ffmpeg/libavformat
Andreas Cadhalpun 7c24ca1bda nutdec: fix illegal count check in decode_main_header
The existing check has two problems:
 1) i + count can overflow, so that the check '< 256' returns true.
 2) In the (i == 'N') case occurs a j-- so that the loop runs once more.

This can trigger the assertion 'nut->header_len[0] == 0' or cause
segmentation faults or infinite hangs.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2015-04-28 22:56:14 +02:00
..
4xm.c
Makefile lavf: Add support for WebM Live Muxing 2015-04-07 15:08:59 +02:00
a64.c
aacdec.c
ac3dec.c
act.c
adp.c
adtsenc.c
adxdec.c
aea.c
afc.c
aiff.h
aiffdec.c
aiffenc.c
allformats.c lavf: Add support for WebM Live Muxing 2015-04-07 15:08:59 +02:00
amr.c
anm.c
apc.c
ape.c avformat/ape: Use av_malloc_array() 2015-04-07 22:50:07 +02:00
apetag.c
apetag.h
apngdec.c
apngenc.c lavf/apngenc: Do not print a warning in the normal use-case. 2015-04-08 19:58:32 +02:00
aqtitledec.c
asf.c
asf.h
asfcrypt.c
asfcrypt.h
asfdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
asfenc.c avformat/asfenc: Check for index_ptr allocation failure 2015-04-07 22:29:54 +02:00
assdec.c Replace av_dlog with normal av_log at trace level 2015-04-19 12:41:59 +01:00
assenc.c lavf/assenc: handle extra sections after Events 2015-04-16 21:09:32 +02:00
ast.c
ast.h
astdec.c
astenc.c
au.c
audiointerleave.c
audiointerleave.h
avc.c
avc.h
avformat.h avformat: add AVFMT_FLAG_FASTSEEK, use it for mp3 2015-04-22 22:27:05 +02:00
avformatres.rc
avi.h
avidec.c avformat/avidec: Do not call av_log() per byte, use ff_tlog() 2015-04-20 16:21:42 +02:00
avienc.c
avio.c
avio.h lavf/avio: Add new types to AVIODirEntryType, bump minor version 2015-04-03 04:09:34 +02:00
avio_internal.h
aviobuf.c avformat/aviobuf: Do not resize the buffer in ffio_ensure_seekback() if there is no read function 2015-04-27 05:06:36 +02:00
avisynth.c Merge commit '247aa7af7d8197247c181e3fbfe8d93d75e41b29' 2015-04-17 20:03:16 +02:00
avlanguage.c
avlanguage.h
avr.c
avs.c
bethsoftvid.c
bfi.c
bink.c bink: check vst->index_entries before using it 2015-04-22 20:22:19 +02:00
bintext.c
bit.c
bluray.c
bmv.c
boadec.c
brstm.c
c93.c
cache.c
caf.c
caf.h
cafdec.c
cafenc.c
cavsvideodec.c
cdg.c
cdxl.c
cinedec.c
concat.c
concatdec.c
crcenc.c
crypto.c
cutils.c
dashenc.c Merge commit '2cc3936599b6fc63143036659653d1be0624360f' 2015-04-20 21:45:56 +02:00
data_uri.c
dauddec.c
daudenc.c
dfa.c
diracdec.c
dnxhddec.c
dsfdec.c
dsicin.c
dss.c
dtsdec.c avformat/dtsdec: Extend DTS core sync word 2015-04-28 19:29:47 +02:00
dtshddec.c
dump.c Fix codec fps diplay for very small fps. 2015-04-03 21:13:50 +02:00
dv.c
dv.h
dvbsub.c
dvenc.c
dxa.c
eacdata.c
electronicarts.c
epafdec.c
ffm.h
ffmdec.c ffmdec: Check return value of ffm_append_recommended_configuration 2015-04-10 14:44:53 +02:00
ffmenc.c
ffmeta.h
ffmetadec.c
ffmetaenc.c
file.c
file_open.c
filmstripdec.c
filmstripenc.c
flac_picture.c
flac_picture.h
flacdec.c lavf/flac: Autodetect raw flac files. 2015-04-10 12:35:02 +02:00
flacenc.c
flacenc.h
flacenc_header.c
flic.c
flv.h
flvdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
flvenc.c
format.c avformat/format: Add generic trace av_log in av_probe_input_format3() 2015-04-25 03:43:59 +02:00
framecrcenc.c
framehash.c
frmdec.c
ftp.c lavf/ftp: remove fixed length buffers from context 2015-04-03 00:10:09 +02:00
g722.c
g723_1.c
g729dec.c
gif.c
gifdec.c
golomb_tab.c
gopher.c
gsmdec.c
gxf.c
gxf.h
gxfenc.c
h261dec.c
h263dec.c
h264dec.c
hdsenc.c
hevc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
hevc.h
hevcdec.c
hls.c hls: skip to next segment if the current is unavailable 2015-04-17 22:54:17 +02:00
hlsenc.c
hlsproto.c
hnm.c
http.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
http.h
httpauth.c
httpauth.h avformat/httpauth: Change enum to int, which is accessed via AVOption as int 2015-04-06 14:44:33 +02:00
icecast.c
icodec.c
icoenc.c
id3v1.c
id3v1.h
id3v2.c
id3v2.h
id3v2enc.c
idcin.c
idroqdec.c
idroqenc.c
iff.c
ilbc.c
img2.c
img2.h
img2_alias_pix.c
img2_brender_pix.c
img2dec.c avformat/img2dec: do not rewind custom io buffers 2015-04-20 23:59:53 +02:00
img2enc.c
ingenientdec.c
internal.h
ipmovie.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
ircam.c
ircam.h
ircamdec.c
ircamenc.c
isom.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
isom.h
iss.c
iv8.c
ivfdec.c
ivfenc.c ivfenc: incorrect fourcc for VP9 video 2015-04-16 13:06:35 +02:00
jacosubdec.c
jacosubenc.c
jvdec.c
latmenc.c
libavformat.v
libgme.c
libmodplug.c
libnut.c
libquvi.c avformat/libquvi: Fix whitelist handling 2015-04-08 14:40:56 +02:00
librtmp.c
libsmbclient.c lavf/libsmbclient: implement directory listing callbacks 2015-04-06 01:59:04 +02:00
libssh.c
lmlm4.c
loasdec.c
log2_tab.c
lrc.c
lrc.h
lrcdec.c
lrcenc.c
lvfdec.c
lxfdec.c
m4vdec.c
matroska.c matroskadec: export cover art correctly 2015-04-08 12:36:53 +02:00
matroska.h matroskadec: export cover art correctly 2015-04-08 12:36:53 +02:00
matroskadec.c avformat/matroskadec: remove now duplicate doctype check 2015-04-19 16:47:12 +02:00
matroskaenc.c matroskadec: export cover art correctly 2015-04-08 12:36:53 +02:00
md5enc.c
md5proto.c
metadata.c
metadata.h
mgsts.c
microdvddec.c microdvd: do not export framerate hint as subtitle packet 2015-04-08 20:58:25 +02:00
microdvdenc.c
mkvtimestamp_v2.c
mlvdec.c
mm.c
mmf.c
mms.c
mms.h
mmsh.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mmst.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mov.c avformat/mov.c: Use %d to print an enum, not PRIu8 2015-04-21 23:48:07 +02:00
mov_chan.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mov_chan.h
movenc.c
movenc.h
movenchint.c
mp3dec.c avformat/mp3: large id3 tags break concatenated file detection 2015-04-24 15:06:54 +02:00
mp3enc.c
mpc.c
mpc8.c
mpeg.c avformat/mpeg: put timestamp trace av_logs under FF_DEBUG_TS 2015-04-20 17:41:22 +02:00
mpeg.h
mpegenc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mpegts.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mpegts.h
mpegtsenc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mpegvideodec.c
mpjpeg.c
mpl2dec.c
mpsubdec.c
msnwc_tcp.c
mtv.c
mux.c avformat/mux: Place timestamp related trace av_logs under FF_FDEBUG_TS 2015-04-20 17:36:36 +02:00
mvdec.c
mvi.c
mxf.c libavformat/mxf.c: Relaxed ProRes pattern 2015-04-03 13:26:39 +02:00
mxf.h
mxfdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mxfenc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
mxg.c
ncdec.c
network.c network: Do not leave context locked on error 2015-04-23 13:42:33 +02:00
network.h
nistspheredec.c
noproxy-test.c
nsvdec.c avformat/nsvdec: remove trace log from probe(), this is better done generically not per format 2015-04-21 02:19:07 +02:00
nullenc.c
nut.c
nut.h
nutdec.c nutdec: fix illegal count check in decode_main_header 2015-04-28 22:56:14 +02:00
nutenc.c
nuv.c
oggdec.c Merge commit '656e31ed8728b0c095d037dc9764fc8137c87200' 2015-04-20 22:12:08 +02:00
oggdec.h
oggenc.c
oggparsecelt.c
oggparsedirac.c
oggparseflac.c
oggparseogm.c
oggparseopus.c
oggparseskeleton.c
oggparsespeex.c
oggparsetheora.c
oggparsevorbis.c
oggparsevp8.c
oma.c
oma.h
omadec.c
omaenc.c
options.c
options_table.h avformat: add AVFMT_FLAG_FASTSEEK, use it for mp3 2015-04-22 22:27:05 +02:00
os_support.c
os_support.h
paf.c
pcm.c
pcm.h
pcmdec.c
pcmenc.c
pjsdec.c
pmpdec.c
psxstr.c
pva.c
pvfdec.c
qcp.c
qtpalette.h
r3d.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rawdec.c
rawdec.h
rawenc.c
rawenc.h
rawvideodec.c
rdt.c
rdt.h
realtextdec.c
redspark.c
replaygain.c
replaygain.h
riff.c Merge commit 'b17cbb0b1c4fdf8324eff24d40a02201bfaebfd3' 2015-04-24 21:17:11 +02:00
riff.h
riffdec.c
riffenc.c
rl2.c
rm.c
rm.h
rmdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rmenc.c Merge commit 'd34039b171bebe37bf723a1b03e5651267099739' 2015-04-20 22:24:38 +02:00
rmsipr.c
rmsipr.h
rpl.c
rsd.c
rso.c
rso.h
rsodec.c
rsoenc.c
rtmp.h
rtmpcrypt.c
rtmpcrypt.h
rtmpdh.c
rtmpdh.h
rtmphttp.c
rtmppkt.c
rtmppkt.h
rtmpproto.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rtp.c
rtp.h
rtpdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rtpdec.h
rtpdec_ac3.c
rtpdec_amr.c
rtpdec_asf.c avformat/rtpdec_asf: Fix potential pointer overflow 2015-04-12 17:41:23 +02:00
rtpdec_dv.c
rtpdec_formats.h
rtpdec_g726.c
rtpdec_h261.c
rtpdec_h263.c
rtpdec_h263_rfc2190.c
rtpdec_h264.c
rtpdec_hevc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rtpdec_ilbc.c
rtpdec_jpeg.c
rtpdec_latm.c
rtpdec_mpa_robust.c
rtpdec_mpeg4.c
rtpdec_mpeg12.c
rtpdec_mpegts.c
rtpdec_qcelp.c
rtpdec_qdm2.c
rtpdec_qt.c
rtpdec_svq3.c
rtpdec_vp8.c
rtpdec_vp9.c
rtpdec_xiph.c
rtpenc.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rtpenc.h
rtpenc_aac.c
rtpenc_amr.c
rtpenc_chain.c
rtpenc_chain.h
rtpenc_h261.c
rtpenc_h263.c
rtpenc_h263_rfc2190.c
rtpenc_h264_hevc.c
rtpenc_jpeg.c rtpenc_jpeg: Handle case of picture dimensions not dividing by 8 2015-04-23 23:20:03 +03:00
rtpenc_latm.c
rtpenc_mpegts.c
rtpenc_mpv.c
rtpenc_vp8.c
rtpenc_xiph.c
rtpproto.c avformat/rtpproto: Move dscp into context & AVOptions 2015-04-11 18:53:54 +02:00
rtpproto.h
rtsp.c Merge commit 'b90adb0aba073f9c1b4abca852119947393ced4c' 2015-04-24 20:37:51 +02:00
rtsp.h Merge commit 'e3ec6fe7bb2a622a863e3912181717a659eb1bad' 2015-04-01 21:34:20 +02:00
rtspcodes.h
rtspdec.c Merge commit '1a3eb042c704dea190c644def5b32c9cee8832b8' 2015-04-20 03:19:47 +02:00
rtspenc.c
samidec.c
sapdec.c
sapenc.c
sauce.c
sauce.h
sbgdec.c
sctp.c
sdp.c
sdr2.c
seek-test.c fate: add mp3 CBR seek test 2015-04-23 12:56:31 +02:00
segafilm.c avformat/segafilm: Use av_malloc_array() 2015-04-12 17:14:20 +02:00
segment.c avformat/segment: Change enum to int, which is accessed via AVOption as int 2015-04-07 23:21:48 +02:00
sierravmd.c avformat/sierravmd: use av_malloc_array() 2015-04-12 17:14:20 +02:00
siff.c
smacker.c
smjpeg.c
smjpeg.h
smjpegdec.c
smjpegenc.c
smoothstreamingenc.c
smush.c
sol.c
sox.h
soxdec.c
soxenc.c
spdif.c
spdif.h
spdifdec.c
spdifenc.c
srtdec.c
srtenc.c
srtp.c
srtp.h
srtpproto.c
stldec.c
subfile.c
subtitles.c
subtitles.h
subviewer1dec.c
subviewerdec.c
supdec.c
swf.c
swf.h
swfdec.c
swfenc.c
takdec.c
tcp.c Merge commit '27852f2f1dec3749ea79883b70484c841169f747' 2015-04-09 20:58:11 +02:00
tedcaptionsdec.c
tee.c
thp.c
tiertexseq.c
tls.c
tmv.c
tta.c
tty.c
txd.c
udp.c
uncodedframecrcenc.c
unix.c Merge commit '27852f2f1dec3749ea79883b70484c841169f747' 2015-04-09 20:58:11 +02:00
url-test.c
url.c
url.h
urldecode.c
urldecode.h
utils.c lavf: Reset global flag on deinit 2015-04-23 13:55:55 +02:00
vc1test.c
vc1testenc.c
version.h avformat: add AVFMT_FLAG_FASTSEEK, use it for mp3 2015-04-22 22:27:05 +02:00
vivo.c
voc.c
voc.h
vocdec.c
vocenc.c
vorbiscomment.c
vorbiscomment.h
vplayerdec.c
vqf.c
w64.c
w64.h
wavdec.c
wavenc.c
wc3movie.c
webm_chunk.c libavformat/webm_chunk: Write first audio packet. 2015-04-28 02:27:01 +02:00
webmdashenc.c webmdashenc: Fix UTCTiming Element 2015-04-28 03:39:07 +02:00
webpenc.c
webvttdec.c
webvttenc.c
westwood_aud.c
westwood_vqa.c
wtv.h
wtv_common.c
wtvdec.c
wtvenc.c avformat/wtvenc: Use av_realloc_array() 2015-04-11 13:50:50 +02:00
wv.c
wv.h
wvdec.c avformat/wvdec: fix seeking 2015-04-24 03:43:56 +02:00
wvenc.c
xa.c
xmv.c
xwma.c avformat/xwma: Use av_malloc_array() 2015-04-11 13:51:03 +02:00
yop.c
yuv4mpeg.h
yuv4mpegdec.c
yuv4mpegenc.c