highperfocused/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ffmpeg/libavformat
History
Michael Niedermayer 6c214b8e1a
avformat/bfi: Check offsets better 
Fixes: signed integer overflow: -2145378272 - 538976288 cannot be represented in type 'int'
Fixes: 45690/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5015496544616448

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 35dc93ab44a57d78956414624c4e011414220e98)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2022-10-28 21:04:04 +02:00
..
4xm.c
avformat/4xm: Check for duplicate track ids
2022-01-13 22:50:52 +01:00
a64.c
…
aacdec.c
…
aadec.c
avformat/aadec: Check toc_size to contain the minimum to demuxer uses
2020-07-05 12:43:08 +02:00
ac3dec.c
…
act.c
…
adp.c
…
adtsenc.c
avformat/adtsenc: return value check for init_get_bits in adts_decode_extradata
2021-10-17 21:34:53 +02:00
adxdec.c
…
aea.c
…
afc.c
…
aiff.h
…
aiffdec.c
avformat/aiffdec: Check for size overflow in header parsing
2021-10-17 21:34:53 +02:00
aiffenc.c
…
allformats.c
…
amr.c
libavformat/amr.c: Check return value from avio_read()
2020-04-23 21:29:01 +02:00
anm.c
…
apc.c
…
ape.c
…
apetag.c
…
apetag.h
…
apngdec.c
avformat/apng: fix setting frame delay when max_fps is set to no limit
2017-03-21 20:21:12 -03:00
apngenc.c
…
aqtitledec.c
avformat/aqtitledec: Skip unrepresentable durations
2022-03-28 23:17:57 +02:00
asf.c
…
asf.h
…
asfcrypt.c
…
asfcrypt.h
…
asfdec_f.c
avformat/asfdec_f: Check packet_frag_timestamp
2022-10-28 21:04:04 +02:00
asfdec_o.c
avformat/asfdec_o: Check for EOF in asf_read_marker()
2021-10-17 21:34:53 +02:00
asfenc.c
…
assdec.c
…
assenc.c
…
ast.c
…
ast.h
…
astdec.c
…
astenc.c
…
async.c
…
au.c
…
audiointerleave.c
…
audiointerleave.h
…
avc.c
…
avc.h
…
avformat.h
avformat: Add max_streams option
2017-02-08 21:17:50 +01:00
avformatres.rc
…
avi.h
…
avidec.c
oavformat/avidec: Check offset in odml
2021-10-17 21:34:53 +02:00
avienc.c
…
avio_internal.h
…
avio.c
…
avio.h
…
aviobuf.c
avformat/aviobuf: Fix signed integer overflow in avio_seek()
2017-08-24 12:08:07 +02:00
avisynth.c
…
avlanguage.c
…
avlanguage.h
…
avr.c
…
avs.c
avformat/avs: Use 64bit for the avio_tell() output
2021-10-17 21:34:53 +02:00
bethsoftvid.c
avformat/bethsoftvid: Check image dimensions before use
2021-10-17 21:34:53 +02:00
bfi.c
avformat/bfi: Check offsets better
2022-10-28 21:04:04 +02:00
bink.c
…
bintext.c
avformat/bintext: Check width in idf_read_header()
2021-10-17 21:34:53 +02:00
bit.c
…
bluray.c
…
bmv.c
…
boadec.c
…
brstm.c
…
c93.c
…
cache.c
…
caf.c
…
caf.h
…
cafdec.c
avformat/cafdec: Do not store empty keys in read_info_chunk()
2022-03-28 23:16:47 +02:00
cafenc.c
…
cavsvideodec.c
…
cdg.c
avformat/cdg: Fix integer overflow in duration computation
2021-10-17 21:34:53 +02:00
cdxl.c
avformat/cdxl: Fix integer overflow in intermediate
2019-12-06 20:30:57 +01:00
cinedec.c
avformat/cinedec: Fix index_entries size check
2021-10-17 21:34:53 +02:00
concat.c
…
concatdec.c
avformat/concatdec: use av_strstart()
2021-10-17 21:34:53 +02:00
crcenc.c
…
crypto.c
…
cutils.c
…
dashenc.c
…
data_uri.c
…
dauddec.c
…
daudenc.c
…
dfa.c
…
diracdec.c
…
dnxhddec.c
…
dsfdec.c
…
dsicin.c
avformat/dsicin: Check packet size for overflow
2021-10-17 21:34:53 +02:00
dss.c
…
dtsdec.c
…
dtshddec.c
…
dump.c
…
dv.c
…
dv.h
…
dvbsub.c
…
dvenc.c
…
dxa.c
avformat/dxa: Check fps to be within the supported range more precissely
2021-10-17 21:34:53 +02:00
eacdata.c
…
electronicarts.c
avformat/electronicarts: Clear partial_packet on error
2021-10-17 21:34:53 +02:00
epafdec.c
…
ffm.h
…
ffmdec.c
avformat/ffmdec: Check media type for chunks
2016-12-03 17:46:37 +01:00
ffmenc.c
…
ffmeta.h
…
ffmetadec.c
…
ffmetaenc.c
…
file_open.c
…
file.c
…
filmstripdec.c
filmstripdec: correctly check image dimensions
2016-11-27 00:46:36 +01:00
filmstripenc.c
…
flac_picture.c
…
flac_picture.h
…
flacdec.c
avformat/flacdec: Check avio_read result when reading flac block header.
2017-02-08 21:17:51 +01:00
flacenc_header.c
…
flacenc.c
…
flacenc.h
…
flic.c
…
flv.h
…
flvdec.c
avformat/flvdec: timestamps cannot use the full int64 range
2022-01-13 23:10:59 +01:00
flvenc.c
avformat/flvenc: Check audio packet size
2018-11-02 19:32:43 +01:00
format.c
…
framecrcenc.c
…
framehash.c
…
frmdec.c
…
ftp.c
avformat/ftp: Check for av_strtok() failure
2021-10-17 21:34:53 +02:00
g722.c
…
g723_1.c
…
g729dec.c
…
gif.c
…
gifdec.c
…
golomb_tab.c
…
gopher.c
…
gsmdec.c
…
gxf.c
avformat/gxf: Check pkt_len
2021-10-17 21:34:53 +02:00
gxf.h
…
gxfenc.c
…
h261dec.c
…
h263dec.c
…
h264dec.c
…
hdsenc.c
…
hevc.c
avformat/hvcc: zero initialize the nal buffers past the last written byte
2018-02-24 00:36:57 -03:00
hevc.h
…
hevcdec.c
…
hls.c
avformat/hls: Pass a copy of the URL for probing
2020-07-05 13:01:36 +02:00
hlsenc.c
…
hlsproto.c
…
hnm.c
…
http.c
avformat/http: Fix Out-of-Bounds access in process_line()
2019-12-02 19:41:47 +01:00
http.h
…
httpauth.c
…
httpauth.h
…
icecast.c
…
icodec.c
avformat/icodec: Check for zero streams and stream creation failure
2021-10-17 21:34:53 +02:00
icoenc.c
…
id3v1.c
…
id3v1.h
…
id3v2.c
avformat/id3v2: Check end for overflow in id3v2_parse()
2021-10-17 21:34:53 +02:00
id3v2.h
…
id3v2enc.c
…
idcin.c
…
idroqdec.c
avformat/idroqdec: Check chunk_size for being too large
2016-12-01 23:50:40 +01:00
idroqenc.c
…
iff.c
avformat/iff: Check size before skip
2021-10-17 21:34:53 +02:00
ilbc.c
…
img2_alias_pix.c
…
img2_brender_pix.c
…
img2.c
…
img2.h
…
img2dec.c
…
img2enc.c
…
ingenientdec.c
…
internal.h
…
ipmovie.c
…
ircam.c
…
ircam.h
…
ircamdec.c
…
ircamenc.c
…
isom.c
…
isom.h
avformat/mov.c: require tfhd to begin parsing trun
2019-12-02 19:41:47 +01:00
iss.c
…
iv8.c
…
ivfdec.c
…
ivfenc.c
…
jacosubdec.c
avformat/jacosubdec: Check for min in t overflow in get_shift()
2021-10-17 21:34:53 +02:00
jacosubenc.c
…
jvdec.c
…
latmenc.c
…
libavformat.v
…
libgme.c
…
libmodplug.c
…
libnut.c
…
libquvi.c
…
librtmp.c
…
libsmbclient.c
…
libssh.c
avformat/libssh: check the user provided a password before trying to use it
2018-01-11 10:42:34 -03:00
lmlm4.c
…
loasdec.c
…
log2_tab.c
…
lrc.c
…
lrc.h
…
lrcdec.c
avformat/lrcdec: Clip timestamps
2021-10-17 21:34:53 +02:00
lrcenc.c
…
lvfdec.c
avformat/lvfdec: Check stream_index before use
2021-10-17 21:34:53 +02:00
lxfdec.c
…
m4vdec.c
…
Makefile
libavformat/Makefile: Fix build issues with async test
2020-04-24 13:48:04 +02:00
matroska.c
…
matroska.h
…
matroskadec.c
avformat/matroskadec: Check pre_ns
2022-03-28 23:13:19 +02:00
matroskaenc.c
…
md5enc.c
…
md5proto.c
…
metadata.c
…
metadata.h
…
mgsts.c
…
microdvddec.c
avformat/microdvddec: use 64bit for durations
2021-10-17 21:34:53 +02:00
microdvdenc.c
…
mkvtimestamp_v2.c
…
mlvdec.c
avformat/mlvdec: fail reading a packet with 0 streams
2020-07-05 12:43:08 +02:00
mm.c
avformat/mm: Check for existence of audio stream
2020-07-13 08:54:33 +02:00
mmf.c
…
mms.c
avformat/mms: Add missing chunksize check
2018-07-10 01:52:56 +02:00
mms.h
…
mmsh.c
…
mmst.c
…
mov_chan.c
…
mov_chan.h
…
mov.c
avformat/mov: Disallow empty sidx
2022-03-28 22:40:45 +02:00
movenc.c
aformat/movenc: add missing padding to output track extradata
2022-05-04 18:31:05 +02:00
movenc.h
…
movenchint.c
…
mp3dec.c
…
mp3enc.c
avformat/mp3enc: Avoid SEEK_END as it is unsupported
2019-12-02 19:41:48 +01:00
mpc8.c
avformat/mpc8: Check for position overflow in mpc8_handle_chunk()
2021-10-17 21:34:53 +02:00
mpc.c
…
mpeg.c
avformat/mpeg: Check avio_read() return value in get_pts()
2021-10-17 21:34:53 +02:00
mpeg.h
…
mpegenc.c
avformat/mpegenc: Fix integer overflow with AV_NOPTS_VALUE
2020-07-05 12:43:08 +02:00
mpegts.c
avformat/mpegts: Fix argument type for av_log
2021-10-17 21:34:53 +02:00
mpegts.h
…
mpegtsenc.c
…
mpegvideodec.c
…
mpjpeg.c
…
mpjpegdec.c
…
mpl2dec.c
avformat/mpl2dec: Fix integer overflow with duration
2020-07-05 12:43:08 +02:00
mpsubdec.c
avformat/mpsubdec: Clear queue on error
2019-12-06 20:30:57 +01:00
msnwc_tcp.c
…
mtv.c
…
mux.c
avformat/mux: Fix copy an paste typo
2017-06-05 23:16:54 +02:00
mvdec.c
avformat/mvdec: Check for EOF in read_index()
2021-10-17 21:34:53 +02:00
mvi.c
avformat/mvi: Check audio size for more overflows
2021-10-17 21:34:53 +02:00
mxf.c
…
mxf.h
…
mxfdec.c
avformat/mxfdec: Check for duplicate mxf_read_index_entry_array()
2022-01-13 22:44:14 +01:00
mxfenc.c
…
mxg.c
…
ncdec.c
…
network.c
…
network.h
…
nistspheredec.c
…
noproxy-test.c
…
nsvdec.c
avformat/nsvdec: Fix memleaks on errors while reading the header
2020-04-23 21:29:01 +02:00
nullenc.c
…
nut.c
…
nut.h
…
nutdec.c
avformat/nutdec: Check tmp_size
2021-10-17 21:34:53 +02:00
nutenc.c
avformat/nutenc: don't allocate a dynamic AVIOContext if no index is going to be written
2022-05-04 19:38:52 +02:00
nuv.c
…
oggdec.c
avformat/oggdec: Check for EOF after page header
2020-04-23 21:29:01 +02:00
oggdec.h
avformat/oggdec: Fix integer overflow with invalid pts
2016-08-15 20:25:13 +02:00
oggenc.c
…
oggparsecelt.c
avformat/oggparsecelt: Do not re-allocate os->private
2017-07-26 00:22:55 +02:00
oggparsedirac.c
…
oggparseflac.c
…
oggparseogm.c
avformat/oggparseogm: Check lb against psize
2018-07-10 01:18:52 +02:00
oggparseopus.c
…
oggparseskeleton.c
…
oggparsespeex.c
avformat/oggparsespeex: Check frames_per_packet and packet_size
2016-12-03 04:10:31 +01:00
oggparsetheora.c
avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
2018-07-10 01:18:52 +02:00
oggparsevorbis.c
libavformat/oggparsevorbis: Fix memleak on multiple headers
2018-07-10 01:18:52 +02:00
oggparsevp8.c
Don't manipulate duration when it's AV_NOPTS_VALUE.
2018-01-31 22:56:14 +01:00
oma.c
…
oma.h
…
omadec.c
…
omaenc.c
…
options_table.h
avformat/options_table: Set the default maximum number of streams to 1000
2017-02-08 21:17:50 +01:00
options.c
…
os_support.c
…
os_support.h
…
paf.c
avformat/paf: Check for EOF before allocation in read_header()
2021-10-17 21:34:53 +02:00
pcm.c
…
pcm.h
…
pcmdec.c
…
pcmenc.c
…
pjsdec.c
avformat/pjsdec: Check duration for overflow
2019-12-06 20:30:57 +01:00
pmpdec.c
…
psxstr.c
…
pva.c
avformat/pva: Check for EOF before retrying in read_part_of_packet()
2018-07-10 01:52:56 +02:00
pvfdec.c
…
qcp.c
avformat/qcp: Avoid negative nb_rates
2021-10-17 21:34:53 +02:00
qtpalette.h
…
r3d.c
…
rawdec.c
…
rawdec.h
…
rawenc.c
lavf/rawenc: Only accept the appropriate stream type for raw muxers.
2021-10-17 21:35:41 +02:00
rawenc.h
…
rawvideodec.c
…
rdt.c
…
rdt.h
…
realtextdec.c
avformat/realtextdec: Check the pts difference before using it for the duration computation
2021-10-17 21:34:53 +02:00
redspark.c
…
replaygain.c
…
replaygain.h
…
riff.c
…
riff.h
…
riffdec.c
…
riffenc.c
…
rl2.c
avformat/rl2: Fix DoS due to lack of eof check
2017-08-28 01:43:04 +02:00
rm.c
…
rm.h
…
rmdec.c
avformat/rmdec: Use 64bit for intermediate for DEINT_ID_INT4
2021-10-17 21:34:53 +02:00
rmenc.c
…
rmsipr.c
…
rmsipr.h
…
rpl.c
avformat/rpl: The associative law doesnt hold for signed integers in C
2021-10-17 21:34:53 +02:00
rsd.c
…
rso.c
…
rso.h
…
rsodec.c
…
rsoenc.c
…
rtmp.h
…
rtmpcrypt.c
…
rtmpcrypt.h
…
rtmpdh.c
…
rtmpdh.h
…
rtmphttp.c
…
rtmppkt.c
avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2
2017-07-29 14:17:59 +02:00
rtmppkt.h
…
rtmpproto.c
…
rtp.c
…
rtp.h
…
rtpdec_ac3.c
…
rtpdec_amr.c
…
rtpdec_asf.c
libavformat/rtpdec_asf: zero initialize the AVIOContext struct
2016-08-15 20:25:13 +02:00
rtpdec_dv.c
…
rtpdec_formats.h
…
rtpdec_g726.c
…
rtpdec_h261.c
…
rtpdec_h263_rfc2190.c
…
rtpdec_h263.c
…
rtpdec_h264.c
…
rtpdec_hevc.c
…
rtpdec_ilbc.c
…
rtpdec_jpeg.c
…
rtpdec_latm.c
…
rtpdec_mpa_robust.c
…
rtpdec_mpeg4.c
…
rtpdec_mpeg12.c
…
rtpdec_mpegts.c
…
rtpdec_qcelp.c
…
rtpdec_qdm2.c
…
rtpdec_qt.c
…
rtpdec_svq3.c
…
rtpdec_vp8.c
…
rtpdec_vp9.c
…
rtpdec_xiph.c
…
rtpdec.c
…
rtpdec.h
…
rtpenc_aac.c
…
rtpenc_amr.c
…
rtpenc_chain.c
…
rtpenc_chain.h
…
rtpenc_h261.c
…
rtpenc_h263_rfc2190.c
…
rtpenc_h263.c
…
rtpenc_h264_hevc.c
…
rtpenc_jpeg.c
…
rtpenc_latm.c
…
rtpenc_mpegts.c
…
rtpenc_mpv.c
…
rtpenc_vp8.c
…
rtpenc_xiph.c
…
rtpenc.c
…
rtpenc.h
…
rtpproto.c
…
rtpproto.h
…
rtsp.c
avformat/rtsp: Check number of streams in sdp_parse_line()
2019-12-02 19:41:47 +01:00
rtsp.h
…
rtspcodes.h
…
rtspdec.c
…
rtspenc.c
…
samidec.c
avformat/samidec: Sanity check pts
2021-10-17 21:34:53 +02:00
sapdec.c
…
sapenc.c
…
sauce.c
…
sauce.h
…
sbgdec.c
avformat/sbgdec: Check for overflow in timestamp preparation
2021-10-17 21:34:53 +02:00
sctp.c
…
sdp.c
…
sdr2.c
…
seek-test.c
…
segafilm.c
avformat/segafilm: Check that there is a stream
2021-10-17 21:34:53 +02:00
segment.c
…
sierravmd.c
…
siff.c
avformat/siff: Reject audio packets without audio stream
2021-10-17 21:34:53 +02:00
smacker.c
…
smjpeg.c
…
smjpeg.h
…
smjpegdec.c
avformat/smjpegdec: Check the existence of referred streams
2020-07-07 19:28:34 +02:00
smjpegenc.c
…
smoothstreamingenc.c
…
smush.c
…
sol.c
…
sox.h
…
soxdec.c
…
soxenc.c
…
spdif.c
…
spdif.h
…
spdifdec.c
…
spdifenc.c
…
srtdec.c
…
srtenc.c
…
srtp.c
…
srtp.h
…
srtpproto.c
…
stldec.c
…
subfile.c
…
subtitles.c
avformat/subtitles: Check nb_subs in ff_subtitles_queue_finalize()
2019-12-06 20:30:57 +01:00
subtitles.h
…
subviewer1dec.c
…
subviewerdec.c
avformat/subviewerdec: fail on AV_NOPTS_VALUE
2021-10-17 21:34:53 +02:00
supdec.c
…
swf.c
…
swf.h
…
swfdec.c
avformat/swfdec: Fix inflate() error code check
2016-08-19 11:03:50 +02:00
swfenc.c
…
takdec.c
…
tcp.c
…
tedcaptionsdec.c
avformat/tedcaptionsdec: Check for overflow in parse_int()
2021-10-17 21:34:53 +02:00
tee.c
…
thp.c
avformat/thp: Check fps
2020-07-05 12:43:08 +02:00
tiertexseq.c
…
tls_gnutls.c
…
tls_openssl.c
…
tls_securetransport.c
…
tls.c
…
tls.h
…
tmv.c
…
tta.c
avformat/tta: Check for EOF in index reading loop
2021-10-17 21:34:53 +02:00
tty.c
avformat/tty: add probe function
2021-10-31 18:45:40 +01:00
txd.c
…
udp.c
…
uncodedframecrcenc.c
…
unix.c
…
url-test.c
…
url.c
…
url.h
…
urldecode.c
…
urldecode.h
…
utils.c
avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value()
2022-02-16 20:09:36 +01:00
vc1test.c
…
vc1testenc.c
…
version.h
…
vivo.c
…
voc.c
…
voc.h
…
vocdec.c
…
vocenc.c
…
vorbiscomment.c
…
vorbiscomment.h
…
vplayerdec.c
…
vqf.c
avformat/vqf: Check len for COMM chunks
2021-10-17 21:34:53 +02:00
w64.c
…
w64.h
…
wavdec.c
avformat/wavdec: Check smv_block_size
2021-10-17 21:34:53 +02:00
wavenc.c
…
wc3movie.c
avformat/wc3movie: Move wc3_read_close() up
2021-10-17 21:34:53 +02:00
webm_chunk.c
avformat/webm_chunk: Specify expected argument length of get_chunk_filename()
2019-12-02 19:41:48 +01:00
webmdashenc.c
avformat/webmdashenc: Check id in adaption_sets
2019-12-02 19:41:47 +01:00
webpenc.c
…
webvttdec.c
…
webvttenc.c
…
westwood_aud.c
…
westwood_vqa.c
…
wtv_common.c
…
wtv.h
…
wtvdec.c
avformat/wtvdec: Check for EOF before seeking back in parse_media_type()
2021-10-17 21:34:53 +02:00
wtvenc.c
…
wv.c
…
wv.h
…
wvdec.c
avformat/wvdec: detect and error out on WavPack DSD files
2019-12-02 19:41:47 +01:00
wvenc.c
…
xa.c
…
xmv.c
avformat/xmv: Make bitrate 64bit
2019-12-02 19:41:48 +01:00
xwma.c
avformat/xwma: Check for EOF in dpds_table read code
2021-10-17 21:34:53 +02:00
yop.c
…
yuv4mpeg.h
…
yuv4mpegdec.c
…
yuv4mpegenc.c
…