ffmpeg/libavformat
Michael Niedermayer 4e80d4bf25 avformat/smacker: fix integer overflow with pts_inc
Fixes: ce19e41f0ef1e52a23edc488faecdb58/asan_heap-oob_2504e97_4202_ffa0df1baed14022b9bfd4f8ac23d0cb.smk

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 7ed47e9729)

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2015-12-14 16:51:00 +01:00
..
4xm.c avformat/4xm: Change fps to AVRational 2015-05-23 22:36:02 +02:00
Makefile avformat: Add single jpeg muxer 2015-06-08 03:36:22 +02:00
a64.c
aacdec.c
ac3dec.c
act.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
adp.c
adtsenc.c
adxdec.c
aea.c
afc.c
aiff.h
aiffdec.c
aiffenc.c
allformats.c avformat: Add single jpeg muxer 2015-06-08 03:36:22 +02:00
amr.c
anm.c
apc.c
ape.c
apetag.c
apetag.h
apngdec.c
apngenc.c
aqtitledec.c
asf.c
asf.h
asfcrypt.c
asfcrypt.h
asfdec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
asfenc.c
assdec.c
assenc.c
ast.c
ast.h
astdec.c
astenc.c
au.c
audiointerleave.c Merge commit 'f7e932473314e6ca4c851d49cbde8570b6e66383' 2015-06-08 22:37:41 +02:00
audiointerleave.h
avc.c
avc.h
avformat.h doc: avoid incorrect phrase 'allows to' 2015-06-19 20:31:44 +02:00
avformatres.rc
avi.h
avidec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
avienc.c avformat/avienc: Correct possible dereference of null 2015-05-29 00:04:41 +02:00
avio.c avformat: clarify what package needs to be compiled with SSL support 2015-06-19 18:40:49 +02:00
avio.h doc: fix spelling errors 2015-06-18 22:09:01 +02:00
avio_internal.h Merge commit 'bff0349d9da527084e1433167466d8afc9e25c7f' 2015-06-01 00:43:50 +02:00
aviobuf.c avio: fix potential crashes when combining ffio_ensure_seekback + crc 2015-06-18 22:09:01 +02:00
avisynth.c
avlanguage.c
avlanguage.h
avr.c
avs.c
bethsoftvid.c
bfi.c
bink.c
bintext.c
bit.c
bluray.c
bmv.c
boadec.c
brstm.c
c93.c
cache.c
caf.c
caf.h
cafdec.c cafdec: free extradata before allocating it 2015-05-13 20:11:37 +02:00
cafenc.c
cavsvideodec.c
cdg.c
cdxl.c
cinedec.c
concat.c
concatdec.c avformat/concatdec: Enable auto_convert by default 2015-05-29 12:19:47 +02:00
crcenc.c
crypto.c
cutils.c
dashenc.c Merge commit 'b8d2630c5327d2818d05c8a48be0417905d8e0fd' 2015-05-11 01:56:11 +02:00
data_uri.c
dauddec.c
daudenc.c
dfa.c
diracdec.c
dnxhddec.c lavf/dnxhd: Autodetect more files that can be decoded. 2015-05-26 00:29:36 +02:00
dsfdec.c
dsicin.c
dss.c
dtsdec.c
dtshddec.c
dump.c avformat/dump: Fix integer overflow in av_dump_format() 2015-12-14 16:51:00 +01:00
dv.c
dv.h
dvbsub.c
dvenc.c
dxa.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
eacdata.c
electronicarts.c
epafdec.c
ffm.h
ffmdec.c avformat/ffmdec: Check ffio_set_buf_size() return value 2015-06-07 14:55:10 +02:00
ffmenc.c
ffmeta.h
ffmetadec.c
ffmetaenc.c
file.c
file_open.c
filmstripdec.c
filmstripenc.c
flac_picture.c
flac_picture.h
flacdec.c
flacenc.c avformat/flacenc: Check length in flac_write_block_comment() 2015-05-11 15:31:55 +02:00
flacenc.h
flacenc_header.c
flic.c
flv.h
flvdec.c flvdec: fix lack of duration for some files 2015-06-05 21:56:09 +02:00
flvenc.c doc: fix spelling errors 2015-06-18 22:09:01 +02:00
format.c
framecrcenc.c
framehash.c
frmdec.c
ftp.c
g722.c
g723_1.c
g729dec.c
gif.c
gifdec.c
golomb_tab.c
gopher.c
gsmdec.c
gxf.c
gxf.h
gxfenc.c
h261dec.c
h263dec.c
h264dec.c avformat/h264dec: Add ff_tlog() with trace information about h264 probing 2015-05-30 03:57:20 +02:00
hdsenc.c avformat/hdsenc: Change duration from single to to double precision 2015-06-08 00:35:43 +02:00
hevc.c avformat/hevc: Check num_long_term_ref_pics_sps to avoid potentially long loops 2015-11-12 02:55:45 +01:00
hevc.h
hevcdec.c
hls.c avformat/hls: add support for EXT-X-MAP 2015-10-15 14:41:32 +02:00
hlsenc.c avformat/hlsenc: do not append an endlist tag when the stream ends 2015-05-17 17:15:03 +02:00
hlsproto.c
hnm.c
http.c lavf/http: Add simple autodetection for client HTTP method, based on AVIO_FLAG_READ. 2015-06-06 09:24:50 +02:00
http.h
httpauth.c avformat/httpauth: Add space after commas in HTTP/RTSP auth header 2015-11-12 02:55:46 +01:00
httpauth.h
icecast.c
icodec.c
icoenc.c
id3v1.c
id3v1.h
id3v2.c id3v2: catch avio_read errors in check_tag 2015-05-11 20:21:48 +02:00
id3v2.h
id3v2enc.c
idcin.c avformat/idcin: Remove redundant chunk size check 2015-05-12 18:40:16 +02:00
idroqdec.c
idroqenc.c
iff.c
ilbc.c
img2.c
img2.h lavf/img2dec: add option to disable pattern matching 2015-05-12 13:32:23 +02:00
img2_alias_pix.c
img2_brender_pix.c
img2dec.c lavf/img2dec: Fix memory leak 2015-10-09 21:30:46 +02:00
img2enc.c
ingenientdec.c
internal.h libavformat/mux: Add ff_choose_chroma_location() 2015-05-22 15:30:31 +02:00
ipmovie.c
ircam.c
ircam.h
ircamdec.c
ircamenc.c avformat/ircamenc: Avoid floats 2015-05-26 19:54:41 +02:00
isom.c
isom.h
iss.c
iv8.c
ivfdec.c
ivfenc.c
jacosubdec.c
jacosubenc.c
jvdec.c jvdec: avoid unsigned overflow in comparison 2015-11-12 02:55:47 +01:00
latmenc.c
libavformat.v
libgme.c
libmodplug.c
libnut.c
libquvi.c avformat/libquvi: fix error handling 2015-05-31 19:04:52 +02:00
librtmp.c
libsmbclient.c
libssh.c
lmlm4.c
loasdec.c
log2_tab.c
lrc.c
lrc.h
lrcdec.c
lrcenc.c
lvfdec.c
lxfdec.c
m4vdec.c
matroska.c
matroska.h
matroskadec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
matroskaenc.c Merge commit 'b14086ca38efa1a86cb0f0c6aa147b05f698877b' 2015-06-09 18:30:24 +02:00
md5enc.c
md5proto.c
metadata.c
metadata.h
mgsts.c
microdvddec.c
microdvdenc.c
mkvtimestamp_v2.c
mlvdec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
mm.c
mmf.c
mms.c
mms.h
mmsh.c
mmst.c
mov.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
mov_chan.c mov: abort on EOF in ff_mov_read_chan 2015-05-31 13:05:12 +02:00
mov_chan.h
movenc.c avformat/movenc: Fix potential signed overflows 2015-06-01 17:54:58 +02:00
movenc.h
movenchint.c
mp3dec.c avformat/mp3dec: improve junk skipping heuristic 2015-10-20 12:46:22 +02:00
mp3enc.c
mpc.c
mpc8.c
mpeg.c lavf/mpeg: Do not detect unknown audio in Hikvision streams as alaw. 2015-05-17 12:57:27 +02:00
mpeg.h
mpegenc.c avformat/mpegenc: Replace *0.7 by *7/10 2015-05-25 13:34:34 +02:00
mpegts.c avformat/mpegts: Avoid float in bitrate calculation 2015-05-26 12:02:44 +02:00
mpegts.h
mpegtsenc.c mpegencts: Fix overflow in cbr mode period calculations 2015-12-14 16:51:00 +01:00
mpegvideodec.c
mpjpeg.c
mpjpegdec.c mpjpegdec: don't try to alloc an AVIOContext when probe is guaranteed to fail 2015-06-09 10:07:11 +02:00
mpl2dec.c
mpsubdec.c avformat/mpsubdec: Use double instead of float for timestamp calculations 2015-05-27 17:29:18 +02:00
msnwc_tcp.c
mtv.c
mux.c avformat/mux: Update sidedata in ff_write_chained() 2015-11-12 02:55:45 +01:00
mvdec.c
mvi.c
mxf.c
mxf.h
mxfdec.c mxfdec: check edit_rate also for physical_track 2015-11-26 01:37:13 +01:00
mxfenc.c avformat/mxfenc: Allow overriding /manual setting of the signal standard 2015-06-08 13:03:29 +02:00
mxg.c avformat/mxg: Use memmove() 2015-11-12 02:55:46 +01:00
ncdec.c
network.c network: prevent SIGPIPE on OSX 2015-05-31 10:10:16 +03:00
network.h
nistspheredec.c
noproxy-test.c
nsvdec.c
nullenc.c
nut.c
nut.h nutdec: fix infinite resync loops 2015-05-20 19:07:26 +02:00
nutdec.c nutdec: check maxpos in read_sm_data before returning success 2015-07-19 09:36:34 +02:00
nutenc.c avformat/nutenc: Fix writing strings larger than 2gb 2015-05-10 16:26:58 +02:00
nuv.c
oggdec.c
oggdec.h
oggenc.c avformat/oggenc: Check segments_count for headers too 2015-10-09 21:35:11 +02:00
oggparsecelt.c
oggparsedirac.c oggparsedirac: check return value of init_get_bits 2015-07-18 20:23:45 +02:00
oggparseflac.c
oggparseogm.c
oggparseopus.c
oggparseskeleton.c
oggparsespeex.c
oggparsetheora.c
oggparsevorbis.c
oggparsevp8.c
oma.c
oma.h
omadec.c
omaenc.c
options.c
options_table.h
os_support.c
os_support.h
paf.c
pcm.c
pcm.h
pcmdec.c
pcmenc.c
pjsdec.c
pmpdec.c
psxstr.c
pva.c
pvfdec.c
qcp.c
qtpalette.h
r3d.c
rawdec.c rawdec: fix mjpeg probing buffer size check 2015-11-12 02:55:45 +01:00
rawdec.h
rawenc.c avformat/singlejpeg: fix standalone compilation 2015-06-18 16:39:09 -03:00
rawenc.h
rawvideodec.c
rdt.c
rdt.h
realtextdec.c
redspark.c
replaygain.c
replaygain.h
riff.c lavf/riff: Add 0x729A as TwoCC for G.729. 2015-05-25 23:39:56 +02:00
riff.h Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
riffdec.c riffdec: prevent negative bit rate 2015-11-26 01:37:12 +01:00
riffenc.c lavf/riffenc: Set correct block align for mp2. 2015-06-04 17:03:34 +02:00
rl2.c
rm.c
rm.h
rmdec.c
rmenc.c avformat/rmenc: Remove float usage 2015-06-07 21:55:46 +02:00
rmsipr.c
rmsipr.h
rpl.c
rsd.c
rso.c
rso.h
rsodec.c
rsoenc.c
rtmp.h
rtmpcrypt.c rtmpcrypt: Do the xtea decryption in little endian mode 2015-11-18 19:33:32 +01:00
rtmpcrypt.h
rtmpdh.c Merge commit '63ce9fd23cfa5ac0d9a862be0da138108dc1c505' 2015-06-01 11:29:05 +02:00
rtmpdh.h Merge commit '63ce9fd23cfa5ac0d9a862be0da138108dc1c505' 2015-06-01 11:29:05 +02:00
rtmphttp.c
rtmppkt.c
rtmppkt.h
rtmpproto.c
rtp.c
rtp.h
rtpdec.c
rtpdec.h
rtpdec_ac3.c
rtpdec_amr.c
rtpdec_asf.c Merge commit '4733a12dd17a91d606e0079ff9bb48b9f419cbef' 2015-06-08 23:05:01 +02:00
rtpdec_dv.c
rtpdec_formats.h
rtpdec_g726.c
rtpdec_h261.c
rtpdec_h263.c
rtpdec_h263_rfc2190.c
rtpdec_h264.c
rtpdec_hevc.c
rtpdec_ilbc.c
rtpdec_jpeg.c
rtpdec_latm.c
rtpdec_mpa_robust.c
rtpdec_mpeg4.c
rtpdec_mpeg12.c
rtpdec_mpegts.c
rtpdec_qcelp.c
rtpdec_qdm2.c
rtpdec_qt.c
rtpdec_svq3.c
rtpdec_vp8.c
rtpdec_vp9.c
rtpdec_xiph.c avformat/rtpdec_xiph: Move pkt_len onto one side of the check 2015-05-12 18:07:32 +02:00
rtpenc.c Revert "avformat/rtpenc: check av_packet_get_side_data() return, fix null ptr dereference" 2015-06-03 22:39:27 +02:00
rtpenc.h
rtpenc_aac.c
rtpenc_amr.c
rtpenc_chain.c
rtpenc_chain.h
rtpenc_h261.c
rtpenc_h263.c
rtpenc_h263_rfc2190.c
rtpenc_h264_hevc.c
rtpenc_jpeg.c avformat/rtpenc_jpeg: Check remaining buffer size for SOS 2015-05-12 17:55:40 +02:00
rtpenc_latm.c
rtpenc_mpegts.c
rtpenc_mpv.c
rtpenc_vp8.c
rtpenc_xiph.c
rtpproto.c
rtpproto.h
rtsp.c avformat/rtsp: print a debug level note if time parsing fails 2015-05-15 20:21:37 +02:00
rtsp.h
rtspcodes.h
rtspdec.c lavf: split tls.c 2015-05-27 21:48:47 +02:00
rtspenc.c
samidec.c
sapdec.c
sapenc.c
sauce.c
sauce.h
sbgdec.c avformat/sbgdec: Check alloc_array_elem() return value 2015-06-02 16:42:33 +02:00
sctp.c Merge commit '8ef98855d25e457094468e2e1a79d9b10d6445b2' 2015-06-08 22:35:53 +02:00
sdp.c
sdr2.c
seek-test.c
segafilm.c
segment.c avformat/segment: atomically update list if possible 2015-10-09 21:34:38 +02:00
sierravmd.c
siff.c
smacker.c avformat/smacker: fix integer overflow with pts_inc 2015-12-14 16:51:00 +01:00
smjpeg.c
smjpeg.h
smjpegdec.c
smjpegenc.c
smoothstreamingenc.c
smush.c
sol.c
sox.h
soxdec.c
soxenc.c
spdif.c
spdif.h
spdifdec.c
spdifenc.c
srtdec.c avformat/srtdec: make sure we probe a number 2015-10-09 21:28:20 +02:00
srtenc.c
srtp.c
srtp.h
srtpproto.c
stldec.c
subfile.c
subtitles.c avformat/subtitles: Use size_t for len 2015-05-11 12:42:38 +02:00
subtitles.h avformat/subtitles: Use size_t for len 2015-05-11 12:42:38 +02:00
subviewer1dec.c
subviewerdec.c
supdec.c
swf.c
swf.h
swfdec.c avformat/swfdec: Do not error out on pixel format changes 2015-07-08 12:40:10 +02:00
swfenc.c avformat/swfenc: Remove another unneeded float computation 2015-05-24 13:32:53 +02:00
takdec.c
tcp.c
tedcaptionsdec.c
tee.c
thp.c
tiertexseq.c
tls.c lavf/tls: let the user specify what name to verify against 2015-06-08 14:08:52 +02:00
tls.h lavf/tls: let the user specify what name to verify against 2015-06-08 14:08:52 +02:00
tls_gnutls.c tls_gnutls: fix hang on disconnection 2015-06-18 22:09:01 +02:00
tls_openssl.c lavf: move TLS-related ifdeffery to library specific files 2015-05-27 22:24:00 +02:00
tls_securetransport.c lavf/tls_securetransport: fix SNI support when not verifying 2015-06-09 01:06:32 +02:00
tmv.c
tta.c
tty.c
txd.c
udp.c
uncodedframecrcenc.c
unix.c
url-test.c
url.c avformat/url: Use size_t for len from strlen() 2015-05-11 03:50:01 +02:00
url.h
urldecode.c
urldecode.h
utils.c avformat/utils: Do not init parser if probing is unfinished 2015-11-16 00:06:20 +01:00
vc1test.c
vc1testenc.c
version.h avformat/version: Bump version for single jpeg muxer 2015-06-08 04:00:45 +02:00
vivo.c
voc.c
voc.h
vocdec.c
vocenc.c
vorbiscomment.c avformat/vorbiscomment: Use 64bit int for ff_vorbiscomment_length() 2015-05-11 15:56:16 +02:00
vorbiscomment.h avformat/vorbiscomment: Use 64bit int for ff_vorbiscomment_length() 2015-05-11 15:56:16 +02:00
vplayerdec.c
vqf.c
w64.c
w64.h
wavdec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
wavenc.c lavf/wav: Print an error if files >4G are written. 2015-05-17 02:08:58 +02:00
wc3movie.c
webm_chunk.c lavf/webm_chunk: Remove AVFMT_ALLOW_FLUSH 2015-06-09 21:19:57 +02:00
webmdashenc.c lavf/webmdashenc: fix unchecked strftime 2015-05-15 00:56:43 +02:00
webpenc.c WebP muxer: support a packet containing animated WebP. 2015-05-22 00:17:53 +02:00
webvttdec.c
webvttenc.c lavf/webvttenc: Require webvtt file to contain exactly one WebVTT stream. 2015-11-12 02:55:46 +01:00
westwood_aud.c
westwood_vqa.c
wtv.h
wtv_common.c
wtvdec.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
wtvenc.c
wv.c
wv.h
wvdec.c
wvenc.c
xa.c
xmv.c avformat/xmv: Discard remainder of packet on error 2015-11-12 02:55:47 +01:00
xwma.c Merge commit 'd80811c94e068085aab797f9ba35790529126f85' 2015-11-26 01:37:09 +01:00
yop.c
yuv4mpeg.h
yuv4mpegdec.c
yuv4mpegenc.c