Timo Rothenpieler
802ebfae3b
avcodec/nvenc: refcount input frame mappings
...
If some logic like vsync in ffmpeg.c duplicates frames, it might pass
the same frame twice, which will result in a crash due it being
effectively mapped and unmapped twice.
Signed-off-by: Timo Rothenpieler <timo@rothenpieler.org >
2018-01-28 13:39:30 +01:00
James Almer
f85b102c80
avformat/libssh: check the user provided a password before trying to use it
...
Fixes ticket #6413
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc >
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit 8ddb6820bd
)
2018-01-11 10:37:53 -03:00
James Almer
03292829aa
changelog: update with previous commit
...
Signed-off-by: James Almer <jamrial@gmail.com >
n3.3.6
2017-12-30 19:38:30 -03:00
Luca Barbato
96e8400553
x264: Support version 153
...
It has native simultaneus 8 and 10 bit support.
(cherry picked from commit c6558e8840
)
2017-12-30 19:36:08 -03:00
Michael Niedermayer
54897d7466
Update for 3.3.6
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:13:19 +01:00
Michael Niedermayer
f2b83f4aba
avcodec/exr: Check buf_size more completely
...
Fixes: Out of heap array read
Fixes: 4683/clusterfuzz-testcase-minimized-6152313673613312
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 903be5e4f6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
1bc06771d8
avcodec/flacdec: Fix overflow in multiplication in decode_subframe_fixed()
...
Fixes: signed integer overflow: 2 * 1629495328 cannot be represented in type 'int'
Fixes: 4716/clusterfuzz-testcase-minimized-5835915940331520
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 3d23f7a096
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
2cde8dc055
avcodec/hevcdsp_template: Fix Invalid shifts in put_hevc_qpel_bi_w_h() and put_hevc_qpel_bi_w_w()
...
Fixes: left shift of negative value -1
Fixes: 4690/clusterfuzz-testcase-minimized-6117482428366848
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d135f3c514
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
0da741ba6b
avcodec/flacdec: avoid undefined shift
...
Fixes: shift exponent 32 is too large for 32-bit type 'unsigned int'
Fixes: 4688/clusterfuzz-testcase-minimized-6572210748653568
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 560daf8891
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
b66e3e321f
avcodec/hevcdsp_template.c: Fix undefined shift in FUNC(dequant)
...
Fixes: runtime error: left shift of negative value -180
Fixes: 4626/clusterfuzz-testcase-minimized-5647837887987712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0c9ab5ef9c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
1d9830cba3
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0() and COMPOSE_DD137iL0()
...
Fixes: runtime error: signed integer overflow: 2147483646 + 33554433 cannot be represented in type 'int'
Fixes: 4563/clusterfuzz-testcase-minimized-5438979567517696
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4d70fbeec8
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
41a706b912
avcodec/hevc_cabac: Fix integer overflow in ff_hevc_cu_qp_delta_abs()
...
Fixes: signed integer overflow: 2147483647 + 1073741824 cannot be represented in type 'int'
Fixes: 4555/clusterfuzz-testcase-minimized-4505532481142784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0ee143558d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
7a5c738963
tests/audiomatch: Add missing return code at the end of main()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 65da5c56e6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
bdba0f6786
avcodec/hevc_sei: Fix integer overflows in decode_nal_sei_message()
...
Fixes: signed integer overflow: 2147483520 + 255 cannot be represented in type 'int'
Fixes: 4554/clusterfuzz-testcase-minimized-4843714515042304
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 991ef6e5b9
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
badca11741
avcodec/hevcdsp_template: Fix undefined shift in put_hevc_qpel_bi_w_hv()
...
Fixes: runtime error: left shift of negative value -3
Fixes: 4524/clusterfuzz-testcase-minimized-6055590120914944
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 439fbb9c8b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Kelly Ledford
b7c9f27ad6
libavfilter/af_dcshift.c: Fixed repeated spelling error
...
'threshhold' should be 'threshold'
Signed-off-by: Kelly Ledford <kelly.ledford@intel.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit bc219082bb
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Jun Zhao
603845225c
avfilter/formats: fix wrong function name in error message
...
Use perdefined micro __FUNCTION__ rather than hard coding function name
to fix wrong function name in error message.
Signed-off-by: Jun Zhao <jun.zhao@intel.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4280948702
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
3d297038a9
avcodec/amrwbdec: Fix division by 0 in voice_factor()
...
The added value matches "Digital cellular telecommunications system (Phase 2+) (GSM); Universal Mobile Telecommunications System (UMTS); LTE; Extended Adaptive Multi-Rate - Wideband (AMR-WB+) codec; Floating-point ANSI-C code (3GPP TS 26.304 version 14.0.0 Release 14)
Extended Adaptive Multi-Rate - Wideband (AMR-WB+) codec; Floating-point ANSI-C code"
Fixes: runtime error: division by zero
Fixes: 4415/clusterfuzz-testcase-minimized-4677752314658816
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1d0817d56b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
054188db10
avcodec/diracdsp: Fix integer overflow in PUT_SIGNED_RECT_CLAMPED()
...
Fixes: runtime error: signed integer overflow: 2147483646 + 2048 cannot be represented in type 'int'
Fixes: 4479/clusterfuzz-testcase-minimized-6529894147162112
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 610dd74502
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
454a2405ce
avcodec/dirac_dwt: Fix integer overflows in COMPOSE_DAUB97*
...
Fixes: 4478/clusterfuzz-testcase-minimized-4752113767809024
Fixes: runtime error: signed integer overflow: -2147483626 + -319489 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5e9a13a5a3
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Nikolas Bowe
01ab4117dc
avcodec/extract_extradata_bsf: Fix leak discovered via fuzzing
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5a412a5c3c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
39db2f9514
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
...
Didn't notice this one when 9648cc6d
was landed.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 95bacb521a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
272a9687a7
Don't manipulate duration when it's AV_NOPTS_VALUE.
...
This leads to signed integer overflow.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit c5fd57f483
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
9bc2f44c27
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
...
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 9648cc6d7f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
85ea121684
avformat/utils: Prevent undefined shift with wrap_bits > 64.
...
2LL << (wrap_bits=64 - 1) does not fit in int64_t; change the
code to use a uint64_t (2ULL) and add an av_assert2() to
ensure wrap_bits <= 64.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 03fbc0daa7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
79ec638115
avcodec/j2kenc: Fix out of array access in encode_cblk()
...
Fixes: 4427/clusterfuzz-testcase-minimized-5106919271301120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0674087004
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
c8bbddf057
avcodec/hevcdsp_template: Fix undefined shift in put_hevc_epel_bi_w_h()
...
Fixes: runtime error: left shift of negative value -127
Fixes: 4397/clusterfuzz-testcase-minimized-4779061080489984
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0409d33311
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
cead6c94c5
avcodec/mlpdsp: Fix signed integer overflow, 2nd try
...
The outputted bits should match what is used in the lossless check
Fixes: runtime error: signed integer overflow: -538697856 * 256 cannot be represented in type 'int'
Fixes: 4326/clusterfuzz-testcase-minimized-5689449645080576
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 97c00edaa0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
d5bdcd8a27
avcodec/kgv1dec: Check that there is enough input for maximum RLE compression
...
Fixes: Timeout
Fixes: 4271/clusterfuzz-testcase-4676667768307712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 3aad94bf2b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
7bc064d461
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_FIDELITYi*
...
Fixes: runtime error: signed integer overflow: -2143827186 - 7404944 cannot be represented in type 'int'
Fixes: 4354/clusterfuzz-testcase-minimized-4671122764201984
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2b6964f764
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
70dc266342
avcodec/mpeg4videodec: Check also for negative versions in the validity check
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0e7865ce41
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
2de4eb6fec
Close ogg stream upon error when using AV_EF_EXPLODE.
...
Without this there can be multiple memory leaks for unrecognized
ogg streams.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit bce8fc0754
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
11a940adbc
Fix undefined shift on assumed 8-bit input.
...
decode_user_data() attempts to create an integer |build|
value with 8 bits of spacing for 3 components. However
each component is an int32_t, so shifting each component
is undefined for values outside of the 8 bit range.
This patch simply clamps input to 8-bits per component
and prints out a warning that the values were clamped.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7010dd98b5
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
edd0cd21f4
Use ff_thread_once for fixed, float table init.
...
These tables are static so they should only be initialized once
instead of on every call to ff_mpadsp_init().
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5eaaffaf64
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Dale Curtis
362967fec6
Fix leak of frame_duration_buffer in mov_fix_index().
...
Should be unconditionally freed at the end of mov_fix_index() in
case it hasn't been used during the fix up.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org >
Reviewed-by: Sasi Inguva <isasi-at-google.com@ffmpeg.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d073be2291
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Jacob Trimble
a0eccf673c
avformat/mov: Propagate errors in mov_switch_root.
...
Signed-off-by: Jacob Trimble <modmaker@google.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2d9cf3bf16
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:32 +01:00
Michael Niedermayer
fa29141e34
avcodec/hevcdsp_template: Fix invalid shift in put_hevc_epel_bi_w_v()
...
Fixes: runtime error: left shift of negative value -255
Fixes: 4037/clusterfuzz-testcase-minimized-5290998163832832
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7d88586e47
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
f4e25620a1
avcodec/mlpdsp: Fix undefined shift ff_mlp_pack_output()
...
Fixes: runtime error: left shift of negative value -7862264
Fixes: 4074/clusterfuzz-testcase-minimized-4516104123711488
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4f7f70738e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
1c9af4d7a8
avcodec/zmbv: Check that the buffer is large enough for mvec
...
Fixes: Timeout
Fixes: 4143/clusterfuzz-testcase-4736864637419520
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2ab9568a2c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
78a0356fae
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD137iL0()
...
Fixes: 4035/clusterfuzz-testcase-minimized-6479308925173760
Fixes: runtime error: signed integer overflow: 9 * 402653183 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 73964680d7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
4a412dc6ad
avcodec/wmv2dec: Check end of bitstream in parse_mb_skip() and ff_wmv2_decode_mb()
...
Fixes: Timeout
Fixes: 3200/clusterfuzz-testcase-5750022136135680
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 65e0a7c473
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
01439fe1e1
avcodec/snowdec: Check for remaining bitstream in decode_blocks()
...
Fixes: Timeout
Fixes: 3142/clusterfuzz-testcase-5007853163118592
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4527ec2216
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
488c2e8487
avcodec/snowdec: Check intra block dc differences.
...
Fixes: Timeout
Fixes: 3142/clusterfuzz-testcase-5007853163118592
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c3b9bbcc6e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Fredrik Hubinette
74104d2dc0
avformat/mov: Check size of STSC allocation
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a6fdd75fe6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
066c657376
avcodec/vc2enc: Clear coef_buf on allocation
...
Fixes: Use of uninitialized memory
Fixes: assertion failure
Reviewed-by: <atomnuker>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 6d00905f81
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
aac7ca7a36
avcodec/h264dec: Fix potential array overread
...
add padding before scantable arrays
See: 522d850e68
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 380b48fb9f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
96fe37a339
avcodec/x86/mpegvideodsp: Fix signedness bug in need_emu
...
Fixes: out of array read
Fixes: 3516/attachment-311488.dat
Found-by: Insu Yun, Georgia Tech.
Tested-by: wuninsu@gmail.com
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 58cf31cee7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
b3067f95c9
avcodec/aacpsdsp_template: Fix integer overflows in ps_decorrelate_c()
...
Fixes: runtime error: signed integer overflow: 1939661764 - -454942263 cannot be represented in type 'int'
Fixes: 3191/clusterfuzz-testcase-minimized-5688798451073024
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2afe05402f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
8be48f1c9a
avcodec/aacdec_fixed: Fix undefined shift
...
Fixes: runtime error: left shift of negative value -801112064
Fixes: 3492/clusterfuzz-testcase-minimized-5784775283441664
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit fca198fb5b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00
Michael Niedermayer
c1d31ccfac
avcodec/mdct_*: Fix integer overflow in addition in RESCALE()
...
Fixes: runtime error: signed integer overflow: 1219998458 - -1469874012 cannot be represented in type 'int'
Fixes: 3443/clusterfuzz-testcase-minimized-5369987105554432
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 770c934fa1
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-12-30 21:11:31 +01:00