ffmpeg/libavcodec
Michael Niedermayer 02d1d31eaa avcodec/h264_mvpred: Fix multiple runtime error: left shift of negative value
Fixes: 710/clusterfuzz-testcase-5091051431788544

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit ab998f4c7f)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2017-08-23 13:15:16 +02:00
..
aarch64
alpha
arm
avr32
bfin
mips
neon
ppc
sh4
sparc
x86 videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES iterations. 2017-08-23 13:15:16 +02:00
4xm.c
8bps.c avcodec/8bps: Check side data size before use 2017-08-23 13:15:16 +02:00
8svx.c
012v.c
Makefile
a64colors.h
a64multienc.c
a64tables.h
aac.h
aac_ac3_parser.c
aac_ac3_parser.h
aac_adtstoasc_bsf.c
aac_parser.c
aac_tablegen.c
aac_tablegen.h
aac_tablegen_decl.h
aacadtsdec.c
aacadtsdec.h
aaccoder.c aaccoder: prevent crash of anmr coder 2015-12-20 16:13:09 +01:00
aacdec.c libavcodec/aacdec_template: Use init_get_bits8() in aac_decode_frame() 2015-08-20 14:38:28 +02:00
aacdectab.h
aacenc.c
aacenc.h
aacps.c
aacps.h
aacps_tablegen.c
aacps_tablegen.h
aacpsdata.c
aacpsdsp.c
aacpsdsp.h
aacpsy.c
aacsbr.c
aacsbr.h
aacsbr_tablegen.c
aacsbr_tablegen.h
aacsbrdata.h
aactab.c
aactab.h
aandcttab.c
aandcttab.h
aasc.c
ac3.c
ac3.h
ac3_parser.c
ac3_parser.h
ac3dec.c avcodec/ac3dec: Reset SPX when switching from EAC3 to AC3 2017-08-23 13:15:16 +02:00
ac3dec.h
ac3dec_data.c
ac3dec_data.h
ac3dec_fixed.c
ac3dec_float.c
ac3dsp.c
ac3dsp.h
ac3enc.c
ac3enc.h
ac3enc_fixed.c
ac3enc_float.c
ac3enc_opts_template.c
ac3enc_template.c
ac3tab.c
ac3tab.h
acelp_filters.c
acelp_filters.h
acelp_pitch_delay.c
acelp_pitch_delay.h
acelp_vectors.c
acelp_vectors.h
adpcm.c
adpcm.h
adpcm_data.c
adpcm_data.h
adpcmenc.c
adx.c
adx.h
adx_parser.c
adxdec.c avcodec/adxdec: Fix runtime error: left shift of negative value -1 2017-08-23 13:15:16 +02:00
adxenc.c
aic.c
alac.c avcodec/alac: Clear pointers in allocate_buffers() 2015-08-20 14:38:27 +02:00
alac_data.c
alac_data.h
alacenc.c
aliaspixdec.c
aliaspixenc.c
allcodecs.c
alsdec.c
amr.h
amrnbdata.h
amrnbdec.c
amrwbdata.h
amrwbdec.c avcodec/amrwbdec: Fix 2 runtime errors: left shift of negative value -1 2017-08-23 13:15:16 +02:00
anm.c
ansi.c avcodec/ansi: Check dimensions 2017-08-23 13:15:16 +02:00
apedec.c avcodec/apedec: fix decoding of stereo files with one channel full of silence 2017-08-23 13:15:16 +02:00
ass.c
ass.h
ass_split.c avcodec/ass_split: Fix null pointer dereference in ff_ass_style_get() 2016-02-01 02:12:21 +01:00
ass_split.h
assdec.c
assenc.c
asv.c
asv.h
asvdec.c
asvenc.c
atrac.c
atrac.h
atrac1.c
atrac1data.h
atrac3.c
atrac3data.h
atrac3plus.c
atrac3plus.h
atrac3plus_data.h
atrac3plusdec.c
atrac3plusdsp.c
audio_frame_queue.c
audio_frame_queue.h
audioconvert.c
audioconvert.h
audiodsp.c
audiodsp.h
aura.c
avcodec.h
avcodecres.rc
avdct.c
avdct.h
avfft.c
avfft.h
avpacket.c avcodec/avpacket: clear side_data_elems 2017-08-23 13:15:16 +02:00
avpicture.c
avrndec.c
avs.c
avuidec.c
avuienc.c
bethsoftvideo.c
bethsoftvideo.h
bfi.c
bgmc.c
bgmc.h
bink.c
binkaudio.c
binkdata.h
binkdsp.c
binkdsp.h
bintext.c
bintext.h
bit_depth_template.c
bitstream.c
bitstream_filter.c
blockdsp.c
blockdsp.h
bmp.c
bmp.h
bmp_parser.c avcodec/bmp_parser: Check fsize 2017-08-23 13:15:16 +02:00
bmpenc.c
bmvaudio.c
bmvvideo.c
brenderpix.c
bswapdsp.c
bswapdsp.h
bytestream.h bytestream2: set the reader to the end when reading more than available 2015-08-20 14:38:27 +02:00
c93.c
cabac.c avcodec/cabac: Check initial cabac decoder state 2015-12-06 12:40:50 +01:00
cabac.h avcodec/cabac: Check initial cabac decoder state 2015-12-06 12:40:50 +01:00
cabac_functions.h avcodec/cabac: Check initial cabac decoder state 2015-12-06 12:40:50 +01:00
cabac_tablegen.c
cabac_tablegen.h
cavs.c
cavs.h
cavs_parser.c
cavsdata.c
cavsdec.c
cavsdsp.c avcodec/cavsdsp: use av_clip_uint8() for idct 2017-08-23 13:15:16 +02:00
cavsdsp.h
cbrt_tablegen.c
cbrt_tablegen.h
cdgraphics.c
cdxl.c
celp_filters.c
celp_filters.h
celp_math.c
celp_math.h
cga_data.c
cga_data.h
chomp_bsf.c
cinepak.c avcodec/cinepak: Check side data size before use 2017-08-23 13:15:16 +02:00
cinepakenc.c
cljrdec.c
cljrenc.c
cllc.c
cngdec.c
cngenc.c
codec_desc.c
cook.c
cook_parser.c
cookdata.h
copy_block.h
cos_tablegen.c
cpia.c
crystalhd.c
cscd.c
cyuv.c
dca.c dca: fix misaligned access in avpriv_dca_convert_bitstream 2016-01-28 02:15:49 +01:00
dca.h
dca_parser.c
dcadata.h
dcadec.c
dcadsp.c
dcadsp.h
dcaenc.c avcodec/dcaenc: clear bitstream end 2015-08-20 14:38:28 +02:00
dcaenc.h
dcahuff.h
dct-test.c
dct.c
dct.h
dct32.h
dct32_fixed.c
dct32_float.c
dct32_template.c
dctref.c
dctref.h
dfa.c
dirac.c
dirac.h
dirac_arith.c
dirac_arith.h
dirac_dwt.c
dirac_dwt.h
dirac_parser.c avcodec/dirac_parser: Check that there is a previous PU before accessing it 2015-12-06 12:40:51 +01:00
diracdec.c avcodec/diracdec: Check numx/y 2017-08-23 13:15:16 +02:00
diracdsp.c
diracdsp.h
dnxhd_parser.c
dnxhddata.c
dnxhddata.h
dnxhddec.c
dnxhdenc.c
dnxhdenc.h
dpcm.c
dpx.c avcodec/dpx: Move need_align to act per line 2015-12-06 12:40:49 +01:00
dpx_parser.c
dpxenc.c
dsd_tablegen.c
dsd_tablegen.h
dsddec.c
dsicinaudio.c
dsicinvideo.c
dsputil.h
dsputil_compat.c
dump_extradata_bsf.c
dv.c
dv.h
dv_profile.c
dv_profile.h
dv_profile_internal.h
dv_tablegen.c
dv_tablegen.h
dvbsub.c
dvbsub_parser.c
dvbsubdec.c
dvd_nav_parser.c
dvdata.c
dvdata.h
dvdec.c avcodec/dvdec: Fix "left shift of negative value -254" 2016-01-31 00:25:20 +01:00
dvdsub_parser.c
dvdsubdec.c avcodec/dvdsubdec: Fix off by 1 error 2017-08-23 13:15:16 +02:00
dvdsubenc.c
dvenc.c
dxa.c
dxtory.c avcodec/dxtory: Fix input size check in dxtory_decode_v1_410() 2015-12-06 12:40:49 +01:00
dxva2.c
dxva2.h
dxva2_h264.c
dxva2_internal.h
dxva2_mpeg2.c
dxva2_vc1.c
eac3_data.c
eac3_data.h
eac3dec.c avcodec/eac3dec: Fix runtime error: left shift of negative value -3 2017-08-23 13:15:16 +02:00
eac3enc.c
eac3enc.h
eacmv.c
eaidct.c
eaidct.h
eamad.c
eatgq.c
eatgv.c
eatqi.c
elbg.c
elbg.h
error_resilience.c avcodec/error_resilience: avoid accessing previous or next frames tables beyond height 2015-12-06 12:40:49 +01:00
error_resilience.h
escape124.c
escape130.c
evrcdata.h
evrcdec.c
exif.c
exif.h
exr.c exr: fix out of bounds read in get_code 2015-12-20 16:13:32 +01:00
faandct.c
faandct.h
faanidct.c
faanidct.h
faxcompr.c
faxcompr.h
fdctdsp.c
fdctdsp.h
fft-fixed-test.c
fft-fixed32-test.c
fft-internal.h
fft-test.c
fft.h
fft_fixed.c
fft_fixed_32.c
fft_float.c
fft_init_table.c
fft_table.h
fft_template.c
ffv1.c avcodec/ffv1: Initialize vlc_state on allocation 2015-12-06 12:40:49 +01:00
ffv1.h avcodec/ffv1: seperate slice_count from max_slice_count 2015-10-09 22:07:46 +02:00
ffv1dec.c avcodec/ffv1dec: Clear quant_table_count if its invalid 2015-12-06 12:40:51 +01:00
ffv1enc.c avcodec/ffv1enc: Fix size of first slice 2017-08-23 13:15:16 +02:00
ffwavesynth.c
fic.c
file_open.c
flac.c
flac.h
flac_parser.c avcodec/flac_parser: Update nb_headers_buffered 2017-08-23 13:15:16 +02:00
flacdata.c
flacdata.h
flacdec.c avcodec/flacdec: Fix undefined shift in decode_subframe() 2017-08-23 13:15:16 +02:00
flacdsp.c
flacdsp.h
flacdsp_lpc_template.c
flacdsp_template.c avcodec/flacdsp_template: Fix undefined shift in flac_decorrelate_indep_c 2017-08-23 13:15:16 +02:00
flacenc.c avcodec/flacenc: fix calculation of bits required in case of custom sample rate 2016-02-01 02:12:22 +01:00
flashsv.c avcodec/flashsv: Check size before updating it 2015-12-06 12:40:49 +01:00
flashsv2enc.c
flashsvenc.c avcodec/flashsvenc: Correct max dimension in error message 2015-08-20 14:38:28 +02:00
flicvideo.c
flv.h
flvdec.c
flvenc.c
fmtconvert.c
fmtconvert.h
frame_thread_encoder.c
frame_thread_encoder.h
fraps.c
frwu.c
g2meet.c avcodec/g2meet: Also clear tile dimensions on header_fail 2015-12-06 12:40:48 +01:00
g722.c
g722.h
g722dec.c
g722enc.c
g723_1.c
g723_1_data.h
g726.c avcodec/g726: Add missing ADDB output mask 2017-08-23 13:15:16 +02:00
g729.h
g729data.h
g729dec.c
g729postfilter.c
g729postfilter.h
get_bits.h avcodec/get_bits: Fix get_sbits_long(0) 2017-08-23 13:15:16 +02:00
gif.c avcodec/gif: Fix lzw buffer size 2016-01-31 00:25:21 +01:00
gif.h
gifdec.c
golomb-test.c
golomb.c
golomb.h
gsm.h
gsm_parser.c
gsmdec.c
gsmdec_data.c
gsmdec_data.h
gsmdec_template.c
h261.c
h261.h
h261_parser.c
h261data.c
h261dec.c
h261enc.c
h263.c
h263.h
h263_parser.c
h263_parser.h
h263data.h
h263dec.c
h263dsp.c
h263dsp.h
h264.c avcodec/h264: Fix for H.264 configuration parsing 2017-08-23 13:15:16 +02:00
h264.h
h264_cabac.c avcodec/h264_cabac: runtime error: signed integer overflow: 2147483647 + 14 cannot be represented in type 'int' 2017-08-23 13:15:16 +02:00
h264_cavlc.c
h264_direct.c avcodec/h264_direct: Fix runtime error: left shift of negative value -14 2017-08-23 13:15:16 +02:00
h264_loopfilter.c
h264_mb.c
h264_mb_template.c
h264_mc_template.c
h264_mp4toannexb_bsf.c avcodec/h264_mp4toannexb_bsf: Reorder operations in nal_size check 2015-08-21 03:40:15 +02:00
h264_mvpred.h avcodec/h264_mvpred: Fix multiple runtime error: left shift of negative value 2017-08-23 13:15:16 +02:00
h264_parser.c
h264_picture.c
h264_ps.c
h264_refs.c avcodec/h264_refs: Fix long_idx check 2016-01-31 00:25:19 +01:00
h264_sei.c
h264_slice.c avcodec/h264_slice: Fix integer overflow in implicit weight computation 2016-01-31 00:25:20 +01:00
h264addpx_template.c
h264chroma.c
h264chroma.h
h264chroma_template.c
h264data.h
h264dsp.c
h264dsp.h
h264dsp_template.c
h264idct.c
h264idct.h
h264idct_template.c
h264pred.c
h264pred.h
h264pred_template.c
h264qpel.c
h264qpel.h
h264qpel_template.c
hevc.c avcodec/hevc: Check max ctb addresses for WPP 2015-12-06 12:40:51 +01:00
hevc.h avcodec/hevc: Fix integer overflow of entry_point_offset 2015-12-06 12:40:51 +01:00
hevc_cabac.c avcodec/hevc_cabac: Fix multiple integer overflows 2015-12-06 12:40:50 +01:00
hevc_filter.c
hevc_mvs.c
hevc_parser.c
hevc_ps.c
hevc_refs.c hevc: properly handle no_rasl_output_flag when removing pictures from the DPB 2015-10-09 22:09:54 +02:00
hevc_sei.c
hevcdsp.c
hevcdsp.h
hevcdsp_template.c
hevcpred.c
hevcpred.h
hevcpred_template.c
hnm4video.c
hpel_template.c
hpeldsp.c
hpeldsp.h
huffman.c
huffman.h
huffyuv.c
huffyuv.h
huffyuvdec.c huffyuvdec: validate image size 2015-11-26 01:38:17 +01:00
huffyuvdsp.c
huffyuvdsp.h
huffyuvenc.c
huffyuvencdsp.c
huffyuvencdsp.h
idcinvideo.c avcodec/idcinvideo: Check side data size before use 2017-08-23 13:15:16 +02:00
idctdsp.c
idctdsp.h
iff.c
iirfilter.c
iirfilter.h
imc.c imc: use correct position for flcoeffs2 calculation 2015-11-26 01:38:17 +01:00
imcdata.h
imgconvert.c avcodec/imgconvert: Support non-planar colorspaces while padding 2017-08-23 13:15:16 +02:00
imgconvert.h
imx_dump_header_bsf.c
indeo2.c avcodec/indeo2: check ctab 2017-08-23 13:15:16 +02:00
indeo2data.h indeo2: Fix banding artefacts 2017-08-23 13:15:16 +02:00
indeo3.c
indeo3data.h
indeo4.c
indeo4data.h
indeo5.c
indeo5data.h
intelh263dec.c
internal.h
interplayvideo.c avcodec/interplayvideo: Move parameter change check up 2017-08-23 13:15:16 +02:00
intrax8.c
intrax8.h
intrax8dsp.c
intrax8dsp.h
intrax8huf.h
ituh263dec.c avcodec/ituh263dec: Fix runtime error: left shift of negative value -22 2017-08-23 13:15:16 +02:00
ituh263enc.c avcodec/motion_est: Fix mv_penalty table size 2016-01-31 00:25:20 +01:00
ivi_common.c avcodec/ivi: Check image dimensions 2015-12-06 12:40:49 +01:00
ivi_common.h
ivi_dsp.c
ivi_dsp.h
j2kenc.c avcodec/j2kenc: Add attribution to OpenJPEG project: 2017-08-23 13:15:16 +02:00
jacosub.h
jacosubdec.c
jfdctfst.c
jfdctint.c
jfdctint_template.c
jpeg2000.c avcodec/jpeg2000: Check comp coords to be within the supported size 2015-12-06 12:40:50 +01:00
jpeg2000.h
jpeg2000dec.c avcodec/jpeg2000dec: More completely check cdef 2016-02-01 02:12:22 +01:00
jpeg2000dwt.c avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_encode*() 2015-12-06 12:40:50 +01:00
jpeg2000dwt.h
jpegls.c
jpegls.h
jpeglsdec.c
jpeglsdec.h
jpeglsenc.c
jrevdct.c
jvdec.c
kbdwin.c
kbdwin.h
kgv1dec.c
kmvc.c avcodec/kmvc: Check side data size before use 2017-08-23 13:15:16 +02:00
lagarith.c
lagarithrac.c
lagarithrac.h
latm_parser.c
lcl.h
lcldec.c
lclenc.c
libaacplus.c
libavcodec.v
libcelt_dec.c
libfaac.c
libfdk-aacdec.c
libfdk-aacenc.c
libgsmdec.c
libgsmenc.c
libilbc.c
libmp3lame.c
libopencore-amr.c
libopenjpegdec.c
libopenjpegenc.c
libopus.c
libopus.h
libopusdec.c
libopusenc.c avcodec/libopusenc: Fix infinite loop on flushing after 0 input 2015-12-06 12:40:48 +01:00
libschroedinger.c
libschroedinger.h
libschroedingerdec.c
libschroedingerenc.c
libshine.c
libspeexdec.c
libspeexenc.c
libstagefright.cpp
libtheoraenc.c
libtwolame.c
libutvideo.h
libutvideodec.cpp avcodec/libutvideodec: copy frame so it has reference counters when refcounted_frames is set 2017-08-23 13:15:16 +02:00
libutvideoenc.cpp
libvo-aacenc.c
libvo-amrwbenc.c
libvorbisdec.c
libvorbisenc.c
libvpx.c
libvpx.h
libvpxdec.c
libvpxenc.c
libwavpackenc.c
libwebpenc.c
libx264.c libx264: Increase x264 opts character limit to 4096 2017-08-23 13:15:16 +02:00
libx265.c
libxavs.c
libxvid.c
libxvid.h
libxvid_rc.c
libzvbi-teletextdec.c
ljpegenc.c
loco.c
log2_tab.c
lossless_audiodsp.c
lossless_audiodsp.h
lossless_videodsp.c
lossless_videodsp.h
lpc.c
lpc.h
lsp.c
lsp.h
lzw.c
lzw.h
lzwenc.c
mace.c
mathops.h
mathtables.c
mdct_fixed.c
mdct_fixed_32.c
mdct_float.c
mdct_template.c
mdec.c
me_cmp.c
me_cmp.h
metasound.c
metasound_data.c
metasound_data.h
microdvddec.c avcodec/microdvddec: Check for string end in 'P' case 2015-12-06 12:40:49 +01:00
mimic.c
mjpeg.c
mjpeg.h
mjpeg2jpeg_bsf.c
mjpeg_parser.c
mjpega_dump_header_bsf.c
mjpegbdec.c
mjpegdec.c avcodec/mjpegdec: Fix runtime error: left shift of negative value -511 2017-08-23 13:15:16 +02:00
mjpegdec.h
mjpegenc.c
mjpegenc.h
mjpegenc_common.c avcodec/mjpegenc_common: Store approximate aspect if exact cannot be stored 2017-08-23 13:15:16 +02:00
mjpegenc_common.h
mlp.c
mlp.h
mlp_parser.c
mlp_parser.h
mlpdec.c
mlpdsp.c
mlpdsp.h
mmvideo.c
motion-test.c
motion_est.c avcodec/motion_est: Fix mv_penalty table size 2016-01-31 00:25:20 +01:00
motion_est_template.c
motionpixels.c
motionpixels_tablegen.c
motionpixels_tablegen.h
movsub_bsf.c
movtextdec.c
movtextenc.c
mp3_header_decompress_bsf.c
mpc.c
mpc.h
mpc7.c
mpc7data.h
mpc8.c avcodec/mpc8: Correct end truncation 2017-08-23 13:15:16 +02:00
mpc8data.h
mpc8huff.h
mpcdata.h
mpeg4audio.c
mpeg4audio.h
mpeg4data.h
mpeg4video.c
mpeg4video.h avcodec/mpeg4video: Check time_incr 2016-01-31 00:25:20 +01:00
mpeg4video_parser.c
mpeg4video_parser.h
mpeg4videodec.c avcodec/mpeg4videodec: Improve the overflow checks in mpeg4_decode_sprite_trajectory() 2017-08-23 13:15:16 +02:00
mpeg4videoenc.c avcodec/mpeg4video: Check time_incr 2016-01-31 00:25:20 +01:00
mpeg12.c
mpeg12.h
mpeg12data.c
mpeg12data.h
mpeg12dec.c avcodec/mpeg12dec: Fix runtime error: left shift of negative value -2 2017-08-23 13:15:16 +02:00
mpeg12enc.c avcodec/mpeg12enc: Move high resolution thread check to before initializing threads 2016-02-01 02:12:21 +01:00
mpeg_er.c
mpeg_er.h
mpegaudio.c
mpegaudio.h
mpegaudio_parser.c
mpegaudio_tablegen.c
mpegaudio_tablegen.h
mpegaudiodata.c
mpegaudiodata.h
mpegaudiodec_fixed.c
mpegaudiodec_float.c
mpegaudiodec_template.c avcodec/mpegaudiodec_template: Correct return code on id3 tag discarding 2017-08-23 13:15:16 +02:00
mpegaudiodecheader.c
mpegaudiodecheader.h
mpegaudiodectab.h
mpegaudiodsp.c
mpegaudiodsp.h
mpegaudiodsp_data.c
mpegaudiodsp_fixed.c
mpegaudiodsp_float.c
mpegaudiodsp_template.c
mpegaudioenc_fixed.c
mpegaudioenc_float.c
mpegaudioenc_template.c
mpegaudiotab.h
mpegutils.c
mpegutils.h
mpegvideo.c avcodec/mpegvideo: Do not clear the parse context during init 2017-08-23 13:15:16 +02:00
mpegvideo.h avcodec/motion_est: Fix mv_penalty table size 2016-01-31 00:25:20 +01:00
mpegvideo_enc.c avcodec/mpeg4video: Check time_incr 2016-01-31 00:25:20 +01:00
mpegvideo_motion.c avcodec/mpeg4video: Fix runtime error: left shift of negative value 2017-08-23 13:15:16 +02:00
mpegvideo_parser.c
mpegvideo_xvmc.c
mpegvideodsp.c
mpegvideodsp.h
mpegvideoencdsp.c
mpegvideoencdsp.h
mpl2dec.c
mqc.c
mqc.h
mqcdec.c
mqcenc.c
msgsmdec.c
msgsmdec.h
msmpeg4.c
msmpeg4.h
msmpeg4data.c
msmpeg4data.h
msmpeg4dec.c
msmpeg4enc.c
msrle.c avcodec/msrle: Check side data size before use 2017-08-23 13:15:16 +02:00
msrledec.c
msrledec.h
mss1.c
mss2.c avcodec/mss2: Check for repeat overflow 2016-01-31 00:25:20 +01:00
mss2dsp.c
mss2dsp.h
mss3.c
mss4.c
mss12.c
mss12.h
mss34dsp.c
mss34dsp.h
msvideo1.c avcodec/msvideo1: Check side data size before use 2017-08-23 13:15:16 +02:00
msvideo1enc.c
mvcdec.c
mxpegdec.c
nellymoser.c
nellymoser.h
nellymoserdec.c
nellymoserenc.c
noise_bsf.c
nuv.c
old_codec_ids.h
on2avc.c on2avc: limit number of bits to 30 in get_egolomb 2015-12-20 16:13:27 +01:00
on2avcdata.c
on2avcdata.h
options.c
options_table.h
opus.c
opus.h
opus_celt.c
opus_imdct.c
opus_imdct.h
opus_parser.c
opus_silk.c opus_silk: fix typo causing overflow in silk_stabilize_lsf 2015-12-20 16:13:19 +01:00
opusdec.c opusdec: Don't run vector_fmul_scalar on zero length arrays 2015-11-26 01:38:17 +01:00
paf.h
pafaudio.c
pafvideo.c
pamenc.c
parser.c
parser.h
pcm-bluray.c
pcm-dvd.c
pcm.c
pcm_tablegen.c
pcm_tablegen.h
pcx.c
pcxenc.c
pel_template.c
pgssubdec.c pgssubdec: fix subpicture output colorspace and range 2017-08-23 13:15:16 +02:00
pictordec.c avcodec/pictordec: Check plane value before doing value/mask computations 2017-08-23 13:15:16 +02:00
pixblockdsp.c
pixblockdsp.h
pixblockdsp_template.c
pixels.h
png.c
png.h
png_parser.c
pngdec.c avcodec/pngdec: Fix off by 1 size in decode_zbuf() 2017-08-23 13:15:16 +02:00
pngdsp.c
pngdsp.h
pngenc.c
pnm.c
pnm.h
pnm_parser.c
pnmdec.c
pnmenc.c
proresdata.c
proresdata.h
proresdec.h
proresdec2.c
proresdec_lgpl.c
proresdsp.c
proresdsp.h
proresenc_anatoliy.c
proresenc_kostya.c
psymodel.c
psymodel.h
pthread.c
pthread_frame.c avcodec/pthread_frame: clear priv_data, avoid stale pointer in error case 2015-08-20 14:38:27 +02:00
pthread_internal.h
pthread_slice.c avcodec/mpeg12enc: Move high resolution thread check to before initializing threads 2016-02-01 02:12:21 +01:00
ptx.c
put_bits.h avcodec/put_bits: Assert buf_ptr in flush_put_bits() 2016-01-31 00:25:20 +01:00
qcelpdata.h
qcelpdec.c
qdm2.c
qdm2_tablegen.c
qdm2_tablegen.h
qdm2data.h
qdrw.c
qpeg.c avcodec/qpeg: Check side data size before use 2017-08-23 13:15:16 +02:00
qpel_template.c
qpeldsp.c
qpeldsp.h
qtrle.c avcodec/qtrle: Check side data size before use 2017-08-23 13:15:16 +02:00
qtrleenc.c
r210dec.c
r210enc.c
ra144.c
ra144.h
ra144dec.c
ra144enc.c
ra288.c
ra288.h
ralf.c
ralfdata.h
rangecoder.c
rangecoder.h
ratecontrol.c
ratecontrol.h
raw.c avcodec/raw: Fix decoding of ilacetest.mov 2017-08-23 13:15:16 +02:00
raw.h
rawdec.c avcodec/rawdec: Check side data size before use 2017-08-23 13:15:16 +02:00
rawenc.c
rdft.c
rdft.h
realtextdec.c
rectangle.h
remove_extradata_bsf.c
resample.c avcodec/resample: Remove disabled and faulty code 2017-08-23 13:15:16 +02:00
resample2.c
rl.h
rl2.c
rle.c
rle.h
rnd_avg.h
roqaudioenc.c
roqvideo.c
roqvideo.h
roqvideodec.c
roqvideoenc.c
rpza.c
rtjpeg.c
rtjpeg.h
rv10.c
rv10enc.c
rv20enc.c
rv30.c
rv30data.h
rv30dsp.c
rv34.c avcodec/rv34: Clear pointers in ff_rv34_decode_init_thread_copy() 2015-08-20 14:38:27 +02:00
rv34.h
rv34_parser.c
rv34data.h
rv34dsp.c
rv34dsp.h
rv34vlc.h
rv40.c avcodec/rv40: Fix runtime error: left shift of negative value 2017-08-23 13:15:16 +02:00
rv40data.h
rv40dsp.c avcodec/rv40: Fix runtime error: left shift of negative value 2017-08-23 13:15:16 +02:00
rv40vlc2.h
s3tc.c
s3tc.h
s302m.c s302m: fix arithmetic exception 2015-11-26 01:38:17 +01:00
s302menc.c
samidec.c avcodec/samidec: make sure to properly restore parsing context after a tag 2016-01-28 02:09:46 +01:00
sanm.c avcodec/sanm: Reset sizes in destroy_buffers() 2015-08-20 14:38:27 +02:00
sbr.h
sbrdsp.c
sbrdsp.h
sgi.h
sgidec.c
sgienc.c
sgirledec.c
shorten.c
simple_idct.c
simple_idct.h
simple_idct_template.c
sinewin.c
sinewin.h
sinewin_tablegen.c
sinewin_tablegen.h
sipr.c
sipr.h
sipr16k.c
sipr16kdata.h
siprdata.h
smacker.c avcodec/smacker: Check that the data size is a multiple of a sample vector 2015-12-06 12:40:50 +01:00
smc.c
smvjpegdec.c
snow.c
snow.h avcodec/rangecoder: Check e 2015-12-06 12:40:49 +01:00
snow_dwt.c
snow_dwt.h
snowdata.h
snowdec.c
snowenc.c avcodec/motion_est: Fix mv_penalty table size 2016-01-31 00:25:20 +01:00
sonic.c sonic: make sure num_taps * channels is not larger than frame_size 2015-12-20 16:13:23 +01:00
sp5x.h
sp5xdec.c
srtdec.c
srtenc.c
startcode.c
startcode.h
subviewerdec.c
sunrast.c avcodec/sunrast: Fix input buffer pointer check 2017-08-23 13:15:16 +02:00
sunrast.h
sunrastenc.c
svq1.c
svq1.h
svq1_cb.h
svq1_vlc.h
svq1dec.c avcodec/svq1dec: Check init_get_bits8() for failure 2015-12-06 12:40:48 +01:00
svq1enc.c avcodec/svq1enc: Check dimensions 2015-08-20 14:38:28 +02:00
svq1enc.h
svq1enc_cb.h
svq3.c
svq3.h
svq13.c
synth_filter.c
synth_filter.h
tableprint.h
tak.c
tak.h
tak_parser.c
takdec.c avcodec/takdec: add code that got somehow lost in process of REing 2017-08-23 13:15:16 +02:00
targa.c
targa.h
targa_y216dec.c
targaenc.c
textdec.c
thread.h
tiertexseqv.c
tiff.c avcodec/tiff: Check subsample & rps values more completely 2016-01-31 00:25:20 +01:00
tiff.h
tiff_common.c
tiff_common.h
tiff_data.c
tiff_data.h
tiffenc.c
tmv.c
tpeldsp.c
tpeldsp.h
truemotion1.c avcodec/truemotion1: Check for even width 2015-12-06 12:40:48 +01:00
truemotion1data.h
truemotion2.c
truespeech.c
truespeech_data.h
tscc.c avcodec/tscc: Check side data size before use 2017-08-23 13:15:16 +02:00
tscc2.c
tscc2data.h
tta.c avcodec/tta: Check init_get_bits8() for failure 2015-12-06 12:40:48 +01:00
ttadata.c
ttadata.h
ttadsp.c
ttadsp.h
ttaenc.c avcodec/ttaenc: Reallocate packet if its too small 2017-08-23 13:15:16 +02:00
twinvq.c
twinvq.h
twinvq_data.h
twinvqdec.c
txd.c
ulti.c
ulti_cb.h
unary.h
utils.c avcodec/utils: correct align value for interplay 2017-08-23 13:15:16 +02:00
utvideo.c
utvideo.h
utvideodec.c
utvideoenc.c
v210dec.c
v210dec.h
v210enc.c
v210x.c
v308dec.c
v308enc.c
v408dec.c
v408enc.c
v410dec.c
v410enc.c
vaapi.c
vaapi.h
vaapi_h264.c
vaapi_internal.h
vaapi_mpeg2.c
vaapi_mpeg4.c
vaapi_vc1.c
vb.c
vble.c
vc1.c
vc1.h
vc1_common.h
vc1_parser.c
vc1acdata.h
vc1data.c
vc1data.h
vc1dec.c vc1dec: use get_bits_long and limit the read bits to 32 2015-11-26 01:38:17 +01:00
vc1dsp.c
vc1dsp.h
vcr1.c
vda.c
vda.h
vda_h264.c
vda_h264_dec.c
vda_internal.h
vdpau.c
vdpau.h
vdpau_h264.c
vdpau_internal.h
vdpau_mpeg4.c
vdpau_mpeg12.c
vdpau_vc1.c
version.h
videodsp.c
videodsp.h
videodsp_template.c
vima.c
vmdaudio.c
vmdvideo.c
vmnc.c
vorbis.c
vorbis.h
vorbis_data.c
vorbis_enc_data.h
vorbis_parser.c
vorbis_parser.h
vorbisdec.c vorbisdec: reject rangebits 0 with non-0 partitions 2016-01-28 02:15:49 +01:00
vorbisdsp.c
vorbisdsp.h
vorbisenc.c
vp3.c avcodec/vp3: Do not return random positive values but the buf size 2017-08-23 13:15:16 +02:00
vp3_parser.c
vp3data.h
vp3dsp.c avcodec/vp3dsp: Fix multiple signed integer overflow: 46341 * 47523 cannot be represented in type 'int' 2017-08-23 13:15:16 +02:00
vp3dsp.h
vp5.c avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder() 2017-08-23 13:15:16 +02:00
vp5data.h
vp6.c avcodec/vp6: clear dimensions on failed resolution change in vp6_parse_header() 2017-08-23 13:15:16 +02:00
vp6data.h
vp6dsp.c
vp8.c avcodec/vp8: Fix hang with slice threads 2017-08-23 13:15:16 +02:00
vp8.h avcodec/vp8: Check for bitsteam end in decode_mb_row_no_filter() 2017-08-23 13:15:16 +02:00
vp8_parser.c
vp8data.h
vp8dsp.c
vp8dsp.h
vp9.c avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder() 2017-08-23 13:15:16 +02:00
vp9.h
vp9_mc_template.c vp9: add support for resolution changes in inter frames. 2015-11-26 01:38:16 +01:00
vp9_parser.c vp9: add support for resolution changes in inter frames. 2015-11-26 01:38:16 +01:00
vp9data.h
vp9dsp.c vp9: add support for resolution changes in inter frames. 2015-11-26 01:38:16 +01:00
vp9dsp.h vp9: add support for resolution changes in inter frames. 2015-11-26 01:38:16 +01:00
vp56.c avcodec/vp56: Reset have_undamaged_frame on resolution changes 2017-08-23 13:15:16 +02:00
vp56.h avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder() 2017-08-23 13:15:16 +02:00
vp56data.c
vp56data.h
vp56dsp.c
vp56dsp.h
vp56rac.c avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder() 2017-08-23 13:15:16 +02:00
vqavideo.c
wavpack.c avcodec/wavpacl: Fix runtime error: left shift of negative value -1 2017-08-23 13:15:16 +02:00
wavpack.h
wavpackenc.c avcodec/wavpackenc: print channel count in av_log call 2016-01-31 00:25:20 +01:00
wavpackenc.h
webp.c
webvttdec.c
webvttenc.c
wma.c
wma.h
wma_common.c
wma_common.h
wma_freqs.c
wma_freqs.h
wmadata.h
wmadec.c
wmaenc.c avcodec/wmaenc: Check ff_wma_init() for failure 2016-02-01 02:12:21 +01:00
wmalosslessdec.c libavcodec/wmalosslessdec: Check the remaining bits 2017-08-23 13:15:16 +02:00
wmaprodata.h
wmaprodec.c avcodec/wmaprodec: Check bits per sample to be within the range not causing integer overflows 2015-12-06 12:40:51 +01:00
wmavoice.c
wmavoice_data.h
wmv2.c
wmv2.h
wmv2dec.c
wmv2dsp.c
wmv2dsp.h
wmv2enc.c
wnv1.c
ws-snd1.c
xan.c
xbmdec.c
xbmenc.c
xface.c
xface.h
xfacedec.c
xfaceenc.c
xiph.c
xiph.h
xl.c
xsubdec.c
xsubenc.c
xvididct.c
xvididct.h
xvmc.h
xvmc_internal.h
xwd.h
xwddec.c xwddec: prevent overflow of lsize * avctx->height 2015-12-20 16:13:40 +01:00
xwdenc.c
xxan.c
y41pdec.c
y41penc.c
yop.c
yuv4dec.c
yuv4enc.c
zerocodec.c
zmbv.c
zmbvenc.c