Fixes out of array accesses
Fixes: asan_heap-oob_12304aa_8_asan_heap-oob_4da4f3_300_intro.jv
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 105654e376)
Conflicts:
libavcodec/utils.c
previously it could have been by 1 too large
Fixes out of array access
Fixes: asan_heap-oob_12240f5_1_asan_heap-oob_12240f5_448_t8c1e3.jls
Fixes: asan_heap-oob_12240f5_1_asan_heap-oob_12240f5_448_t8nde0.jls
Fixes: asan_heap-oob_12240fa_1_asan_heap-oob_12240fa_448_t16e3.jls
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 06e7d58410)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Found-by: Andreas Cadhalpun
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit d85ebea3f3)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Fixes miss detection of PCM as m4v
Fixes Ticket 3928
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 7c1835c52a)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Buffers containing copies of the AAC and AC3 header bits were not padded
before parsing, violating init_get_bits() buffer padding requirement,
leading to potential buffer read overflows.
This change adds FF_INPUT_BUFFER_PADDING_SIZE bytes to the bit buffer
for parsing the header in each of aac_parser.c and ac3_parser.c.
Based on patch by: Matt Wolenetz <wolenetz@chromium.org>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit fccd85b9f3)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* commit '0e810255596070e2c503c5da9001f7087f71de6e':
doc: More changelog updates for v0.8.17
Conflicts:
Changelog
not merged
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '76435f5e40854567252756ea7f788958dd2cc04c':
doc: More changelog updates for v0.8.17
Conflicts:
Changelog
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit 'ec5b2f6a385959048f780b4e7d3d259dc1fa8421':
tiff: Check that there is no aliasing in pixel format selection
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '905988fe1a8accbc1ab93120aa4cd29252b81cce':
eamad: check for out of bounds read
Conflicts:
libavcodec/eamad.c
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit 'aace8b184c867875e2715b2af23fa98886f90427':
Prepare for 0.8.17 Release
Conflicts:
RELEASE
not merged
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '0ceb2dffb6ba082a8abcc57c53a14b2512f0aa48':
mov: avoid a memleak when multiple stss boxes are present
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '22103315c2a1cb2de336750c50cf6bf7c109220c':
Add some bug references to the changelog
Conflicts:
Changelog
not merged as this isnt the FFmpeg Changelog
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '893b353362bc220280efd8d14c4878a1cafe18a8':
x86: Only use optimizations with cmov if the CPU supports the instruction
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '8637f4edeee1a6bd18bc90740fafadd3e1b412aa':
x86: Add CPU flag for the i686 cmov instruction
Conflicts:
doc/APIchanges
libavutil/avutil.h
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit 'c6af9e944ebeb336f6520f59afaebb62392fb026':
Update Changelog for v0.8.16
Prepare for 0.8.16 release
Update Changelog for v0.8.15
Conflicts:
Changelog
RELEASE
not merged
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit 'f661006f235fa58bc756610cdc76c662ac0fab5f':
doc: Fix syntax and logical errors in avconv stream combination example
Conflicts:
doc/avconv.texi
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '2deac60a387409dcbc7b37a8c30de89c7aeb58ac':
adpcmenc: Calculate the IMA_QT predictor without overflow
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit 'ec0df23765bd41846f66e4a4fb694779b432fc62':
h264: Remove an assert on current_picture_ptr being null
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '90a2359fef5325f90aec0eca51b145d90ca3df7d':
nutdec: Remove unused and broken debug function stub
Merged-by: Michael Niedermayer <michaelni@gmx.at>
* commit '8152b02f33a7b939cb2c9a5f26d10cd10465d4f9':
arm/neon: dsputil: use correct size specifiers on vld1/vst1
Merged-by: Michael Niedermayer <michaelni@gmx.at>
The chunk size is limited to UINT16_MAX (written by avio_wb16), so make
sure that the packet size is not too large.
Such large frames need to be split into slices smaller than 64 kB, but
that is currently supported neither by the rv10/rv20 encoders nor the rm
muxer.
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
