James Cowgill
8aa32a8d5c
swscale: fix gbrap16 alpha channel issues
...
Fixes filter-pixfmts-scale test failing on big-endian systems due to
alpSrc not being cast to (const int32_t**).
Also fixes distortions in the output alpha channel values by copying the
alpha channel code from the rgba64 case found elsewhere in output.c.
Fixes ticket 6555.
Signed-off-by: James Cowgill <James.Cowgill@imgtec.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 013ec23cbe
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-09-10 01:33:28 +02:00
Michael Niedermayer
ef8db67c92
avcodec/h264idct_template: Fix integer overflow in ff_h264_idct_add()
...
Fixes: runtime error: signed integer overflow: 26215360 + 2121330944 cannot be represented in type 'int'
Fixes: 2809/clusterfuzz-testcase-minimized-4785181833560064
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
(cherry picked from commit d1bfa80ec4
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-09-10 01:33:28 +02:00
Michael Niedermayer
c554788352
avcodec/diracdsp: fix integer overflow
...
Fixes: runtime error: signed integer overflow: 11 * 225726413 cannot be represented in type 'int'
Fixes: 2764/clusterfuzz-testcase-minimized-5382561922547712
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit b2d9d72269
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-09-10 01:33:28 +02:00
Michael Niedermayer
4306ddd87d
avcodec/diracdec: Check weight_log2denom
...
Fixes: runtime error: shift exponent -1 is negative
Fixes: 2742/clusterfuzz-testcase-minimized-5724322402402304
Fixes: 2744/clusterfuzz-testcase-minimized-4672435653705728
Fixes: 2749/clusterfuzz-testcase-minimized-5298741273690112
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 880f5c5913
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-09-10 01:33:28 +02:00
Timo Rothenpieler
bab4cb3fb5
avcodec/nvenc: only push cuda context on encoder close if encoder exists
...
Signed-off-by: Timo Rothenpieler <timo@rothenpieler.org >
2017-09-01 11:02:07 +02:00
Muhammad Faiz
e51e07c34e
avfilter/vf_ssim: fix temp size calculation
...
Also use av_mallocz_array.
Fix Ticket6519.
Reviewed-by: Tobias Rapp <t.rapp@noa-archive.com >
Signed-off-by: Muhammad Faiz <mfcc64@gmail.com >
(cherry picked from commit f2d23ec03f
)
2017-08-06 14:53:28 +07:00
Michael Niedermayer
9079c70d20
Changelog:update
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
n3.3.3
2017-07-29 19:17:56 +02:00
Michael Niedermayer
4f71435248
avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()
...
Fixes: runtime error: signed integer overflow: 9 * 335544320 cannot be represented in type 'int'
Fixes: 2739/clusterfuzz-testcase-minimized-6737297955356672
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit bf8ab72ae9
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 19:13:19 +02:00
Michael Niedermayer
934878f2a6
avcodec/diracdec: Fix integer overflow in divide3()
...
Fixes: runtime error: signed integer overflow: -1073746548 * 21845 cannot be represented in type 'int'
Fixes: 2729/clusterfuzz-testcase-minimized-5902915464069120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c0220c768c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 14:23:24 +02:00
Michael Niedermayer
38d9a782a5
avcodec/takdec: Fix integer overflow in decode_subframe()
...
Fixes: runtime error: signed integer overflow: -536870912 - 1972191120 cannot be represented in type 'int'
Fixes: 2711/clusterfuzz-testcase-minimized-4975142398590976
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2c630d159f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 14:18:34 +02:00
Michael Niedermayer
6de5ec8ef8
avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2
...
Fixes: out of array accesses
Found-by: JunDong Xie of Ant-financial Light-Year Security Lab
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ffcc82219c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 14:17:57 +02:00
Michael Niedermayer
0d2b67d17c
avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2
...
Fixes: out of array accesses
Fixes: crash-9238fa9e8d4fde3beda1f279626f53812cb001cb-SEGV
Found-by: JunDong Xie of Ant-financial Light-Year Security Lab
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 08c073434e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-29 04:49:45 +02:00
Michael Niedermayer
d40bb6f5e9
avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH()
...
Fixes: runtime error: signed integer overflow: 1073741823 * 4 cannot be represented in type 'int'
Fixes: 2729/clusterfuzz-testcase-minimized-5902915464069120
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 8e275a74b0
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-28 03:41:07 +02:00
Michael Niedermayer
aadfec7d6c
avcodec/pixlet: Simplify nbits computation
...
Fixes multiple integer overflows
Fixes: runtime error: signed integer overflow: 1 + 2147483647 cannot be represented in type 'int'
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit aeddb3607b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-28 03:40:59 +02:00
Michael Niedermayer
47c0626ec7
avcodec/dnxhddec: Move mb height check out of non hr branch
...
Fixes: out of array access
Fixes: poc.dnxhd
Found-by: Bingchang, Liu@VARAS of IIE
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 296debd213
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-27 03:11:19 +02:00
Michael Niedermayer
2f75ebe24a
avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2
...
Fixes: runtime error: signed integer overflow: -2147483647 - 2 cannot be represented in type 'int'
Fixes: 2702/clusterfuzz-testcase-minimized-4511932591636480
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 74c1c22d7f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 17:24:25 +02:00
Michael Niedermayer
a9081b36f4
avformat/oggparsecelt: Do not re-allocate os->private
...
Fixes: double free
Fixes: clusterfuzz-testcase-minimized-5080550145785856
Found-by: ClusterFuzz
Reviewed-by: Nicolas George <george@nsup.org >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7140761481
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 00:14:56 +02:00
Michael Niedermayer
b120685dca
avcodec/ylc: Fix shift overflow
...
Fixes: runtime error: shift exponent 32 is too large for 32-bit type 'unsigned int'
Fixes: 2698/clusterfuzz-testcase-minimized-4713541443518464
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 03a9e6ff30
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 00:14:20 +02:00
Michael Niedermayer
b44a3cd06e
avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()
...
Fixes: avcodec/aacps.c:511:40: runtime error: signed integer overflow: 1509077651 + 758068176 cannot be represented in type 'int'
Fixes: 2678/clusterfuzz-testcase-minimized-4702787684270080
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0764fe1d09
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 00:14:01 +02:00
Michael Niedermayer
a930db5c82
avcodec/aacdec_fixed: fix: left shift of negative value -1
...
Fixes: 2699/clusterfuzz-testcase-minimized-5631303862976512
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2dfb8c4178
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-26 00:11:54 +02:00
Michael Niedermayer
f10252e47d
avcodec/dirac_vlc: Fix undefined shift
...
Fixes: runtime error: shift exponent 64 is too large for 64-bit type 'residual' (aka 'unsigned long')
Fixes: 2674/clusterfuzz-testcase-minimized-4999700518273024
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 69e7daf6ce
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-24 03:03:14 +02:00
Brice Waegeneire
4627033a23
doc/filters: typo in frei0r
...
Signed-off-by: Brice Waegeneire <brice.wge@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 6a6eec485d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-23 15:01:03 +02:00
Vodyannikov Aleksandr
20c440edbc
avcodec/cfhd: Fix decoding regression due to height check
...
Fixes: Ticket6546
Regression since: 54aaadf648
Reviewed-by: Muhammad Faiz <mfcc64@gmail.com >
Reviewed-by: Kieran Kunhya <kierank@obe.tv >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 47c9365724
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-23 15:00:51 +02:00
Michael Niedermayer
ab81ea1035
Update for 3.3.3
...
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:28:08 +02:00
Michael Niedermayer
2f2904030f
avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later
...
Fixes: runtime error: shift exponent 47 is too large for 32-bit type 'int'
Fixes: 2581/clusterfuzz-testcase-minimized-4681474395602944
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2886142e0c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
064d0c6462
avcodec/ffv1dec_template: Fix signed integer overflow
...
Fixes: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
Fixes: 2634/clusterfuzz-testcase-minimized-4540890636877824
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4de4308d2a
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
9ce4350c48
avcodec/aacdec_template: Fix undefined integer overflow in apply_tns()
...
Fixes: runtime error: signed integer overflow: -2147483648 - 1202286525 cannot be represented in type 'int'
Fixes: 2071/clusterfuzz-testcase-minimized-6036414271586304
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0ef8f03133
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
6ae1b70cb4
avcodec/magicyuv: Check that vlc len is not too large
...
Fixes: runtime error: shift exponent -95 is negative
Fixes: 2568/clusterfuzz-testcase-minimized-4926115716005888
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 341f01290c
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
dbb121688c
avcodec/mjpegdec: Clip DC also on the negative side.
...
Fixes: runtime error: signed integer overflow: -16711425 + -2130772346 cannot be represented in type 'int'
Fixes: 2533/clusterfuzz-testcase-minimized-5372857678823424
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c28f648b19
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
1667b3ea0f
avcodec/aacps (fixed point): Fix multiple signed integer overflows
...
Fixes: runtime error: signed integer overflow: 1421978265 - -1810326882 cannot be represented in type 'int'
Fixes: 2527/clusterfuzz-testcase-minimized-5260915396050944
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 80b9e40b6f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
20d4514f25
avcodec/ylc: Fix vlc of 31 bits
...
Fixes: runtime error: left shift of 1 by 31 places cannot be represented in type 'int'
Fixes: 2515/clusterfuzz-testcase-minimized-6197200012967936
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit fe9242204d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
8d3ac812ff
avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()
...
Fixes: runtime error: signed integer overflow: -2049425300 + -117591631 cannot be represented in type 'int'
Fixes: part of 2096/clusterfuzz-testcase-minimized-4901566068817920
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2061de8a3f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
ba3a4a94bc
avcodec/hevcdec: do not let updated extradata corrupt state
...
Fixes: out of array access
Fixes: 2451/clusterfuzz-testcase-minimized-4781613957251072
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Hendrik Leppkes <h.leppkes@gmail.com >
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c8cfbc6629
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
fb55620369
avcodec/wavpack: Fix invalid shift
...
Fixes: runtime error: left shift of 1 by 31 places cannot be represented in type 'int'
Fixes: 2377/clusterfuzz-testcase-minimized-6108505935183872
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c07af72098
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
0a36341e96
avcodec/h264_slice: Fix signed integer overflow
...
Fixes: runtime error: signed integer overflow: 26 + 2147483644 cannot be represented in type 'int'
Fixes: 2456/clusterfuzz-testcase-minimized-4822695051001856
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 7592d97f10
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
1a21edf7b8
avcodec/hevc_ps: Fix integer overflow with beta/tc offsets
...
Fixes: runtime error: signed integer overflow: 2113929216 * 2 cannot be represented in type 'int'
Fixes: 2422/clusterfuzz-testcase-minimized-5242114713583616
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit de54a37c1d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
94c8e53034
avcodec/cfhd: Fix invalid left shift of negative value
...
Fixes: runtime error: left shift of negative value -1
Fixes: 2395/clusterfuzz-testcase-minimized-6540529313513472
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit c709f009da
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
132037ad5b
avcodec/vb: Check vertical GMC component before multiply
...
Fixes: runtime error: signed integer overflow: 8224 * 663584 cannot be represented in type 'int'
Fixes: 2393/clusterfuzz-testcase-minimized-6128334993883136
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit bc6ab72bc7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
f3cb2eedeb
avcodec/hevcdec: do basic validity check on delta_chroma_weight and offset
...
Fixes: runtime error: signed integer overflow: 2147483520 + 128 cannot be represented in type 'int'
Fixes: 2385/clusterfuzz-testcase-minimized-6594333576790016
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 2c874548d6
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
736c73a243
avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
...
Fixes: runtime error: signed integer overflow: -163654656 * 256 cannot be represented in type 'int'
Fixes: 2367/clusterfuzz-testcase-minimized-4648678897745920
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ea5366670e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
0272afe70d
avcodec/apedec: Fix integer overflow
...
Fixes: out of array access
Fixes: PoC.ape and others
Found-by: Bingchang, Liu@VARAS of IIE
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit ba4beaf614
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
165b2ee692
avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
...
Fixes: runtime error: signed integer overflow: 2080374785 + 2080374784 cannot be represented in type 'int'
Fixes: 2351/clusterfuzz-testcase-minimized-5359403240783872
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 73ea2a028e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
ea153eb52c
avcodec/hevc_ps: Fix max_dec_buffer check
...
Fixes: runtime error: signed integer overflow: -2147483648 - 1 cannot be represented in type 'int'
Fixes: 2339/clusterfuzz-testcase-minimized-6663164320022528
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 63e7bfe78e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
f21e96109d
avcodec/mpeg4videodec: Fix GMC with videos of dimension 1
...
Fixes: runtime error: shift exponent -1 is negative
Fixes: 2338/clusterfuzz-testcase-minimized-5153426541379584
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 4976a3411f
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
94f3c06678
avcodec/wavpack: Fix integer overflow
...
Fixes: runtime error: signed integer overflow: 227511904 + 1964113935 cannot be represented in type 'int'
Fixes: 2331/clusterfuzz-testcase-minimized-6182185830711296
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 24e95f9d4d
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
3ed986522a
avcodec/takdec: Fix integer overflow
...
Fixes: runtime error: signed integer overflow: 512 + 2147483146 cannot be represented in type 'int'
Fixes: 2314/clusterfuzz-testcase-minimized-4519333877252096
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 0c2ef4f6b4
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
f1116294aa
avcodec/tiff: Update pointer only when the result is used
...
Fixes: runtime error: signed integer overflow: 538976288 * 32 cannot be represented in type 'int'
Fixes: 2310/clusterfuzz-testcase-minimized-4534784887881728
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 27f80ab016
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
0749384f0a
avcodec/cfhd: Check bpc before setting bpc in context
...
Fixes: runtime error: shift exponent 32 is too large for 32-bit type 'int'
Fixes: 2306/clusterfuzz-testcase-minimized-5002997392211968
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 6f1d2355a7
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
fe8960ab86
avcodec/cfhd: Fix undefined shift
...
Fixes: runtime error: left shift of negative value -1
Fixes: 2303/clusterfuzz-testcase-minimized-5529675273076736
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit 5a950f4e32
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00
Michael Niedermayer
5b8a97d000
avcodec/hevc_filter: Fix invalid shift
...
Fixes: runtime error: left shift of negative value -1
Fixes: 2299/clusterfuzz-testcase-minimized-4843509351710720
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
(cherry picked from commit d7b3d5c3f2
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc >
2017-07-19 15:26:37 +02:00