ffmpeg/libavcodec
Michael Niedermayer 746fda9419 avcodec/h265_metadata_bsf: Check nb_units before accessing the first in h265_metadata_update_fragment()
Fixes: null pointer dereference
Fixes: 32113/clusterfuzz-testcase-minimized-ffmpeg_BSF_HEVC_METADATA_fuzzer-4803262287052800

Same as 0c48c332ee

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 497ea04dbd)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2021-09-10 16:04:26 +02:00
..
aarch64
alpha
arm
avr32
bfin
mips
neon
ppc
sh4
sparc
tests
x86 avcodec/x86/diracdsp: Fix high bits on Windows x86_64 2020-05-19 17:17:35 +02:00
.gitignore
4xm.c avcodec/4xm: Check pre_gb in decode_i_block() 2021-09-10 16:04:26 +02:00
8bps.c
8svx.c
012v.c
Makefile
a64colors.h
a64multienc.c
a64tables.h
aac.h
aac_ac3_parser.c
aac_ac3_parser.h
aac_adtstoasc_bsf.c
aac_defines.h
aac_parser.c
aaccoder.c
aaccoder_trellis.h
aaccoder_twoloop.h
aacdec.c
aacdec_fixed.c avcodec/aacdec_fixed: Limit index in vector_pow43() 2021-09-10 16:04:26 +02:00
aacdec_template.c avcodec/aacdec_template: Avoid undefined negation in imdct_and_windowing_eld() 2021-09-10 16:04:26 +02:00
aacdectab.h
aacenc.c
aacenc.h
aacenc_is.c
aacenc_is.h
aacenc_ltp.c
aacenc_ltp.h
aacenc_pred.c
aacenc_pred.h
aacenc_quantization.h
aacenc_quantization_misc.h
aacenc_tns.c
aacenc_tns.h
aacenc_utils.h
aacenctab.c
aacenctab.h
aacps.c
aacps.h
aacps_fixed.c
aacps_fixed_tablegen.c
aacps_fixed_tablegen.h
aacps_float.c
aacps_tablegen.c
aacps_tablegen.h
aacps_tablegen_template.c
aacpsdata.c
aacpsdsp.h
aacpsdsp_fixed.c
aacpsdsp_float.c
aacpsdsp_template.c
aacpsy.c
aacsbr.c
aacsbr.h
aacsbr_fixed.c
aacsbr_fixed_tablegen.h
aacsbr_tablegen.h
aacsbr_tablegen_common.h
aacsbr_template.c
aacsbrdata.h
aactab.c
aactab.h
aandcttab.c
aandcttab.h
aasc.c
ac3.c
ac3.h
ac3_parser.c
ac3_parser.h
ac3_parser_internal.h
ac3dec.c
ac3dec.h
ac3dec_data.c
ac3dec_data.h
ac3dec_fixed.c avcodec/ac3dec_fixed: Fix several invalid left shifts in scale_coefs() 2020-05-19 17:17:36 +02:00
ac3dec_float.c
ac3dsp.c
ac3dsp.h
ac3enc.c avcodec/ac3enc: Fix memleak 2020-05-20 03:16:34 +02:00
ac3enc.h
ac3enc_fixed.c
ac3enc_float.c
ac3enc_opts_template.c
ac3enc_template.c
ac3tab.c
ac3tab.h
acelp_filters.c
acelp_filters.h
acelp_pitch_delay.c
acelp_pitch_delay.h
acelp_vectors.c
acelp_vectors.h
adpcm.c avcodec/adpcm: XA: Check shift similar to filter 2020-07-05 01:47:56 +02:00
adpcm.h
adpcm_data.c
adpcm_data.h
adpcmenc.c
adts_header.c
adts_header.h
adts_parser.c
adts_parser.h
adx.c
adx.h
adx_parser.c
adxdec.c
adxenc.c avcodec/adxenc: Avoid undefined left shift of negative numbers 2020-05-20 04:05:39 +02:00
agm.c avcodec/agm: Fix off by 1 error in decode_inter_plane() 2020-10-05 21:28:08 +02:00
aic.c
alac.c avcodec/alac: Check decorr_shift to avoid invalid shift 2020-10-05 21:28:08 +02:00
alac_data.c
alac_data.h
alacdsp.c avcodec/alacdsp: Fix invalid shift in append_extra_bits() 2020-05-19 17:17:36 +02:00
alacdsp.h
alacenc.c
aliaspixdec.c
aliaspixenc.c
allcodecs.c
alsdec.c avcodec/alsdec: Check bitstream input in read_block() 2021-09-10 16:04:26 +02:00
amfenc.c
amfenc.h
amfenc_h264.c
amfenc_hevc.c
amr.h
amrnbdata.h
amrnbdec.c
amrwbdata.h
amrwbdec.c
anm.c
ansi.c avcodec/ansi: Check initial dimensions 2021-09-10 16:04:26 +02:00
apedec.c avcodec/apedec: Fix undefined integer overflow with 24bit 2020-07-07 19:30:17 +02:00
apng.h
aptx.c
arbc.c
ass.c
ass.h
ass_split.c
ass_split.h
assdec.c
assenc.c
asv.c
asv.h
asvdec.c
asvenc.c
atrac.c
atrac.h
atrac1.c
atrac1data.h
atrac3.c
atrac3data.h
atrac3plus.c
atrac3plus.h
atrac3plus_data.h
atrac3plusdec.c
atrac3plusdsp.c
atrac9dec.c
atrac9tab.h
audio_frame_queue.c
audio_frame_queue.h
audiodsp.c avcodec/audiodsp: Fix integer overflow in scalarproduct_int16_c() 2020-05-19 17:17:36 +02:00
audiodsp.h
audiotoolboxdec.c
audiotoolboxenc.c
aura.c
av1.h
av1_frame_split_bsf.c
av1_metadata_bsf.c
av1_parse.c
av1_parse.h
av1_parser.c
avcodec.h
avcodecres.rc
avdct.c avcodec/avdct: Clear IDCTDSPContext context 2020-05-19 17:17:35 +02:00
avdct.h
avfft.c
avfft.h
avpacket.c
avpicture.c
avrndec.c
avs.c
avs2_parser.c
avuidec.c
avuienc.c
bethsoftvideo.c
bethsoftvideo.h
bfi.c
bgmc.c
bgmc.h
bink.c
binkaudio.c avcodec/binkaudio: Fix 2Ghz sample_rate 2020-05-19 17:17:36 +02:00
binkdata.h
binkdsp.c
binkdsp.h
bintext.c
bintext.h
bit_depth_template.c
bitpacked.c
bitstream.c avcodec/bitstream: Don't check for undefined behaviour after it happened 2020-07-01 21:40:13 +02:00
bitstream_filter.c
bitstream_filters.c
blockdsp.c
blockdsp.h
bmp.c
bmp.h
bmp_parser.c
bmpenc.c
bmvaudio.c
bmvvideo.c
brenderpix.c
bsf.c
bsf.h
bswapdsp.c
bswapdsp.h
bytestream.h
c93.c
cabac.c
cabac.h
cabac_functions.h
canopus.c
canopus.h
cavs.c
cavs.h
cavs_parser.c
cavsdata.c
cavsdec.c
cavsdsp.c avcodec/cavsdsp: Fix undefined left shifts of negative numbers 2020-05-20 04:12:20 +02:00
cavsdsp.h
cbrt_data.c
cbrt_data.h
cbrt_data_fixed.c
cbrt_fixed_tablegen.c
cbrt_tablegen.c
cbrt_tablegen.h
cbrt_tablegen_template.c
cbs.c avcodec/cbs: Allocate more CodedBitstreamUnit at once in cbs_insert_unit() 2020-07-05 01:47:56 +02:00
cbs.h
cbs_av1.c avcodec/cbs_av1: Fix writing uvlc numbers >= INT_MAX 2020-07-01 21:39:45 +02:00
cbs_av1.h
cbs_av1_syntax_template.c avcodec/cbs_av1_syntax_template: Set seen_frame_header only after successfull uncompressed_header() 2020-05-19 17:17:36 +02:00
cbs_h264.h
cbs_h264_syntax_template.c avcodec/cbs_h264_syntax_template: fix off by 1 error with slice_group_change_cycle 2020-05-19 17:17:36 +02:00
cbs_h265.h
cbs_h265_syntax_template.c avcodec/cbs_h265_syntax_template: Limit num_long_term_pics more strictly 2020-05-21 15:32:28 +02:00
cbs_h2645.c avcodec/cbs_h2645: Fix potential out-of-bounds array access 2020-05-20 00:10:47 +02:00
cbs_h2645.h
cbs_internal.h
cbs_jpeg.c avcodec/cbs_jpeg: Fix uninitialized end index in cbs_jpeg_split_fragment() 2020-10-05 21:28:08 +02:00
cbs_jpeg.h
cbs_jpeg_syntax_template.c avcodec/cbs_jpeg_syntax_template: Check array index in huffman_table() 2020-05-19 17:17:36 +02:00
cbs_mpeg2.c cbs_mpeg2: Fix parsing the last unit 2019-12-31 16:57:37 -03:00
cbs_mpeg2.h cbs_mpeg2: Decompose Sequence End 2019-12-31 16:57:37 -03:00
cbs_mpeg2_syntax_template.c cbs_mpeg2: Decompose Sequence End 2019-12-31 16:57:37 -03:00
cbs_vp9.c cbs: Remove useless initializations 2019-12-31 16:57:37 -03:00
cbs_vp9.h
cbs_vp9_syntax_template.c
ccaption_dec.c
cdgraphics.c
cdxl.c
celp_filters.c avcodec/celp_filters: Avoid invalid negation in ff_celp_lp_synthesis_filter() 2021-09-10 16:04:26 +02:00
celp_filters.h
celp_math.c
celp_math.h
cfhd.c avcodec/cfhd: check peak.offset 2021-09-10 16:04:26 +02:00
cfhd.h
cfhddata.c
cga_data.c
cga_data.h
chomp_bsf.c
cinepak.c
cinepakenc.c avcodec/cinepakenc: Fix invalid shifts 2020-05-20 03:51:23 +02:00
clearvideo.c
clearvideodata.h
cljrdec.c
cljrenc.c
cllc.c
cngdec.c
cngenc.c
codec2utils.c
codec2utils.h
codec_desc.c
cook.c avcodec/cook: Check subpacket index against max 2021-09-10 16:04:26 +02:00
cook_parser.c
cookdata.h
copy_block.h
cos_tablegen.c
cpia.c
crystalhd.c
cscd.c avcodec/cscd: Check output len in zlib as in lzo 2021-09-10 16:04:26 +02:00
cuviddec.c avcodec/cuviddec: backport extradata fixes 2020-10-01 21:51:44 +02:00
cyuv.c
d3d11va.c
d3d11va.h
dca.c
dca.h
dca_core.c
dca_core.h
dca_core_bsf.c
dca_exss.c
dca_exss.h
dca_lbr.c avcodec/dca_lbr: Fix some error codes and error passing 2020-05-19 17:17:35 +02:00
dca_lbr.h
dca_parser.c
dca_syncwords.h
dca_xll.c
dca_xll.h
dcaadpcm.c
dcaadpcm.h
dcadata.c
dcadata.h
dcadct.c
dcadct.h
dcadec.c
dcadec.h
dcadsp.c avcodec/dcadsp: Fix integer overflow in dmix_add_c() 2021-09-10 16:04:26 +02:00
dcadsp.h
dcaenc.c
dcaenc.h
dcahuff.c
dcahuff.h
dcamath.h
dct.c
dct.h
dct32.h
dct32_fixed.c
dct32_float.c
dct32_template.c
dctref.c
dctref.h
dds.c
decode.c avcodec/decode/ff_get_buffer: Check for overflow in FFALIGN() 2021-09-10 16:04:26 +02:00
decode.h
dfa.c
dirac.c
dirac.h
dirac_arith.c
dirac_arith.h
dirac_dwt.c
dirac_dwt.h
dirac_dwt_template.c
dirac_parser.c avcodec/dirac_parser: do not offset AV_NOPTS_OFFSET 2021-09-10 16:04:26 +02:00
dirac_vlc.c
dirac_vlc.h
diracdec.c
diracdsp.c avcodec/diracdsp: Fix integer anomaly in dequant_subband_* 2020-10-05 21:28:08 +02:00
diracdsp.h
diractab.c
diractab.h
dnxhd_parser.c
dnxhddata.c
dnxhddata.h
dnxhddec.c
dnxhdenc.c avcodec/dnxhdenc: Fix undefined left shifts of negative numbers 2020-05-20 03:45:50 +02:00
dnxhdenc.h
dolby_e.c
dolby_e.h
dpcm.c avcodec/dpcm: clip exponent into supported range in XAN DPCM 2020-05-19 17:17:36 +02:00
dpx.c
dpx_parser.c
dpxenc.c
dsd.c
dsd.h
dsd_tablegen.h
dsddec.c avcodec/dsddec: Check channels 2020-05-21 15:32:28 +02:00
dsicinaudio.c
dsicinvideo.c
dss_sp.c
dstdec.c avcodec/dstdec: Replace AC overread check by sample rate check 2020-07-05 01:47:57 +02:00
dump_extradata_bsf.c dump_extradata: Insert extradata even for small packets 2020-05-20 02:46:10 +02:00
dv.c
dv.h
dv_profile.c
dv_profile.h
dv_profile_internal.h
dv_tablegen.c
dv_tablegen.h
dvaudio.h
dvaudio_parser.c
dvaudiodec.c
dvbsub.c
dvbsub_parser.c
dvbsubdec.c
dvbtxt.h
dvd_nav_parser.c
dvdata.c
dvdata.h
dvdec.c
dvdsub_parser.c
dvdsubdec.c
dvdsubenc.c
dvenc.c
dxa.c
dxtory.c avcodec/dxtory: Fix negative stride shift in dx2_decode_slice_420() 2021-09-10 16:04:26 +02:00
dxv.c
dxva2.c
dxva2.h
dxva2_h264.c
dxva2_hevc.c
dxva2_internal.h
dxva2_mpeg2.c
dxva2_vc1.c
dxva2_vp9.c
eac3_core_bsf.c
eac3_data.c
eac3_data.h
eac3dec.c
eac3enc.c
eac3enc.h
eacmv.c
eaidct.c
eaidct.h
eamad.c
eatgq.c
eatgv.c
eatqi.c
elbg.c
elbg.h
elsdec.c
elsdec.h
encode.c
error_resilience.c
error_resilience.h
escape124.c
escape130.c
evrcdata.h
evrcdec.c
exif.c
exif.h
exr.c avcodec/exr: skip bottom clearing loop when its outside the image 2021-09-10 16:04:26 +02:00
exrdsp.c
exrdsp.h
extract_extradata_bsf.c
faandct.c
faandct.h
faanidct.c
faanidct.h
faxcompr.c
faxcompr.h
fdctdsp.c
fdctdsp.h
ffjni.c
ffjni.h
fft-internal.h
fft.h
fft_fixed.c
fft_fixed_32.c
fft_float.c
fft_init_table.c
fft_table.h
fft_template.c
ffv1.c
ffv1.h
ffv1_template.c
ffv1dec.c avcodec/ffv1dec: Check if trailer is available 2021-09-10 16:04:26 +02:00
ffv1dec_template.c
ffv1enc.c
ffv1enc_template.c
ffwavesynth.c avcodec/ffwavesynth: Avoid signed integer overflow in phi_at() 2021-09-10 16:04:26 +02:00
fic.c
file_open.c
filter_units_bsf.c
fits.c avcodec/fits: Check gcount and pcount being non negative 2021-09-10 16:04:26 +02:00
fits.h
fitsdec.c
fitsenc.c
flac.c
flac.h
flac_parser.c avcodec/flac_parser: Do not lose header count in find_headers_search() 2020-05-19 17:17:36 +02:00
flacdata.c
flacdata.h
flacdec.c avcodec/flacdec: Avoid undefined shift in error case 2021-09-10 16:04:26 +02:00
flacdsp.c
flacdsp.h
flacdsp_lpc_template.c
flacdsp_template.c avcodec/flacdsp_template: Fix invalid shifts in decorrelate 2020-05-19 17:17:36 +02:00
flacenc.c
flashsv.c
flashsv2enc.c
flashsvenc.c
flicvideo.c
flv.h
flvdec.c
flvenc.c
fmtconvert.c
fmtconvert.h
fmvc.c
frame_thread_encoder.c
frame_thread_encoder.h
fraps.c
frwu.c
g2meet.c avcodec/g2meet: Check tile_width in epic_jb_decode_tile() 2020-05-19 17:17:36 +02:00
g722.c
g722.h
g722dec.c
g722dsp.c
g722dsp.h
g722enc.c
g723_1.c
g723_1.h
g723_1_parser.c
g723_1dec.c avcodec/g723_1dec: Fix invalid shift 2020-05-20 03:12:40 +02:00
g723_1enc.c
g726.c
g729.h
g729_parser.c
g729data.h
g729dec.c
g729postfilter.c avcodec/g729postfilter: Clip gain before scaling with AGC_FAC1 2020-05-19 17:17:36 +02:00
g729postfilter.h
gdv.c
get_bits.h
gif.c
gif.h
gif_parser.c
gifdec.c
golomb.c
golomb.h
gsm.h
gsm_parser.c
gsmdec.c
gsmdec_data.c
gsmdec_data.h
gsmdec_template.c
h261.c
h261.h
h261_parser.c
h261data.c
h261dec.c
h261enc.c
h263.c
h263.h
h263_parser.c
h263_parser.h
h263data.c
h263data.h
h263dec.c
h263dsp.c
h263dsp.h
h264.h
h264_cabac.c
h264_cavlc.c
h264_direct.c
h264_levels.c
h264_levels.h
h264_loopfilter.c
h264_mb.c
h264_mb_template.c
h264_mc_template.c
h264_metadata_bsf.c avcodec/h264_metadata_bsf: Fix invalid av_freep 2020-07-04 22:32:14 +02:00
h264_mp4toannexb_bsf.c
h264_mvpred.h
h264_parse.c
h264_parse.h
h264_parser.c
h264_picture.c
h264_ps.c
h264_ps.h
h264_redundant_pps_bsf.c
h264_refs.c
h264_sei.c
h264_sei.h
h264_slice.c avcodec/h264_slice: Check input SPS in ff_h264_update_thread_context() 2021-09-10 16:04:26 +02:00
h264addpx_template.c
h264chroma.c
h264chroma.h
h264chroma_template.c
h264data.c
h264data.h
h264dec.c avcodec/h264dec: Disable forced small_padding on flag2 fast 2020-07-05 01:47:56 +02:00
h264dec.h
h264dsp.c
h264dsp.h
h264dsp_template.c
h264idct.c
h264idct.h
h264idct_template.c avcodec/h264idct_template: Fix integer overflow in ff_h264_chroma422_dc_dequant_idct() 2021-09-10 16:04:26 +02:00
h264pred.c
h264pred.h
h264pred_template.c
h264qpel.c
h264qpel.h
h264qpel_template.c
h265_metadata_bsf.c avcodec/h265_metadata_bsf: Check nb_units before accessing the first in h265_metadata_update_fragment() 2021-09-10 16:04:26 +02:00
h265_profile_level.c
h265_profile_level.h
h2645_parse.c
h2645_parse.h
hap.c
hap.h avcodec/hapdec: Change compressed_offset to unsigned 32bit 2021-09-10 16:04:26 +02:00
hapdec.c avcodec/hapdec: Change compressed_offset to unsigned 32bit 2021-09-10 16:04:26 +02:00
hapenc.c
hapqa_extract_bsf.c
hcom.c
hevc.h
hevc_cabac.c avcodec/hevc_cabac: Limit value in coeff_abs_level_remaining_decode() tighter 2021-09-10 16:04:26 +02:00
hevc_data.c
hevc_data.h
hevc_filter.c
hevc_mp4toannexb_bsf.c avcodec/hevc_mp4toannexb_bsf: Check NAL size against available input 2020-06-15 04:46:05 +02:00
hevc_mvs.c
hevc_parse.c
hevc_parse.h
hevc_parser.c
hevc_ps.c avcodec/hevc_ps: check scaling_list_dc_coef 2021-09-10 16:04:26 +02:00
hevc_ps.h
hevc_ps_enc.c
hevc_refs.c
hevc_sei.c avcodec/hevc_sei: Check payload size in decode_nal_sei_message() 2021-09-10 16:04:26 +02:00
hevc_sei.h
hevcdec.c avcodec/hevcdec: Check slice_cb_qp_offset / slice_cr_qp_offset 2021-09-10 16:04:26 +02:00
hevcdec.h
hevcdsp.c
hevcdsp.h
hevcdsp_template.c
hevcpred.c
hevcpred.h
hevcpred_template.c avcodec/hevcpred_template: Fix diagonal chroma availability in 4:2:2 edge case in intra_pred 2021-09-10 16:04:26 +02:00
hnm4video.c
hpel_template.c
hpeldsp.c
hpeldsp.h
hq_hqa.c avcodec/hq_hqa: Check info size 2020-07-05 01:47:56 +02:00
hq_hqa.h
hq_hqadata.c
hq_hqadsp.c
hq_hqadsp.h
hqx.c
hqx.h
hqxdsp.c
hqxdsp.h
hqxvlc.c
htmlsubtitles.c
htmlsubtitles.h
huffman.c
huffman.h
huffyuv.c
huffyuv.h
huffyuvdec.c avcodec/huffyuvdec: Test vertical coordinate more often 2020-07-05 01:47:56 +02:00
huffyuvdsp.c
huffyuvdsp.h
huffyuvenc.c
huffyuvencdsp.c
huffyuvencdsp.h
hwaccel.h
hwaccels.h
idcinvideo.c
idctdsp.c
idctdsp.h
iff.c avcodec/iff: Fix off by x error 2020-07-05 01:47:56 +02:00
iirfilter.c
iirfilter.h
ilbcdata.h
ilbcdec.c
imc.c
imcdata.h
imgconvert.c
imm4.c
imx_dump_header_bsf.c
indeo2.c
indeo2data.h
indeo3.c
indeo3data.h
indeo4.c
indeo4data.h
indeo5.c
indeo5data.h
intelh263dec.c
internal.h
interplayacm.c
interplayvideo.c
intrax8.c avcodec/intrax8: Check for end of bitstream in ff_intrax8_decode_picture() 2020-05-19 17:17:36 +02:00
intrax8.h
intrax8dsp.c
intrax8dsp.h
intrax8huf.h
ituh263dec.c avcodec/ituh263dec: Fix undefined left shift of negative number 2020-05-20 03:46:43 +02:00
ituh263enc.c
ivi.c avcodec/ivi: Clear got_p_frame before decoding a new frame using it 2020-05-21 15:32:29 +02:00
ivi.h
ivi_dsp.c
ivi_dsp.h
j2kenc.c
jacosub.h
jacosubdec.c
jfdctfst.c
jfdctint.c
jfdctint_template.c
jni.c
jni.h
jpeg2000.c
jpeg2000.h
jpeg2000dec.c avcodec/jpeg2000dec: Check atom_size in jp2_find_codestream() 2021-09-10 16:04:26 +02:00
jpeg2000dsp.c
jpeg2000dsp.h
jpeg2000dwt.c avcodec/jpeg2000dwt: Fix undefined shifts of negative numbers 2020-05-20 03:47:24 +02:00
jpeg2000dwt.h
jpegls.c
jpegls.h avcodec/jpegls: Check A[Q] for overflow in ff_jpegls_update_state_regular() 2021-09-10 16:04:26 +02:00
jpeglsdec.c avcodec/jpeglsdec: Fix k=16 in ls_get_code_regular() 2021-09-10 16:04:26 +02:00
jpeglsdec.h
jpeglsenc.c
jpegtables.c
jpegtables.h
jrevdct.c
jvdec.c
kbdwin.c
kbdwin.h
kgv1dec.c
kmvc.c
lagarith.c avcodec/lagarith: Sanity check scale 2020-05-19 17:17:35 +02:00
lagarithrac.c
lagarithrac.h
latm_parser.c
lcl.h
lcldec.c
lclenc.c
libaomdec.c
libaomenc.c
libaribb24.c
libavcodec.v
libcelt_dec.c
libcodec2.c
libdav1d.c
libdavs2.c
libfdk-aacdec.c
libfdk-aacenc.c
libgsmdec.c
libgsmenc.c
libilbc.c
libkvazaar.c
libmp3lame.c libavcodec/libmp3lame: Don't free user-provided AVPacket 2020-05-23 20:29:16 +02:00
libopencore-amr.c
libopenh264.c
libopenh264.h
libopenh264dec.c
libopenh264enc.c
libopenjpegdec.c
libopenjpegenc.c
libopus.c
libopus.h
libopusdec.c
libopusenc.c avcodec/libopusenc: Don't free user-provided AVPacket 2020-05-23 20:29:16 +02:00
librsvgdec.c
libshine.c
libspeexdec.c
libspeexenc.c
libtheoraenc.c
libtwolame.c
libvo-amrwbenc.c
libvorbisdec.c
libvorbisenc.c
libvpx.c
libvpx.h
libvpxdec.c
libvpxenc.c libavcodec/libvpxenc: Don't free user-provided AVPacket 2020-05-23 20:29:17 +02:00
libwavpackenc.c
libwebpenc.c
libwebpenc_animencoder.c
libwebpenc_common.c
libwebpenc_common.h
libx264.c
libx265.c
libxavs.c
libxavs2.c
libxvid.c
libxvid.h
libzvbi-teletextdec.c
ljpegenc.c
loco.c avcodec/loco: Fix integer overflow with large values from loco_get_rice() 2020-07-07 19:29:23 +02:00
log2_tab.c
lossless_audiodsp.c avcodec/lossless_audiodsp: Fix undefined overflows in scalarproduct_and_madd_int16_c() 2020-07-05 01:47:56 +02:00
lossless_audiodsp.h
lossless_videodsp.c
lossless_videodsp.h
lossless_videoencdsp.c
lossless_videoencdsp.h
lpc.c
lpc.h
lsp.c
lsp.h
lzf.c avcodec/lzf: Consider the needed size in reallocation 2020-07-05 01:47:56 +02:00
lzf.h
lzw.c
lzw.h
lzwenc.c
m101.c
mace.c
magicyuv.c avcodec/magicyuv: Check slice size before reading flags and pred 2021-09-10 16:04:26 +02:00
magicyuvenc.c
mathops.h
mathtables.c
mdct15.c
mdct15.h
mdct_fixed.c
mdct_fixed_32.c
mdct_float.c
mdct_template.c
mdec.c
me_cmp.c
me_cmp.h
mediacodec.c
mediacodec.h
mediacodec_surface.c
mediacodec_surface.h
mediacodec_sw_buffer.c
mediacodec_sw_buffer.h
mediacodec_wrapper.c avcodec/mediacodec_wrapper: fix {input,output}_buffers global reference leak 2020-05-20 09:35:58 +02:00
mediacodec_wrapper.h
mediacodecdec.c
mediacodecdec_common.c
mediacodecdec_common.h
metasound.c
metasound_data.c
metasound_data.h
microdvddec.c
mimic.c
mjpeg.h
mjpeg2jpeg_bsf.c
mjpeg_parser.c
mjpega_dump_header_bsf.c
mjpegbdec.c
mjpegdec.c
mjpegdec.h
mjpegenc.c
mjpegenc.h
mjpegenc_common.c
mjpegenc_common.h
mjpegenc_huffman.c
mjpegenc_huffman.h
mlp.c
mlp.h
mlp_parse.c
mlp_parse.h
mlp_parser.c
mlpdec.c
mlpdsp.c avcodec/mlpdsp: Fix a invalid shift in ff_mlp_rematrix_channel() 2020-05-19 17:17:35 +02:00
mlpdsp.h
mlpenc.c
mlz.c
mlz.h
mmaldec.c
mmvideo.c
motion_est.c
motion_est.h
motion_est_template.c avcodec/motion_est_template: Fix invalid shifts in no_sub_motion_search() 2020-05-19 17:17:35 +02:00
motionpixels.c
motionpixels_tablegen.c
motionpixels_tablegen.h
movsub_bsf.c
movtextdec.c
movtextenc.c
mp3_header_decompress_bsf.c
mpc.c avcodec/mpc: Fix multiple numerical overflows in ff_mpc_dequantize_and_synth() 2020-10-05 21:28:08 +02:00
mpc.h
mpc7.c
mpc7data.h
mpc8.c
mpc8data.h
mpc8huff.h
mpcdata.h
mpeg2_metadata_bsf.c mpeg2_metadata, cbs_mpeg2: Fix handling of colour_description 2019-12-31 16:57:37 -03:00
mpeg4_unpack_bframes_bsf.c
mpeg4audio.c
mpeg4audio.h
mpeg4data.h
mpeg4video.c
mpeg4video.h
mpeg4video_parser.c
mpeg4video_parser.h
mpeg4videodec.c avcodec/mpeg4videodec: Fix 2 integer overflows in get_amv() 2020-07-05 01:47:56 +02:00
mpeg4videoenc.c avcodec/mpeg4videoenc: Check extradata malloc() 2021-09-10 16:04:26 +02:00
mpeg12.c
mpeg12.h
mpeg12data.c
mpeg12data.h
mpeg12dec.c avcodec/mpeg12dec: remove outdated comments 2020-07-05 01:47:56 +02:00
mpeg12enc.c
mpeg12framerate.c
mpeg12vlc.h
mpeg_er.c
mpeg_er.h
mpegaudio.c
mpegaudio.h
mpegaudio_parser.c
mpegaudio_tablegen.c
mpegaudio_tablegen.h
mpegaudiodata.c
mpegaudiodata.h
mpegaudiodec_fixed.c
mpegaudiodec_float.c
mpegaudiodec_template.c
mpegaudiodecheader.c
mpegaudiodecheader.h
mpegaudiodectab.h
mpegaudiodsp.c
mpegaudiodsp.h
mpegaudiodsp_data.c
mpegaudiodsp_fixed.c
mpegaudiodsp_float.c
mpegaudiodsp_template.c
mpegaudioenc_fixed.c
mpegaudioenc_float.c
mpegaudioenc_template.c avcodec/mpegaudioenc_template: fix invalid shift of sample 2020-05-19 17:17:36 +02:00
mpegaudiotab.h
mpegpicture.c
mpegpicture.h
mpegutils.c
mpegutils.h
mpegvideo.c avcodec/mpegvideo: Update chroma_?_shift in ff_mpv_common_frame_size_change() 2021-09-10 16:04:26 +02:00
mpegvideo.h
mpegvideo_enc.c
mpegvideo_motion.c
mpegvideo_parser.c
mpegvideo_xvmc.c
mpegvideodata.c
mpegvideodata.h
mpegvideodsp.c
mpegvideodsp.h
mpegvideoencdsp.c
mpegvideoencdsp.h
mpl2dec.c
mqc.c
mqc.h
mqcdec.c
mqcenc.c
mscc.c
msgsmdec.c
msgsmdec.h
msmpeg4.c
msmpeg4.h
msmpeg4data.c
msmpeg4data.h
msmpeg4dec.c
msmpeg4enc.c
msrle.c
msrledec.c
msrledec.h
mss1.c
mss2.c
mss2dsp.c
mss2dsp.h
mss3.c
mss4.c
mss12.c
mss12.h
mss34dsp.c
mss34dsp.h
msvideo1.c
msvideo1enc.c
mvcdec.c
mwsc.c
mxpegdec.c avcodec/mxpegdec: fix SOF counting 2021-09-10 16:04:26 +02:00
nellymoser.c
nellymoser.h
nellymoserdec.c
nellymoserenc.c
noise_bsf.c
null_bsf.c
nuv.c avcodec/nuv: widen buf_size type 2020-05-19 17:17:36 +02:00
nvdec.c
nvdec.h
nvdec_h264.c
nvdec_hevc.c
nvdec_mjpeg.c
nvdec_mpeg4.c
nvdec_mpeg12.c
nvdec_vc1.c
nvdec_vp8.c
nvdec_vp9.c
nvenc.c avcodec/nvenc: honor max bitrate in CQ mode 2020-06-04 19:02:25 +02:00
nvenc.h
nvenc_h264.c
nvenc_hevc.c
omx.c
on2avc.c
on2avcdata.c
on2avcdata.h
options.c
options_table.h
opus.c
opus.h
opus_celt.c
opus_celt.h
opus_parser.c
opus_pvq.c
opus_pvq.h
opus_rc.c
opus_rc.h
opus_silk.c
opusdec.c
opusdsp.c
opusdsp.h
opusenc.c
opusenc.h
opusenc_psy.c
opusenc_psy.h
opusenc_utils.h
opustab.c
opustab.h
paf.h
pafaudio.c
pafvideo.c
pamenc.c
parser.c
parser.h
parsers.c
pcm-bluray.c
pcm-dvd.c
pcm-dvdenc.c
pcm.c avcodec/pcm: Fix undefined shifts 2020-05-20 03:24:57 +02:00
pcm_tablegen.c
pcm_tablegen.h
pcx.c
pcxenc.c
pel_template.c
pgssubdec.c avcodec/pgssubdec: Free subtitle on error 2020-05-19 17:17:35 +02:00
pictordec.c
pixblockdsp.c
pixblockdsp.h
pixels.h
pixlet.c avcodec/pixlet: Fix log(0) check 2020-07-05 01:47:56 +02:00
png.c
png.h
png_parser.c
pngdec.c avcodec/pngdec: Check for fctl after idat 2020-07-05 01:47:57 +02:00
pngdsp.c
pngdsp.h
pngenc.c
pnm.c
pnm.h
pnm_parser.c avcodec/pnm_parser: Check av_image_get_buffer_size() for failure 2021-09-10 16:04:26 +02:00
pnmdec.c avcodec/pnmdec: Fix misaligned reads 2020-07-06 01:50:33 +02:00
pnmenc.c
profiles.c
profiles.h
prores_metadata_bsf.c
proresdata.c
proresdata.h
proresdec.h
proresdec2.c
proresdsp.c
proresdsp.h
proresenc_anatoliy.c avcodec/proresenc_anatoliy: Fix invalid left shift of negative number 2020-05-20 04:00:32 +02:00
proresenc_kostya.c
prosumer.c
psd.c
psymodel.c
psymodel.h
pthread.c
pthread_frame.c
pthread_internal.h
pthread_slice.c
ptx.c
put_bits.h
qcelpdata.h
qcelpdec.c
qdm2.c avcodec/qdm2: Check fft_coefs_index 2020-05-19 17:17:35 +02:00
qdm2_tablegen.c
qdm2_tablegen.h
qdm2data.h
qdmc.c
qdrw.c
qpeg.c
qpel_template.c
qpeldsp.c
qpeldsp.h
qsv.c
qsv.h
qsv_api.c
qsv_internal.h
qsvdec.c
qsvdec.h
qsvdec_h2645.c
qsvdec_other.c
qsvenc.c
qsvenc.h
qsvenc_h264.c
qsvenc_hevc.c
qsvenc_jpeg.c
qsvenc_mpeg2.c
qtrle.c
qtrleenc.c
r210dec.c
r210enc.c
ra144.c
ra144.h
ra144dec.c
ra144enc.c avcodec/ra144enc: Fix invalid left shift of negative number 2020-05-20 04:08:57 +02:00
ra288.c
ra288.h
ralf.c avcodec/ralf: Check num_blocks before use 2020-05-19 17:17:36 +02:00
ralfdata.h
rangecoder.c
rangecoder.h
rasc.c avcodec/rasc: Check frame before clearing 2021-09-10 16:04:26 +02:00
ratecontrol.c
ratecontrol.h
raw.c
raw.h
rawdec.c avcodec/rawdec: Use linesize in b64a 2020-05-19 17:17:35 +02:00
rawenc.c
rdft.c
rdft.h
realtextdec.c
rectangle.h
remove_extradata_bsf.c
reverse.c
rkmppdec.c
rl.c
rl.h
rl2.c
rle.c
rle.h
rnd_avg.h
roqaudioenc.c
roqvideo.c
roqvideo.h
roqvideodec.c
roqvideoenc.c
rpza.c
rscc.c avcodec/rscc: Check inflated_buf size whan it is used 2021-09-10 16:04:26 +02:00
rtjpeg.c
rtjpeg.h
rv10.c
rv10.h
rv10enc.c
rv20enc.c
rv30.c
rv30data.h
rv30dsp.c
rv34.c
rv34.h
rv34_parser.c
rv34data.h
rv34dsp.c
rv34dsp.h
rv34vlc.h
rv40.c
rv40data.h
rv40dsp.c avcodec/rv40dsp: Fix integer overflows in rv40_weight_func_*() 2020-05-19 17:17:36 +02:00
rv40vlc2.h
s302m.c
s302menc.c
samidec.c
sanm.c
sbc.c
sbc.h
sbc_parser.c
sbcdec.c
sbcdec_data.c
sbcdec_data.h
sbcdsp.c
sbcdsp.h
sbcdsp_data.c
sbcdsp_data.h
sbcenc.c
sbr.h
sbrdsp.c
sbrdsp.h
sbrdsp_fixed.c
sbrdsp_template.c
scpr.c
scpr.h
scpr3.c avcodec/scpr3: Fix out of array access with dectab 2020-07-05 01:47:57 +02:00
scpr3.h
screenpresso.c
sgi.h
sgidec.c
sgienc.c
sgirledec.c
sheervideo.c
sheervideodata.h
shorten.c
simple_idct.c avcodec/simple_idct: Fix undefined integer overflow in idct4row() 2021-09-10 16:04:26 +02:00
simple_idct.h
simple_idct_template.c
sinewin.c
sinewin.h
sinewin_fixed.c
sinewin_fixed_tablegen.c
sinewin_tablegen.c
sinewin_tablegen.h
sinewin_tablegen_template.c
sipr.c
sipr.h
sipr16k.c
sipr16kdata.h
sipr_parser.c
siprdata.h
smacker.c avcodec/smacker: Check remaining bits in SMK_BLK_FULL 2021-09-10 16:04:26 +02:00
smc.c
smvjpegdec.c
snappy.c avcodec/snappy: Sanity check bytestream2_get_levarint() 2020-05-19 17:17:35 +02:00
snappy.h
snow.c
snow.h
snow_dwt.c
snow_dwt.h
snowdata.h
snowdec.c avcodec/snowdec: Sanity check hcoeff 2020-10-05 21:28:08 +02:00
snowenc.c
sonic.c avcodec/sonic: Use unsigned temporary in predictor_calc_error() 2021-09-10 16:04:26 +02:00
sp5x.h
sp5xdec.c
speedhq.c avcodec/speedhq: Width < 8 is not supported 2021-09-10 16:04:26 +02:00
srtdec.c
srtenc.c
startcode.c
startcode.h
subviewerdec.c
sunrast.c
sunrast.h
sunrastenc.c
svq1.c
svq1.h
svq1_cb.h
svq1_vlc.h
svq1dec.c avcodec/svq1dec: Check that there is data left after the header 2020-05-19 17:17:36 +02:00
svq1enc.c
svq1enc.h
svq1enc_cb.h
svq3.c
svq13.c
synth_filter.c
synth_filter.h
tableprint.h
tableprint_vlc.h
tak.c
tak.h
tak_parser.c
takdec.c
takdsp.c avcodec/takdsp: Fix negative shift in decorrelate_sf() 2021-09-10 16:04:26 +02:00
takdsp.h
targa.c
targa.h
targa_y216dec.c
targaenc.c
tdsc.c avcodec/tdsc: Fix tile checks 2020-10-05 21:28:08 +02:00
textdec.c
texturedsp.c
texturedsp.h
texturedspenc.c
thread.h
tiertexseqv.c
tiff.c avcodec/tiff: Restrict tag order based on specification 2020-10-05 21:28:08 +02:00
tiff.h
tiff_common.c
tiff_common.h
tiff_data.c
tiff_data.h
tiffenc.c
tmv.c
tpeldsp.c
tpeldsp.h
trace_headers_bsf.c
truehd_core_bsf.c
truemotion1.c
truemotion1data.h
truemotion2.c
truemotion2rt.c
truespeech.c
truespeech_data.h
tscc.c
tscc2.c
tscc2data.h
tta.c
ttadata.c
ttadata.h
ttadsp.c avcodec/ttadsp: Fix several integer overflows in tta_filter_process_c() 2020-05-19 17:17:36 +02:00
ttadsp.h
ttaenc.c avcodec/ttaenc: Fix undefined shift 2020-05-20 03:08:52 +02:00
ttaencdsp.c
ttaencdsp.h
twinvq.c
twinvq.h
twinvq_data.h
twinvqdec.c
txd.c avcodec/txd: Check for input size against the header size. 2020-05-19 17:17:36 +02:00
ulti.c
ulti_cb.h
unary.h
utils.c avcodec/utils: Use more bits for intermediate for AV_CODEC_ID_ADPCM_MS 2021-09-10 16:04:26 +02:00
utvideo.c
utvideo.h
utvideodec.c avcodec/utvideodec: Fix integer overflow in decode_plane() 2020-05-19 17:17:36 +02:00
utvideodsp.c
utvideodsp.h
utvideoenc.c
v4l2_buffers.c
v4l2_buffers.h
v4l2_context.c
v4l2_context.h
v4l2_fmt.c
v4l2_fmt.h
v4l2_m2m.c
v4l2_m2m.h
v4l2_m2m_dec.c
v4l2_m2m_enc.c
v210dec.c
v210dec.h
v210enc.c
v210enc.h
v210x.c
v308dec.c
v308enc.c
v408dec.c
v408enc.c
v410dec.c
v410enc.c
vaapi.h
vaapi_decode.c
vaapi_decode.h
vaapi_encode.c
vaapi_encode.h
vaapi_encode_h264.c
vaapi_encode_h265.c
vaapi_encode_mjpeg.c
vaapi_encode_mpeg2.c
vaapi_encode_vp8.c
vaapi_encode_vp9.c
vaapi_h264.c
vaapi_hevc.c
vaapi_mjpeg.c
vaapi_mpeg2.c
vaapi_mpeg4.c
vaapi_vc1.c
vaapi_vp8.c
vaapi_vp9.c
vb.c
vble.c
vc1.c
vc1.h
vc1_block.c avcodec/vc1_block: Fix integer overflow in ac value 2021-09-10 16:04:26 +02:00
vc1_common.h
vc1_loopfilter.c
vc1_mc.c
vc1_parser.c
vc1_pred.c
vc1_pred.h
vc1acdata.h
vc1data.c
vc1data.h
vc1dec.c avcodec/vc1dec: Check field_mode for sprites 2020-05-19 17:17:35 +02:00
vc1dsp.c
vc1dsp.h
vc2enc.c
vc2enc_dwt.c
vc2enc_dwt.h
vcr1.c
vdpau.c
vdpau.h
vdpau_h264.c
vdpau_hevc.c
vdpau_internal.h
vdpau_mpeg4.c
vdpau_mpeg12.c
vdpau_vc1.c
version.h
videodsp.c
videodsp.h
videodsp_template.c
videotoolbox.c
videotoolbox.h
videotoolboxenc.c
vima.c
vlc.h
vmdaudio.c avcodec/vmdaudio: Check block_align more 2020-05-19 17:17:35 +02:00
vmdvideo.c
vmnc.c
vorbis.c
vorbis.h
vorbis_data.c
vorbis_enc_data.h
vorbis_parser.c
vorbis_parser.h
vorbis_parser_internal.h
vorbisdec.c
vorbisdsp.c
vorbisdsp.h
vorbisenc.c
vp3.c avcodec/vp3: Check input amount in theora_decode_header() 2021-09-10 16:04:26 +02:00
vp3_parser.c
vp3data.h
vp3dsp.c avcodec/vp3dsp: Use unsigned constant to avoid undefined integer overflow in ff_vp3dsp_set_bounding_values() 2021-09-10 16:04:26 +02:00
vp3dsp.h
vp4data.h
vp5.c
vp5data.h
vp6.c
vp6data.h
vp6dsp.c
vp8.c avcodec/vp8: Move end check into MB loop in vp78_decode_mv_mb_modes() 2021-09-10 16:04:26 +02:00
vp8.h
vp8_parser.c
vp8data.h
vp8dsp.c
vp8dsp.h
vp9.c
vp9.h
vp9_mc_template.c
vp9_metadata_bsf.c
vp9_parser.c
vp9_raw_reorder_bsf.c
vp9_superframe_bsf.c
vp9_superframe_split_bsf.c
vp9block.c
vp9data.c
vp9data.h
vp9dec.h
vp9dsp.c
vp9dsp.h
vp9dsp_8bpp.c
vp9dsp_10bpp.c
vp9dsp_12bpp.c
vp9dsp_template.c avcodec/vp9dsp_template: Fix integer overflows in itxfm_wrapper 2021-09-10 16:04:26 +02:00
vp9lpf.c
vp9mvs.c
vp9prob.c
vp9recon.c
vp9shared.h
vp56.c
vp56.h
vp56data.c
vp56data.h
vp56dsp.c
vp56dsp.h
vp56rac.c
vqavideo.c
vt_internal.h
wavpack.c
wavpack.h
wavpackenc.c avcodec/wavpackenc: Fix undefined shifts 2020-05-20 03:22:16 +02:00
wavpackenc.h
wcmv.c
webp.c
webvttdec.c
webvttenc.c
wma.c
wma.h
wma_common.c
wma_common.h
wma_freqs.c
wma_freqs.h
wmadata.h
wmadec.c
wmaenc.c
wmalosslessdec.c avcodec/wmalosslessdec: Check remaining space before padding and channel residue 2020-10-05 21:28:08 +02:00
wmaprodata.h
wmaprodec.c avcodec/wmaprodec: Check packet size 2021-09-10 16:04:26 +02:00
wmavoice.c avcodec/wmavoice: Fix rounding and integer anomalies in calc_input_response() 2020-05-19 17:17:35 +02:00
wmavoice_data.h
wmv2.c
wmv2.h
wmv2data.c
wmv2data.h
wmv2dec.c
wmv2dsp.c
wmv2dsp.h
wmv2enc.c
wnv1.c
wrapped_avframe.c
ws-snd1.c
xan.c
xbmdec.c
xbmenc.c
xface.c
xface.h
xfacedec.c
xfaceenc.c
xiph.c
xiph.h
xl.c
xma_parser.c
xpmdec.c
xsubdec.c
xsubenc.c
xvididct.c avcodec/xvididct: Fix integer overflow in idct_row() 2020-05-21 15:32:28 +02:00
xvididct.h
xvmc.h
xvmc_internal.h
xwd.h
xwddec.c
xwdenc.c
xxan.c
y41pdec.c
y41penc.c
ylc.c
yop.c
yuv4dec.c
yuv4enc.c
zerocodec.c
zmbv.c
zmbvenc.c avcodec/zmbvenc: Correct offset in buffer 2020-05-20 00:16:37 +02:00