Michael Niedermayer
5b6324a94c
avcodec/aacsbr_fixed: Fix overflows in rounding in sbr_hf_assemble()
...
Fixes: runtime error: signed integer overflow: 2052929346 + 204817098 cannot be represented in type 'int'
Fixes: 5275/clusterfuzz-testcase-minimized-5367635958038528
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit b1bef755f6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-02-12 03:02:29 +01:00
James Almer
c95d343ae1
changelog: update with previous commit
...
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit 03292829aa
)
2018-01-31 22:35:13 -03:00
Luca Barbato
7a30e6448c
x264: Support version 153
...
It has native simultaneus 8 and 10 bit support.
(cherry picked from commit c6558e8840
)
(cherry picked from commit 96e8400553
)
2018-01-31 22:09:44 -03:00
Michael Niedermayer
172edcf3ba
Update for 2.8.14
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:41 +01:00
Michael Niedermayer
a0c366b1f5
avcodec/indeo5: Do not leave frame_type set to an invalid value
...
Fixes: null pointer dereference
Fixes: 5264/clusterfuzz-testcase-minimized-4621956621008896
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2ff9f17851
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:16 +01:00
Michael Niedermayer
4abdd65356
avcodec/hevc_ps: Check log2_sao_offset_scale_*
...
Fixes: 4868/clusterfuzz-testcase-minimized-6236542906400768
Fixes: runtime error: shift exponent 126 is too large for 32-bit type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4a75a75c62
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:16 +01:00
Aman Gupta
b40576a9a4
avcodec/hevc_ps: extract one SPS fields required for hvcC construction
...
Signed-off-by: Aman Gupta <aman@tmm1.net >
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
b6a7dd174a
avcodec/mpeg4videodec: Avoid possibly aliasing violating casts
...
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d4967c04e0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
f606a943d3
avcodec/get_bits: Document the return code of get_vlc2()
...
Found-by: kierank
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4a94ff4ccd
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
54a7d3efc4
avcodec/mpeg4videodec: Check mb_num also against 0
...
The spec implies that 0 is invalid in addition to the existing checks
Found-by: <kierank>
Reviewed-by: Kieran Kunhya <kieran618@googlemail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 05f4703a16
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
ed06873b7b
avfilter/vf_transpose: Fix used plane count.
...
Fixes out of array access
Fixes: poc.mp4
Found-by: GwanYeong Kim <gy741.kim@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c6939f65a1
)
(cherry picked from commit 3f621455d6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
c740f585a1
avcodec/hevc_cabac: Check prefix so as to avoid invalid shifts in coeff_abs_level_remaining_decode()
...
I suspect that this can be limited tighter, but i failed to find anything
in the spec that would confirm that.
Fixes: 4833/clusterfuzz-testcase-minimized-5302840101699584
Fixes: runtime error: left shift of 134217730 by 4 places cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a026a3efae
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
c1f7b2b6e1
avcodec/mjpegdec: Fix integer overflow in DC dequantization
...
Fixes: runtime error: signed integer overflow: -65535 * 65312 cannot be represented in type 'int'
Fixes: 4900/clusterfuzz-testcase-minimized-5769019744321536
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1bfc1aa004
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
193b6df357
avcodec/hevc_cabac: Move prefix check in coeff_abs_level_remaining_decode() down
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 94d4237a7a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
25f7121c7b
avcodec/truemotion2: Fix integer overflow in TM2_RECALC_BLOCK()
...
Fixes: signed integer overflow: 1477974040 - -1877995504 cannot be represented in type 'int'
Fixes: 4861/clusterfuzz-testcase-minimized-4570316383715328
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 56a53340ed
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
b9948d5275
avcodec/snowdec: Fix integer overflow before htaps check
...
Fixes: runtime error: signed integer overflow: -1094995529 * 2 cannot be represented in type 'int'
Fixes: 4828/clusterfuzz-testcase-minimized-5100849937252352
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2eecf3cf8e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
0036b62c99
avcodec/ulti: Check number of blocks at init
...
Fixes: Timeout
Fixes: 4832/clusterfuzz-testcase-4699096590843904
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 725353525e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 23:47:15 +01:00
Michael Niedermayer
b51f1f5a19
avcodec/ac3dec_fixed: Fix integer overflow in scale_coefs()
...
Fixes: runtime error: signed integer overflow: 2147483520 + 128 cannot be represented in type 'int'
Fixes: 4800/clusterfuzz-testcase-minimized-6110372403609600
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a1f38c7589
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Nikolas Bowe
3e499537a4
avformat/lrcdec: Fix memory leak in lrc_read_header()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ef5994e09d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Nikolas Bowe
5971f1941b
avformat/matroskadec: Fix float-cast-overflow undefined behavior in matroska_parse_tracks()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit e07649e618
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Carl Eugen Hoyos
10ed2f1972
configure: bump year
...
Happy new year!
(cherry picked from commit bddf31ba75
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
74aeeb223a
avcodec/arm/sbrdsp_neon: Use a free register instead of putting 2 things in one
...
Fixes high pitched shriek
Fixes: 25420848_1478428308873746_4255813235963330560_n.mp4
Reported-by: Dale Curtis <dalecurtis@google.com >
Reviewed-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7dbbb75ee3
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
82fb8dc076
avcodec/h264addpx_template: Fixes integer overflows
...
Fixes: signed integer overflow: 512 + 2147483491 cannot be represented in type 'int'
Fixes: 4780/clusterfuzz-testcase-minimized-4709066174627840
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d6945aeee4
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
2885e45eb4
avcodec/dirac_dwt: Fix overflows in COMPOSE_HAARiH0/COMPOSE_HAARiL0
...
Fixes: 4830/clusterfuzz-testcase-minimized-5255392054476800
Fixes: signed integer overflow: 2147483646 - -7 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0e62a23734
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
c65c4c4759
avcodec/diracdec: Fix integer overflow with quant
...
Fixes: signed integer overflow: 2 + 2147483646 cannot be represented in type 'int'
Fixes: 4792/clusterfuzz-testcase-minimized-6322450775146496
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit eaa9317589
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
c860d5326f
avcodec/opus_parser: Check payload_len in parse_opus_ts_header()
...
Fixes: clusterfuzz-testcase-minimized-6134545979277312
Fixes: crbug 797469
Reported-by: Matt Wolenetz <wolenetz@google.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1bcd7fefcb
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
a15c056f5c
avcodec/jpeg2000dsp: Fix integer overflows in ict_int()
...
Fixes: signed integer overflow: 46802 * -71230 cannot be represented in type 'int'
Fixes: 4756/clusterfuzz-testcase-minimized-4812495563784192
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit b3192c64b5
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
761362fffb
avcodec/h264_slice: Do not attempt to render into frames already output
...
Fixes: null pointer dereference
Fixes: 4698/clusterfuzz-testcase-minimized-5096956322906112
This testcase does not reproduce the issue before 03b82b3ab9
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 476665d4de
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
0abf465dc5
avcodec/exr: Check buf_size more completely
...
Fixes: Out of heap array read
Fixes: 4683/clusterfuzz-testcase-minimized-6152313673613312
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 903be5e4f6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
2a53778676
avcodec/flacdec: Fix overflow in multiplication in decode_subframe_fixed()
...
Fixes: signed integer overflow: 2 * 1629495328 cannot be represented in type 'int'
Fixes: 4716/clusterfuzz-testcase-minimized-5835915940331520
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 3d23f7a096
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
aae8ea9c18
avcodec/hevcdsp_template: Fix Invalid shifts in put_hevc_qpel_bi_w_h() and put_hevc_qpel_bi_w_w()
...
Fixes: left shift of negative value -1
Fixes: 4690/clusterfuzz-testcase-minimized-6117482428366848
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d135f3c514
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
59e3f49ef0
avcodec/flacdec: avoid undefined shift
...
Fixes: shift exponent 32 is too large for 32-bit type 'unsigned int'
Fixes: 4688/clusterfuzz-testcase-minimized-6572210748653568
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 560daf8891
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
789157fdde
avcodec/hevcdsp_template.c: Fix undefined shift in FUNC(dequant)
...
Fixes: runtime error: left shift of negative value -180
Fixes: 4626/clusterfuzz-testcase-minimized-5647837887987712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0c9ab5ef9c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:15 +01:00
Michael Niedermayer
d0967e3faf
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0() and COMPOSE_DD137iL0()
...
Fixes: runtime error: signed integer overflow: 2147483646 + 33554433 cannot be represented in type 'int'
Fixes: 4563/clusterfuzz-testcase-minimized-5438979567517696
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4d70fbeec8
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
4eb24ae083
avcodec/hevc_cabac: Fix integer overflow in ff_hevc_cu_qp_delta_abs()
...
Fixes: signed integer overflow: 2147483647 + 1073741824 cannot be represented in type 'int'
Fixes: 4555/clusterfuzz-testcase-minimized-4505532481142784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0ee143558d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
f75e2cb059
avcodec/hevc_sei: Fix integer overflows in decode_nal_sei_message()
...
Fixes: signed integer overflow: 2147483520 + 255 cannot be represented in type 'int'
Fixes: 4554/clusterfuzz-testcase-minimized-4843714515042304
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 991ef6e5b9
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
d1af42e4b2
avcodec/hevcdsp_template: Fix undefined shift in put_hevc_qpel_bi_w_hv()
...
Fixes: runtime error: left shift of negative value -3
Fixes: 4524/clusterfuzz-testcase-minimized-6055590120914944
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 439fbb9c8b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Kelly Ledford
b6731e87c8
libavfilter/af_dcshift.c: Fixed repeated spelling error
...
'threshhold' should be 'threshold'
Signed-off-by: Kelly Ledford <kelly.ledford@intel.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit bc219082bb
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Jun Zhao
15df68bf50
avfilter/formats: fix wrong function name in error message
...
Use perdefined micro __FUNCTION__ rather than hard coding function name
to fix wrong function name in error message.
Signed-off-by: Jun Zhao <jun.zhao@intel.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4280948702
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
f4cce67dca
avcodec/amrwbdec: Fix division by 0 in voice_factor()
...
The added value matches "Digital cellular telecommunications system (Phase 2+) (GSM); Universal Mobile Telecommunications System (UMTS); LTE; Extended Adaptive Multi-Rate - Wideband (AMR-WB+) codec; Floating-point ANSI-C code (3GPP TS 26.304 version 14.0.0 Release 14)
Extended Adaptive Multi-Rate - Wideband (AMR-WB+) codec; Floating-point ANSI-C code"
Fixes: runtime error: division by zero
Fixes: 4415/clusterfuzz-testcase-minimized-4677752314658816
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1d0817d56b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
2bffe4613e
avcodec/dirac_dwt: Fix integer overflows in COMPOSE_DAUB97*
...
Fixes: 4478/clusterfuzz-testcase-minimized-4752113767809024
Fixes: runtime error: signed integer overflow: -2147483626 + -319489 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5e9a13a5a3
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Dale Curtis
9166e6abd6
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
...
Didn't notice this one when 9648cc6d
was landed.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 95bacb521a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Dale Curtis
8bea0c307d
Don't manipulate duration when it's AV_NOPTS_VALUE.
...
This leads to signed integer overflow.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit c5fd57f483
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Dale Curtis
1bc4e743f5
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
...
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 9648cc6d7f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Dale Curtis
2543475730
avformat/utils: Prevent undefined shift with wrap_bits > 64.
...
2LL << (wrap_bits=64 - 1) does not fit in int64_t; change the
code to use a uint64_t (2ULL) and add an av_assert2() to
ensure wrap_bits <= 64.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 03fbc0daa7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
cf32c814ed
avcodec/j2kenc: Fix out of array access in encode_cblk()
...
Fixes: 4427/clusterfuzz-testcase-minimized-5106919271301120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0674087004
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
2f7cced9bb
avcodec/hevcdsp_template: Fix undefined shift in put_hevc_epel_bi_w_h()
...
Fixes: runtime error: left shift of negative value -127
Fixes: 4397/clusterfuzz-testcase-minimized-4779061080489984
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0409d33311
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
6011422a54
avcodec/mlpdsp: Fix signed integer overflow, 2nd try
...
The outputted bits should match what is used in the lossless check
Fixes: runtime error: signed integer overflow: -538697856 * 256 cannot be represented in type 'int'
Fixes: 4326/clusterfuzz-testcase-minimized-5689449645080576
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 97c00edaa0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
32a92a7a9b
avcodec/kgv1dec: Check that there is enough input for maximum RLE compression
...
Fixes: Timeout
Fixes: 4271/clusterfuzz-testcase-4676667768307712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 3aad94bf2b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00
Michael Niedermayer
74d467baa4
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_FIDELITYi*
...
Fixes: runtime error: signed integer overflow: -2143827186 - 7404944 cannot be represented in type 'int'
Fixes: 4354/clusterfuzz-testcase-minimized-4671122764201984
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2b6964f764
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2018-01-31 22:56:14 +01:00