Hendrik Leppkes
c9408c41e7
avcodec/vdpau_mpeg12: fix order of quant matrix coefficients
...
The matrix coefficients are stored permutated for the IDCT,
rather then in plain raster order, and need to be un-permutated
for the hardware.
2023-05-15 18:49:41 +02:00
Hendrik Leppkes
84ea3afdae
avcodec/nvdec_mpeg4: fix order of quant matrix coefficients
...
The matrix coefficients are stored permutated for the IDCT,
rather then in plain raster order, and need to be un-permutated
for the hardware.
2023-05-15 18:49:41 +02:00
Hendrik Leppkes
1c19e2c82d
avcodec/nvdec_mpeg2: fix order of quant matrix coefficients
...
The matrix coefficients are stored permutated for the IDCT,
rather then in plain raster order, and need to be un-permutated
for the hardware.
2023-05-15 18:49:40 +02:00
Michael Niedermayer
b0fe83714b
Update for 4.2.9
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
n4.2.9
2023-04-21 11:01:17 +02:00
Michael Niedermayer
7c538b3370
avcodec/escape124: Check that blocks are allocated before use
...
Fixes: NULL pointer dereference
Fixes: 57819/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-5077280228769792
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5366ae12b9
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:21 +02:00
Michael Niedermayer
271b5016eb
avcodec/huffyuvdec: Fix undefined behavior with shift
...
Fixes: left shift of negative value -1
Fixes: 57554/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFVHUFF_fuzzer-4853603839115264
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 27e7857bd1
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:21 +02:00
Michael Niedermayer
cc34df4f71
avcodec/j2kenc: Replace RGB24 special case by generic test
...
This fixes RGB48 with libavcodec as decoder
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ad4d647591
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:21 +02:00
Michael Niedermayer
f8b3acf517
avcodec/j2kenc: remove misleading pred value
...
This field is only checked for being 0 or not and not zero means 5/3
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0adb375377
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:20 +02:00
Michael Niedermayer
c73a9382c6
avcodec/j2kenc: fix 5/3 DWT identifer
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit f6955b6df4
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:20 +02:00
Michael Niedermayer
d4d83b910a
avcodec/vp3: Check width to avoid assertion failure
...
Fixes: Assertion failure on x86-32
av_assert2(block_w * sizeof(pixel) <= FFABS(buf_linesize)); in ff_emulated_edge_mc()
Fixes: 39641/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THEORA_fuzzer-5925660741206016
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit dab1cd2dc0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:20 +02:00
Michael Niedermayer
ed83667058
avcodec/g729postfilter: Limit shift in long term filter
...
Fixes: shift exponent 34 is too large for 32-bit type 'int'
Fixes: 57389/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ACELP_KELVIN_fuzzer-6229522659016704
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 6d1d8609ac
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:19 +02:00
Lynne
8b4c333134
configure: update copyright year
...
(cherry picked from commit 62da0b4a74
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:19 +02:00
Michael Niedermayer
0f57a289d2
avcodec/tests/snowenc: Fix 2nd test
...
(cherry picked from commit 163013c724
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:19 +02:00
Michael Niedermayer
af693e639e
avcodec/tests/snowenc: return a failure if DWT/IDWT mismatches
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 771c266c0b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:18 +02:00
Michael Niedermayer
f36a243c04
avcodec/snowenc: Fix visual weight calculation
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5b5fcadea0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:18 +02:00
Michael Niedermayer
022eee9ad9
avcodec/tests/snowenc: unbreak DWT tests
...
the IDWT data type mismatched current code
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 8b3351bbea
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:18 +02:00
Jiasheng Jiang
b2e1ee39f5
avcodec/vp3: Add missing check for av_malloc
...
Since the av_malloc() may fail and return NULL pointer,
it is needed that the 's->edge_emu_buffer' should be checked
whether the new allocation is success.
Fixes: d14723861b
("VP3: fix decoding of videos with stride > 2048")
Reviewed-by: Peter Ross <pross@xvid.org >
Signed-off-by: Jiasheng Jiang <jiasheng@iscas.ac.cn >
(cherry picked from commit 656cb0450a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:17 +02:00
Michael Niedermayer
ba1da094c9
avcodec/escape124: Fix some return codes
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 98df605f7a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:17 +02:00
Michael Niedermayer
82f79dd77f
avcodec/escape124: fix signdness of end of input check
...
Fixes: Timeout
Fixes: 56561/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-5560363635834880
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 87ad0a5dd7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:17 +02:00
Michael Niedermayer
a5930f4368
Use https for repository links
...
Reviewed-by: Stefano Sabatini <stefasab@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 011f30fc82
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:16 +02:00
Michael Niedermayer
8215c6b21c
avcodec/motionpixels: Mask pixels to valid values
...
Fixes: out of array access
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MOTIONPIXELS_fuzzer-6724203352555520
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ac6eec1fc2
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:16 +02:00
Michael Niedermayer
fbe41b907a
avcodec/xpmdec: Check size before allocation to avoid truncation
...
Fixes:OOM
Fixes:out of array access (no testcase)
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_XPM_fuzzer-6573323838685184
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 95f0f84dae
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:16 +02:00
Michael Niedermayer
83e73df00e
avcodec/bink: Avoid undefined out of array end pointers in binkb_decode_plane()
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ea9deafd3b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:15 +02:00
Michael Niedermayer
7cba5ebd7d
avcodec/bink: Fix off by 1 error in ref end
...
Fixes: out of array access
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-6657932926517248
Alterantivly to this it is possibly to allocate a bigger array
Note: oss-fuzz assigned this issue to a unrelated theora bug so the bug number matches that
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 49487045dd
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:15 +02:00
Michael Niedermayer
94687a5eff
avcodec/utils: Ensure linesize for SVQ3
...
Fixes: Assertion block_w * sizeof(uint8_t) <= ((buf_linesize) >= 0 ? (buf_linesize) : (-(buf_linesize))
Fixes: 54861/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SVQ3_fuzzer-5352418248622080
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4eef658ca5
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:15 +02:00
Michael Niedermayer
0c30285132
avcodec/utils: allocate a line more for VC1 and WMV3
...
Fixes: out of array read on 32bit
Fixes: 54857/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VC1_fuzzer-5840588224462848
The chroma MC code reads over the currently allocated frame.
Alternative fixes would be allocating a few bytes more at the end instead of a whole
line extra or to adjust the threshold where the edge emu code is activated
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 01636a63d4
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:14 +02:00
Michael Niedermayer
ed78f71c6a
avcodec/videodsp_template: Adjust pointers to avoid undefined pointer things
...
Fixes: subtraction of unsigned offset from 0xf6602770 overflowed to 0xf6638c80
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THEORA_fuzzer-495074400600064
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit f0150cd41c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:14 +02:00
Michael Niedermayer
6875531f44
avcodec/pngdec: Check deloco index more exactly
...
Fixes: out of array access:
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PNG_fuzzer-6716193709096960
Alternatively it should be possible to limit this to 3 plane RGB 8 /16bit to ensure the size is what it should be
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d5bae70406
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:14 +02:00
Michael Niedermayer
747cefb8e6
avcodec/ffv1dec: Check that num h/v slices is supported
...
Fixes: out of array access
Fixes: 55597/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_fuzzer-4898293416329216
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 8ead0ae68e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:13 +02:00
Michael Niedermayer
26a98f0dba
avformat/mov: Check samplesize and offset to avoid integer overflow
...
Fixes: signed integer overflow: 9223372036854775584 + 536870912 cannot be represented in type 'long'
Fixes: 55844/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-510613920664780
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 53c1f5c2e2
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:13 +02:00
Michael Niedermayer
1e6d77a4ce
avcodec/pictordec: Remove mid exit branch
...
This causes the RLE decoder to exit before applying the last RLE run
All images i tested with are unchanged, this makes the special case
for handling the last run unused for non truncated images.
Reviewed-by: Peter Ross <pross@xvid.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 88f0e05c72
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:13 +02:00
Michael Niedermayer
f952c536ef
avcodec/eac3dec: avoid float noise in fixed mode addition to overflow
...
Fixes: 2.28595e+09 is outside the range of representable values of type 'int'
Fixes: 54644/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AC3_FIXED_fuzzer-4816961584627712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2f48d227c1
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:12 +02:00
Michael Niedermayer
22cca60c21
avcodec/utils: use 32pixel alignment for bink
...
bink supports 16x16 blocks in chroma planes thus we need to allocate enough.
Fixes: out of array access
Fixes: 55026/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-6013915371012096
Reviewed-by: Peter Ross <pross@xvid.org >
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit b95b2c8492
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:12 +02:00
Michael Niedermayer
1f8a4e35a1
avcodec/scpr3: Check bx
...
Fixes: Out of array access
Fixes: 55102/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-4877396618903552
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit cc7e984a05
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:12 +02:00
Michael Niedermayer
85b4c5c106
avcodec/012v: Order operations for odd size handling
...
Fixes: out of array access
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ZERO12V_fuzzer-6714182078955520.fuzz
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ZERO12V_fuzzer-6698145212137472.fuzz
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4d42d82563
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:11 +02:00
Michael Niedermayer
102384cd7d
avcodec/eatgq: : Check index increments in tgq_decode_block()
...
Fixes: out of array access
Fixes: 48567/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EATGQ_fuzzer-6743211456724992
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit e7755b433e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:11 +02:00
Michael Niedermayer
5cc68bb176
avcodec/scpr: Test bx before use
...
Fixes: out of array access on 32bit
Fixes: 54850/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-5302669294305280
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 1b59de3770
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:11 +02:00
Michael Niedermayer
255794f034
avcodec/sunrast: Fix maplength check
...
Fixes: out of bounds read
Found-by: Ibrahim Mohamed <ielsayed@meta.com >
Reviewed-by; Ibrahim Mohamed <ielsayed@meta.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit f8a2a65078
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:10 +02:00
Michael Niedermayer
e02bd11090
avcodec/wavpack: Avoid undefined shift in get_tail()
...
Fixes: left shift of 1208485947 by 1 places cannot be represented in type 'int'
Fixes: 54058/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer-5827521084260352
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 8374a747af
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:10 +02:00
Michael Niedermayer
9980d388b9
avformat/id3v2: Check taglen in read_uslt()
...
Fixes: Timeout (read mostly the same data repeatly)
Fixes: 52457/clusterfuzz-testcase-minimized-ffmpeg_dem_ALP_fuzzer-6610706313379840
Fixes: 53098/clusterfuzz-testcase-minimized-ffmpeg_dem_SOL_fuzzer-6481382981632000
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit a798af91d7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:10 +02:00
Michael Niedermayer
c4c1c28207
avcodec/ffv1dec: restructure slice coordinate reading a bit
...
Fixes: signed integer overflow: -1094995528 * 8224 cannot be represented in type 'int'
Fixes: 53508/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFV1_fuzzer-474551033462784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 74b6ac7ebb
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:09 +02:00
Michael Niedermayer
60d1f87b30
avcodec/mlpdec: Check max matrix instead of max channel in noise check
...
This is a regression since: adaa06581c
Before this, max_channel and max_matrix_channel where compared for equality
Fixes: out of array access
Fixes: 53340/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer-514959011885875
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit aa79560de5
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:09 +02:00
Michael Niedermayer
a604063ede
swscale/input: Use more unsigned intermediates
...
Same principle as previous commit, with sufficiently huge rgb2yuv table
values this produces wrong results and undefined behavior.
The unsigned produces the same incorrect results. That is probably
ok as these cases with huge values seem not to occur in any real
use case.
Fixes: signed integer overflow
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ba209e3d51
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:09 +02:00
Michael Niedermayer
5f61c15e3c
avcodec/alsdec: The minimal block is at least 7 bits
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5280947fb6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:08 +02:00
Michael Niedermayer
e205351fa9
avformat/replaygain: avoid undefined / negative abs
...
Fixes: signed integer overflow: -2147483648 * 100000 cannot be represented in type 'int'
Fixes: 52060/clusterfuzz-testcase-minimized-ffmpeg_dem_MP3_fuzzer-5131616708329472
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2532b20b17
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:08 +02:00
Michael Niedermayer
87df8385b8
swscale/output: Bias 16bps output calculations to improve non overflowing range
...
Fixes: integer overflow
Fixes: ./ffmpeg -f rawvideo -video_size 66x64 -pixel_format yuva420p10le -i ~/videos/overflow_input_w66h64.yuva420p10le -filter_complex "scale=flags=bicubic+full_chroma_int+full_chroma_inp+bitexact+accurate_rnd:in_color_matrix=bt2020:out_color_matrix=bt2020:in_range=full:out_range=full,format=rgba64[out]" -pixel_format rgba64 -map '[out]' -y overflow_w66h64.png
Found-by: Drew Dunne <asdunne@google.com >
Tested-by: Drew Dunne <asdunne@google.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0f0afc7fb5
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:08 +02:00
Michael Niedermayer
4d5e869ea7
avcodec/speedhq: Check buf_size to be big enough for DC
...
Fixes: Timeout
Fixes: 51919/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer-6023716480090112
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 9184d3d7b6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:55:07 +02:00
Michael Niedermayer
f0e536f603
avcodec/ffv1dec: Fail earlier if prior context is corrupted
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4df91e2215
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2023-04-21 01:54:53 +02:00
Timo Rothenpieler
a1b534bf83
avcodec/nvenc: fix vbv buffer size in cq mode
...
The CQ calculation gets thrown off and behaves very nonsensical
if it isn't set to 0.
2022-12-08 12:40:51 +01:00
James Almer
e228a0cccd
avcodec/mjpegenc: take into account component count when writing the SOF header size
...
Fixes ticket #10069
Signed-off-by: James Almer <jamrial@gmail.com >
(cherry picked from commit 1009396953
)
2022-11-28 08:48:07 -03:00