various out of bound writes in the bink decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 36bf135d4c
)
2011-10-01 20:39:06 +02:00
Laurent Aimar
9851184d30
Reset internal state on corrupted blocks in wavpack decoder.
...
wavpack_decode_block() supposes that it is called back with the exact
same buffer unless it has returned with an error. With multi-channels
files, wavpack_decode_frame() was breaking this assumption.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit c2a016ad4d
)
2011-10-01 20:38:43 +02:00
Laurent Aimar
9770127cd8
Validate the number of audio channels before using it in wmapro decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit fc64434030
)
2011-10-01 20:38:33 +02:00
Justin Ruggles
857c7e122b
ws_snd: make sure number of channels is 1
...
(cherry picked from commit 6a818cb3ff
)
2011-10-01 20:38:11 +02:00
Justin Ruggles
915b905a1b
ws_snd: add some checks to prevent buffer overread or overwrite.
...
(cherry picked from commit 417364ce1f
)
2011-10-01 20:37:36 +02:00
Justin Ruggles
4db466db97
ws_snd: decode to AV_SAMPLE_FMT_U8 instead of S16.
...
8-bit unsigned is the native sample format.
(cherry picked from commit 2322ced8da
)
2011-10-01 20:37:34 +02:00
Justin Ruggles
20047f77b9
flacdec: fix buffer size checking in get_metadata_size()
...
Adds an additional check before reading the next block header and avoids a
potential integer overflow when checking the metadata size against the
remaining buffer size.
(cherry picked from commit 4c5e7b27d5
)
2011-10-01 20:33:34 +02:00
Mike Scheutzow
7e362df304
Fix a buffer overflow in libx264 interface to x264 encoder. Previous code ignored the compressed buffer size passed in. This change returns as many complete NALs as can fit in the buffer, and logs an error message.
...
Signed-off-by: Mike Scheutzow <mike.scheutzow@alcatel-lucent.com >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e2dae1faa8
)
2011-10-01 20:32:25 +02:00
tipok
be1ae17ec0
libaac+ support
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-10-01 20:32:22 +02:00
Laurent Aimar
cdb72c827c
Check for out of bound bands limit in mpc v8 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 508e47a575
)
2011-10-01 20:30:43 +02:00
Laurent Aimar
521dbccc11
Fix return value on EOF in mpc v8 demuxer.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 7ec5ea437f
)
2011-10-01 20:30:35 +02:00
Alexander Strasser
7aa24b157d
h264: ff_h264_decode_extradata: check buffer args
...
The buffer size and pointer were not checked prior to testing the first
byte of the buffer. These were sometimes checked before calling, but it is
better to add it inside the function as it takes buf and size arguments.
Signed-off-by: Alexander Strasser <eclipse7@gmx.net >
(cherry picked from commit 715f259bf9
)
2011-10-01 20:29:07 +02:00
Reimar Döffinger
02affe2f0e
Compile x86/swscale_template with -mno-red-zone.
...
Replaces a very hackish hack to fix the same issue (call instruction
overwriting stack variables).
Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de >
(cherry picked from commit 424bcc46b5
)
2011-10-01 20:28:12 +02:00
Michael Niedermayer
6109974cd9
ffmpeg: increase bit_buffer_size, the header size is clearly too small for rgb48 raw based formats
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit d8289ff9a9
)
2011-10-01 20:27:48 +02:00
Laurent Aimar
5681d74aaf
Add av_calloc() helper.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit ccecab4a0d
)
2011-10-01 20:25:28 +02:00