URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bbda1264775e1a5a7743b516b06ca817a2c3df40 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Apr 29 18:46:48 2017 +0200
libswscale/tests/swscale: Fix uninitialized variables Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7796f290653349a4126f2d448d11bb4440b9f257) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=236912f78923f335555d08403f5b55f1ca73202d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 23:24:04 2017 +0200 avcodec/ffv1dec: Fix runtime error: signed integer overflow: 1550964438 + 1550964438 cannot be represented in type 'int' Fixes: 1559/clusterfuzz-testcase-minimized-5048096079740928 Fixes: 1560/clusterfuzz-testcase-minimized-6011037813833728 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8630b2cd36c57918acfe18302fe77d1ceefbd676) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9fb677dd825618fd5e44b955e7f8d2ad7333ab3d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 23:21:24 2017 +0200 avcodec/webp: Fix signedness in prefix_code check Fixes: out of array read Fixes: 1557/clusterfuzz-testcase-minimized-6535013757616128 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8c5cd1c9d33b4b287f85d42efb1aecfaee31de6c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3ed0d94b827a67b91b727f2a58ed96e66d8ea2d7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 23:16:44 2017 +0200 avcodec/svq3: Fix runtime error: signed integer overflow: 169 * 12717677 cannot be represented in type 'int' Fixes: 1556/clusterfuzz-testcase-minimized-5027865978470400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 86b1b0d33dd7459f0d9c352c51ee2e374fd6f7fe) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6f8dab7a7bd9fdf00b2c1f1e62bd2aa159f40908 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 23:13:38 2017 +0200 avcodec/mlpdec: Check that there is enough data for headers Fixes: out of array access Fixes: 1541/clusterfuzz-testcase-minimized-6403410590957568 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e3e51f8c14d22ae11684dcfe58df355f0f9e6401) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=47da68fc8e244158c858b928b82181271dd28a60 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 19:28:01 2017 +0200 avcodec/ac3dec: Keep track of band structure It is needed in some corner cases that seem not to be forbidden Fixes: out of array index Fixes: 1538/clusterfuzz-testcase-minimized-4696904925446144 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9351a156de724edb69ba6e1f05884fe806a13a21) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=479bb1cacd25bd2b1fcaebbf716d3ffb3960453e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 18:27:27 2017 +0200 avcodec/webp: Add missing input padding Fixes: 1536/clusterfuzz-testcase-minimized-5973925404082176 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a3508cc3fe643a8adad6a82a60bece3ea3c5dc63) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b0f3f56bbcec5ce0de2ac90d62692e6996ce010e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 18:13:48 2017 +0200 avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1 Fixes: 1535/clusterfuzz-testcase-minimized-5826695535788032 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 26227d91865ddfbfe35c9ff84853cc469e1c7daf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=128b42f4d1910ff4a2f1bbf8c7e401c5f246e4dc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 12 04:12:15 2017 +0200 avcodec/aacsbr_template: Do not change bs_num_env before its checked Fixes: 1489/clusterfuzz-testcase-minimized-5075102901207040 Fixes: out of array access Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 87b08ee6d2a3b0880f0a267c5d51dc7f415e81d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d1dd90ae5425402fe176c2400351395b3165c309 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 15:39:32 2017 +0200 avcodec/scpr: Fix multiple runtime error: index 256 out of bounds for type 'unsigned int [256]' Fixes: 1519/clusterfuzz-testcase-minimized-5286680976162816 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2171dfae8c065878a2e130390eb78cf2947a5b69) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=00a9eaff97881c40d2d67379d231e47739afe2fc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 13 14:39:26 2017 +0200 avcodec/mlp: Fix multiple runtime error: left shift of negative value -1 Fixes: 1512/clusterfuzz-testcase-minimized-4713846423945216 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 74dc728a2c2cc353da20cdc09b8cdfbbe14b7be8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=906f1f66a8208388262b4a3a1484b32c0510d9eb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 02:38:33 2017 +0200 avcodec/xpmdec: Fix multiple pointer/memory issues Most of these were found through code review in response to fixing 1466/clusterfuzz-testcase-minimized-5961584419536896 There is thus no testcase for most of this. The initial issue was Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cb243972b121b1ae6b60a78ff55a0506c69f3879) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f0ee408624c1c65a1e4f77d15fb31bfb0e478877 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 14:50:40 2017 +0200 avcodec/vp8dsp: vp7_luma_dc_wht_c: Fix multiple runtime error: signed integer overflow: -1366381240 + -1262413604 cannot be represented in type 'int' Fixes: 1440/clusterfuzz-testcase-minimized-5785716111966208 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ccce2248bf56692fc7bd436ca2c9acca772d486a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5121f31cacf01761aa7b454d1bec2fc8e2b3697d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 13:01:36 2017 +0200 avcodec/avcodec: Limit the number of side data elements per packet Fixes: 1293/clusterfuzz-testcase-minimized-6054752074858496 See: [FFmpeg-devel] [PATCH] avcodec/avcodec: Limit the number of side data elements per packet Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d5711cb89121268e8d78ebe8563a68e67a236cbb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3526d2501746c3c9679a06fdd9671f3b58ce4515 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 12 13:15:33 2017 +0200 avcodec/texturedsp: Fix runtime error: left shift of 255 by 24 places cannot be represented in type 'int' Fixes: 1505/clusterfuzz-testcase-minimized-4561688818876416 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f225003d17364cd38fd28f268ae2b29abd8e5024) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=34ae6101156f66b514981b34f680e6bbfc3bde4e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 12 13:13:46 2017 +0200 avcodec/g723_1dec: Fix runtime error: left shift of negative value -1 Fixes: 1504/clusterfuzz-testcase-minimized-6249212138225664 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c4c0245686bc2fcc545644101c7b328fed71f268) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ee92ea890388cac50db2a4334c702c2f47bdca5b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 12 13:05:46 2017 +0200 avcodec/wmv2dsp: Fix runtime error: signed integer overflow: 181 * -17047030 cannot be represented in type 'int' Fixes: 1503/clusterfuzz-testcase-minimized-5369271855087616 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit df640dbbc949d0f4deefaf43e86b8bd50ae997cc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=256b9442df2cd76e48f5086f77c85e9c0c3e4209 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 23:24:23 2017 +0200 avcodec/diracdec: Fix Assertion frame->buf[0] failed at libavcodec/decode.c:610 Fixes: 1487/clusterfuzz-testcase-minimized-6288036495097856 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6899e6e56065d9365963e02690dc9e2ce7866050) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=971fe06074207a7b3263993a13567c0047e36b4a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 19:10:16 2017 +0200 avcodec/msmpeg4dec: Check for cbpy VLC errors Fixes: runtime error: left shift of negative value -1 Fixes: 1480/clusterfuzz-testcase-minimized-5188321007370240 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 15e892aad12b23e9b5686cf66ca6fa739c734ead) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5d0e4c877f3b06d96e8f96d7373006cb1ed00153 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 18:39:33 2017 +0200 avcodec/cllc: Check num_bits Fixes: runtime error: shift exponent -2 is negative Fixes: 1479/clusterfuzz-testcase-minimized-6638493360979968 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2bfd0a97587d26c0c39413a6291ccc66e4a928d0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=383fdec3b2568681c5ed905bcd6d3628308c8e4c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 18:35:24 2017 +0200 avcodec/cllc: Factor VLC_BITS/DEPTH out, do not use repeated literal numbers Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e717fa1f0a66825fb10fec7debad768f311ee240) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=79f6a1b96ee20eec311e8c44c2bcd5f8fb49f55f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 15:29:31 2017 +0200 avcodec/scpr: Check y in first line loop in decompress_i() Fixes: out of array access Fixes: 1478/clusterfuzz-testcase-minimized-5285486908145664 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7ac5067146613997bb38442cb022d7f41321a706) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9b754ccc53730bc214e15f7613423e4b45059c25 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 15:18:50 2017 +0200 avcodec/dvbsubdec: Check entry_id Fixes: randomly writing over the array end Fixes: 1473/clusterfuzz-testcase-minimized-5768907824562176 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8a69f2602fea04b7ebae2db16f2581e8ff5ee0cd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=363b46cdbf5dfa64cdfdd69544b711233c45d2d2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 15:13:53 2017 +0200 avcodec/aacdec_fixed: Fix multiple shift exponent 33 is too large for 32-bit type 'int' Fixes: 1471/clusterfuzz-testcase-minimized-6376460543590400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3a0ff78168f80f5b2c5c5544325aca4023bc67a4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=35f293fe898d2744a644c5e17d5b4bdd92858910 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 11 00:49:31 2017 +0200 avcodec/mpeg12dec: Fixes runtime error: division by zero Fixes: 1464/clusterfuzz-testcase-minimized-4925445571084288 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c0ece1f4addf8ac31df95775a2d36be2a55fc759) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4a974cb59501d9da0c33c41f93eb596dc6cdc3fb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 23:48:30 2017 +0200 avcodec/pixlet: Fix runtime error: signed integer overflow: 436207616 * -5160230545260541 cannot be represented in type 'long' Fixes: 1462/clusterfuzz-testcase-minimized-6558894463647744 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 60765cc42e3eb4a1193ef352a89946113a6e5802) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=924a2dd57a04792fae1dce1626fafb223fb97201 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 18:37:49 2017 +0200 avcodec/webp: Always set pix_fmt Fixes: out of array access Fixes: 1434/clusterfuzz-testcase-minimized-6314998085189632 Fixes: 1435/clusterfuzz-testcase-minimized-6483783723253760 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Reviewed-by: "Ronald S. Bultje" <rsbul...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e9c3c8df45dc6f0c5f88e2f14c43a3a1f1418306 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 21:54:31 2017 +0200 avfilter/vf_uspp: Fix currently unused input frame dimensions Found-by: Nicolas Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 942036e97c8b149ce2f3ec6e7cbc990df8713d0c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e6997adee98eff9f7ac69ed5e5a7fcc5a9660253 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 19:09:31 2017 +0200 avcodec/truemotion1: Fix multiple runtime error: left shift of negative value -1 Fixes: 1446/clusterfuzz-testcase-minimized-5577409124368384 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit db5fae32294763677caa4c1417dcba704c7e764e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3af036360d1cc3aff7e91d44d8defd0406fa287c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 19:02:05 2017 +0200 avcodec/eatqi: Fix runtime error: signed integer overflow: 4466147 * 1075 cannot be represented in type 'int' Fixes: 1443/clusterfuzz-testcase-minimized-4826998612426752 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a8de60ba2740185c53cabbee6c00ed67a0d530e2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3459fd598ea80b8dc1f6ca711fdf6a1c8ce2b246 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 18:51:58 2017 +0200 avcodec/dss_sp: Fix runtime error: signed integer overflow: 2147481189 + 4096 cannot be represented in type 'int' Fixes: 1441/clusterfuzz-testcase-minimized-6223152357048320 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6ea428789371fa0601e9ebb5b7f2216d4e73e831) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f58b45f0ac565a9df4f623eedc5e286995b8a241 Author: 李赞 <li...@ruc.edu.cn> Date: Wed May 10 14:55:34 2017 +0200 avformat/wavdec: Check chunk_size Fixes integer overflow and out of array access Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3d232196372f309a75ed074c4cef30578eec1782) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5d2ddaa139b5c6fc95866f08b09a085aed9cd51e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 14:41:23 2017 +0200 avcodec/cavs: Check updated MV Fixes: runtime error: signed integer overflow: 251 + 2147483647 cannot be represented in type 'int' Fixes: 1438/clusterfuzz-testcase-minimized-4917542646710272 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5871adc90f8c1037535563e33ebeaf032bb4d5d6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f66eaded0157b8649a6a07340ff7f85efb1b7d68 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 14:33:27 2017 +0200 avcodec/y41pdec: Fix width in input buffer size check Fixes: out of array read Fixes: 1437/clusterfuzz-testcase-minimized-4569970002362368 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3d8d3729475c7dce52d8fb9ffb280fd2ea62e1a2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=452629fb23de7f0dfd4f0cbf3b7ab5f284c0f735 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 01:26:39 2017 +0200 avcodec/svq3: Fix multiple runtime error: signed integer overflow: -237341 * 24552 cannot be represented in type 'int' Fixes: 1429/clusterfuzz-testcase-minimized-5959951610544128 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ae6fd1790f48c457a8cedb445dcac73f8f7b7698) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=311b29134e5b4e2e38d36f46d212d850a605c1b9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 01:18:36 2017 +0200 avcodec/texturedsp: Fix runtime error: left shift of 218 by 24 places cannot be represented in type 'int' Fixes: 1428/clusterfuzz-testcase-minimized-5263281793007616 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2bd8eb05d21b582d627a93852b59cb3cfc305dae) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=be3a7857ed6c040910a748a91fafbf54e8119f92 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 00:56:45 2017 +0200 avcodec/lagarith: Check scale_factor Fixes: 1425/clusterfuzz-testcase-minimized-6295712339853312 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ed3c9b5b0dd5abb545c48e930e1c32c187b0776a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=95c80c7d27a171784d390581af1af30f7261437b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 00:50:05 2017 +0200 avcodec/lagarith: Fix runtime error: left shift of negative value -1 Fixes: 1424/clusterfuzz-testcase-minimized-6088327159611392 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ddb2dd7edbccc5596d8e3c039133be8444cb1d02) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=497de399c9c6d607b760b291d41f2cdc0a75d7f2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 00:44:37 2017 +0200 avcodec/takdec: Fix multiple runtime error: left shift of negative value -1 Fixes: 1423/clusterfuzz-testcase-minimized-5063889899225088 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c5d2fa2fdff08e77bba0c9a31b91826a807c551c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8850dc3771adf00745f36c5d41ecf34127115e63 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 9 00:02:22 2017 +0200 avcodec/indeo2: Check for invalid VLCs Fixes: timeout Fixes: 1416/clusterfuzz-testcase-minimized-5536862435278848 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 159fb8ff7e4038edf13e91d3c08bc7b8abc369b9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d9adb13ff631d030089c7e664c2899517b528bd2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 20:24:48 2017 +0200 avcodec/g723_1dec: Fix several integer related cases of undefined behaviour Fixes: 1412/clusterfuzz-testcase-minimized-6561308772139008 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d3088e0fd8749788818cb5df92abaa3b12e409e1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9e541146479bb8c4efb18b9b9518b7518ef918c9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 01:42:53 2017 +0200 avcodec/htmlsubtitles: Check for string truncation and return error Fixes out of array access Fixes: 1354/clusterfuzz-testcase-minimized-5520132195483648 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f4ae3cce64bd46b1d539bdeac39753f83015f114) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=49aa0e9cc7b38413dc891934ee12c0c51eaba2fd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 15:46:55 2017 +0200 avcodec/bmvvideo: Fix runtime error: left shift of 137 by 24 places cannot be represented in type 'int' Fixes: 1411/clusterfuzz-testcase-minimized-5776085184675840 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 29692023b2f1e0580a4065f4c9b62bafd89ab337) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=27a30e4166da5ad82d1e89de9ed11be954e8c415 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 15:40:30 2017 +0200 avcodec/dss_sp: Fix multiple runtime error: signed integer overflow: -15699 * -164039 cannot be represented in type 'int' Fixed: 1409/clusterfuzz-testcase-minimized-5237365020819456 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ea59ef0c031b6b92f051f60c19fdd0a716769834) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=abeb7838ca83eaca61a64c7d0fc044250ac72fa5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 15:17:31 2017 +0200 avcodec/dvbsubdec: check region dimensions Fixes: 1408/clusterfuzz-testcase-minimized-6529985844084736 Fixes: integer overflow Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0075d9eced22839fa4f7a6eaa02155803ccae3e6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6ec9c902ee4d45fc71fd4ebdef7abeeb060f43cb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 12:07:56 2017 +0200 avcodec/vp8dsp: Fixes: runtime error: signed integer overflow: 1330143360 - -1023040530 cannot be represented in type 'int' Fixes: 1406/clusterfuzz-testcase-minimized-5064865125236736 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8824b7370a9fb72f9c699c3751a5ceb56e0cc41d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0d17ecffa56c5cb1b99bc5c10a3b7c49e48db917 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 12:04:09 2017 +0200 avcodec/hqxdsp: Fix multiple runtime error: signed integer overflow: 248220 * 21407 cannot be represented in type 'int' in idct_col() Fixes: 1405/clusterfuzz-testcase-minimized-5011491835084800 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5d5118f81bd51b9c33500616b3c637123e8e4691) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=88893627a1c646461f1e35b87c1d6b804bc63b91 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 11:55:27 2017 +0200 avcodec/cavsdec: Check sym_factor Fixes: runtime error: signed integer overflow: 25984 * 130560 cannot be represented in type 'int' Fixes: 1404/clusterfuzz-testcase-minimized-5000441286885376 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 279420b5a63b3f254e4932a4afb91759fb50186a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a483e46b794539d21b1ec0f3e521f681a54a86d2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 11:46:03 2017 +0200 avcodec/cdxl: Check format for BGR24 Fixes: out of array access Fixes: 1427/clusterfuzz-testcase-minimized-5020737339392000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1e42736b95065c69a7481d0cf55247024f54b660) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=97eb92b27681be07b3c04f2f61c18668e05dd902 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 8 02:28:07 2017 +0200 avcodec/ffv1dec: Fix copying planes of paletted formats Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3a4d387195a5eb3c1700071af8d8150e4f7f6600) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e397902d47ebe685b4f79d3837eba8be9beaaa4b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 23:07:42 2017 +0200 avcodec/wmv2dsp: Fix runtime error: signed integer overflow: 181 * -12156865 cannot be represented in type 'int' Fixes: 1401/clusterfuzz-testcase-minimized-6526248148795392 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8b1f66cf5c2e4d29ae06cdf3f12cdd3d808006bd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=edb8d29ca5fef83ab7a89f24fe23411c0f4f8f0d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 18:50:49 2017 +0200 avcodec/xwddec: Check bpp more completely Fixes out of array access Fixes: 1399/clusterfuzz-testcase-minimized-4866094172995584 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 441026fcb13ac23aa10edc312bdacb6445a0ad06) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bf4b8b1677949c54604723eebb1a10f8f9ff91d5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 10 02:46:25 2017 +0200 avcodec/aacdec_template: Do not decode 2nd PCE if it will lead to failure Fixes: out of array read Fixes: 1072/clusterfuzz-testcase-6456688074817536 Fixes: 1398/clusterfuzz-testcase-minimized-4576913622302720 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a5e0dbf530d447f36099aed575b34e9258c5d75a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=298de0a183bf97571ef948c56ecc7488d314350b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 15:44:51 2017 +0200 avcodec/s302m: Fix left shift of 8 by 28 places cannot be represented in type 'int' Fixes: 1395/clusterfuzz-testcase-minimized-5330939741732864 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a38e9797cb4123d13ba871d166a737786ba04a9b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8795bf9e5db01a499ecf340dabf8816cde33e274 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 15:42:17 2017 +0200 avcodec/eamad: Fix runtime error: signed integer overflow: 49674 * 49858 cannot be represented in type 'int' Fixes: 1394/clusterfuzz-testcase-minimized-6493376885030912 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0ac1c87194a67e6104a3d241a4dd1ca0808784bd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=77af726871205223b89bab040817d0f79cebe55e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 15:40:07 2017 +0200 avcodec/g726: Fix runtime error: left shift of negative value -2 Fixes: 1393/clusterfuzz-testcase-minimized-5948366791901184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c04aa148824f4fb7f4b70830ad3ca7a6cba8ab79) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9970fa10c0a58f7113050a1b87c5e0d01f80a638 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 14:53:31 2017 +0200 avcodec/magicyuv: Check len to be supported Fixes: shift exponent -1 is negative Fixes: 1390/clusterfuzz-testcase-minimized-5452757630713856 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2162b862eba5aadb59c0cf7cc304c67f4a5fb946) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ffa39cd5740890f7a6084ae0cf6ff1b43cd41a70 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 14:16:33 2017 +0200 avcodec/ra144: Fix runtime error: left shift of negative value -798 Fixes: 1388/clusterfuzz-testcase-minimized-6680800936329216 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 78bf446852a7e5e8aa52c7ca9889632e167b665f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3f7a9eef516538db825497da198bd41d05e8cbe6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 14:12:04 2017 +0200 avcodec/mss34dsp: Fix multiple signed integer overflow Fixes: 1387/clusterfuzz-testcase-minimized-4802757766676480 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 464c4b86ee43b7912e6f23fd3e5ba40381b4c371) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=eec20b665a9e86d3d6824f0a01fb49378243829c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 03:49:06 2017 +0200 avcodec/targa_y216dec: Fix width type Fixes out of array access Fixes: 1376/clusterfuzz-testcase-minimized-6361794975105024 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3e56db892600c2fbe34782c6140f1ee832a2c344) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4f0fecf9fa83a0d7724458e6d133d3ef4d5d3bc1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 03:27:17 2017 +0200 avcodec/texturedsp: Fix multiple runtime error: left shift of 255 by 24 places cannot be represented in type 'int' Fixes: 1386/clusterfuzz-testcase-minimized-5323086394032128 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e92fb2bea1800b987ebc3cbeef9d48cfe4bcd191) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fca86d3e28423f948b1d68ceb899163559ebca14 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 03:23:09 2017 +0200 avcodec/ivi_dsp: Fix multiple left shift of negative value -2 Fixes: 1385/clusterfuzz-testcase-minimized-5552882663292928 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9e88cc94e58e9e4d1293f9f56c973510e30495fd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bd739bce1cd374402e418d8e7a40c159a3313670 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 03:16:53 2017 +0200 avcodec/svq3: Fix multiple runtime error: signed integer overflow: 44161 * 61694 cannot be represented in type 'int' Fixes: 1382/clusterfuzz-testcase-minimized-6013445293998080 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 669419939c1d36be35196859dc73ec9a194157ad) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f8eea96d64c9e20d16ff43e269f872188e4ff11e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 7 02:46:54 2017 +0200 avcodec/msmpeg4dec: Correct table depth Fixes undefined shift Fixes: 1381/clusterfuzz-testcase-minimized-5513944540119040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1121d9270783b284a70af317d8785eac7df1b72f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c108bba1ae3e14570e82ea425da178775c9d6d30 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 22:31:23 2017 +0200 avcodec/dds: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes: 1380/clusterfuzz-testcase-minimized-650122545122508 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8a8335de030aa6cb6356bb16c7d3aefc5a80e362) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=973a66108b8e01ceb85cf2d6922a5cbb47f6a657 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 22:24:52 2017 +0200 avcodec/cdxl: Check format parameter Fixes out of array access Fixes: 1378/clusterfuzz-testcase-minimized-5715088008806400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e1b60aad77c27ed5d4dfc11e5e6a05a38c70489d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cbc5796fc3f446dbc6da66d22de1ae2f8e9c0527 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 21:31:49 2017 +0200 avutil/softfloat: Fix overflow in av_div_sf() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 277e397eb5964999bd76909f52d4bd3350289c22) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=66b7e165db8a26b67558d1861c22a4f1f8fdb113 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 19:11:46 2017 +0200 avcodec/hq_hqa: Fix runtime error: left shift of negative value -207 Fixes: 1375/clusterfuzz-testcase-minimized-6070134701555712 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1283c4244767bd19918f355c31d702a94ee0cc1b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=99bedf74acda5d62b2955e0f09b76d24723ab502 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 19:07:59 2017 +0200 avcodec/mss3: Change types in rac_get_model_sym() to match the types they are initialized from Fixes integer overflow Fixes: 1372/clusterfuzz-testcase-minimized-5712192982745088 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2ef0f392711445e173a56b2c073dedb021ae3783) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2ff5e3f54e9543065bfb2a2a56f1696a7f885b52 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 18:28:09 2017 +0200 avcodec/shorten: Check k in get_uint() Fixes: undefined shift Fixes: 1371/clusterfuzz-testcase-minimized-5770822591447040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7b6a51f59c467ab9f4b73122dc269206fb517425) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=28c618355c9f4e61d3f30ad831eadb74a7e3fd1d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 16:43:52 2017 +0200 avcodec/webp: Fix null pointer dereference Fixes: 1369/clusterfuzz-testcase-minimized-5048908029886464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9bf4523e40148fdd27064ab570952bd8c4d1016e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=88a3e4c34e2af96c4d31b56090f8bfe95de2d68a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 16:38:22 2017 +0200 avcodec/dfa: Fix signed integer overflow: -2147483648 - 1 cannot be represented in type 'int' Fixes: 1368/clusterfuzz-testcase-minimized-4507293276176384 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 12936a4585bc293c0f88327d6840f49e8e744b62) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e2462c882813abd904e45ac9a4fb0d58db99111a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 16:32:56 2017 +0200 avcodec/g723_1: Fix multiple runtime error: left shift of negative value Fixes: 1367/clusterfuzz-testcase-minimized-571496882346393 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4ace2d22192f3995911ec926940125dcb29d606a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=139d88127347b86df7d12cf5db52ea446a9444e5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 15:17:29 2017 +0200 avcodec/mimic: Fix runtime error: left shift of negative value -1 Fixes: 1365/clusterfuzz-testcase-minimized-5624158450876416 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fc2c420b82939a8f30838a6aa08bfd936099d3ce) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6f590bf05fe5694639fd2f0bb6840c2a74c8f31d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 12:17:01 2017 +0200 avcodec/clearvideo: Fix multiple runtime error: left shift of negative value -1024 Fixes: 1360/clusterfuzz-testcase-minimized-5606472043986944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c0ffcb34c7e94817be934a1ee4a0b4c054723549) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cab8d31804ed1218a7801f65b892a6c0440cf7e3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 12:10:59 2017 +0200 avcodec/fic: Fix multiple left shift of negative value -15 Fixes: 1356/clusterfuzz-testcase-minimized-6008489086287872 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b20c71409b24460983ba5d9afa0716714f9e0f7d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3585986a005af3c400b3b7e09123a71824a31bc8 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 12:05:17 2017 +0200 avcodec/mlpdec: Fix runtime error: left shift of negative value -22 Fixes: 1355/clusterfuzz-testcase-minimized-6662205472768000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c535436cbeeab89be64e9f3fd652bc736f2f3245) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=645b36ce647ce9bd91ca7ff63c0787af4edd192d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 01:08:54 2017 +0200 avcodec/snowdec: Check qbias Fixes: signed integer overflow: -1094995529 * 131 cannot be represented in type 'int' Fixes: 1353/clusterfuzz-testcase-minimized-5208180449607680 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 523205ce1ed9415183c162998c68f573479e78fe) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=67835afd7955abe6e57a80690e2362d3aa156b06 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 6 00:13:05 2017 +0200 avutil/softfloat: Fix multiple runtime error: left shift of negative value -8 Fixes: 1352/clusterfuzz-testcase-minimized-5757565017260032 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 35f3df0d76e28969fa77f2b865e2e40b3ba69722) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=955b97704f12d5bf1fca254c705a3f4744e872d7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 23:00:59 2017 +0200 avcodec/aacsbr_template: Do not leave bs_num_env invalid Fixes out of array read Fixes: 1349/clusterfuzz-testcase-minimized-5370707196248064 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a8ad83b793e883b8c6d114f81073a4e40c0308a3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=28b6588b4816fa04a09838b32e37413b9d7b39df Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 22:17:59 2017 +0200 avcodec/mdec: Fix signed integer overflow: 28835400 * 83 cannot be represented in type 'int' Fixes: 1346/clusterfuzz-testcase-minimized-5776732600664064 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a234b5ade3ca6cde805b92b8b6ecacf693460a8c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7617b90f07053c806c3257a8985af5c236fd7b0b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 20:42:11 2017 +0200 avcodec/dfa: Fix off by 1 error Fixes out of array access Fixes: 1345/clusterfuzz-testcase-minimized-6062963045695488 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f52fbf4f3ed02a7d872d8a102006f29b4421f360) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2adf20b3da90b56c6f4e0576342cf7d4f2b30fdd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 19:28:56 2017 +0200 avcodec/nellymoser: Fix multiple left shift of negative value -8591 Fixes: 1342/clusterfuzz-testcase-minimized-5490842129137664 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0953736b7e97f6e121a0587a95434bf1857a27da) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b80d4f58d8983dc0d3da0037be3dcbbe892d2e2c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 19:26:02 2017 +0200 avcodec/cdxl: Fix signed integer overflow: 14243456 * 164 cannot be represented in type 'int' Fixes: 1341/clusterfuzz-testcase-minimized-5441502618583040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1002932a3b16d35c46a08455f76462909eebb5aa) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=85bf84c96c5c17e4a991f26366dc814c29f68863 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 18:14:03 2017 +0200 avcodec/g722: Fix multiple runtime error: left shift of negative value -1 Fixes: 1340/clusterfuzz-testcase-minimized-4669892148068352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f55df62998681c7702f008ce7c12a00b15e33f53) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5520e00a49af47f9d6cda78a579f6447cb3b1ba0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 18:07:25 2017 +0200 avcodec/dss_sp: Fix multiple left shift of negative value -466 Fixes: 1339/clusterfuzz-testcase-minimized-4614671485108224 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 38152d9368beb080b4acd6cd9e5ccc89b3f733bf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=671530ccb4382c0c2dcb914b7d3bfb1643058c41 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 18:01:25 2017 +0200 avcodec/wnv1: Fix runtime error: left shift of negative value -1 Fixes: 1338/clusterfuzz-testcase-minimized-6485546354343936 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9fac508ca46f93450ec232299dfd15ac70b6f326) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1e8212798c823c312d9c433c9cf00a633fcd79a2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 12:48:12 2017 +0200 avcodec/tiertexseqv: set the fixed dimenasions, do not depend on the demuxer doing so Fixes: out of array access Fixes: 1348/clusterfuzz-testcase-minimized-6195673642827776 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ce551a3925a1cf9c7824e26a246b99b6773bda4b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=484ce1af757a50b2f99b6d504303b47f71e4d163 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 27 15:10:25 2017 +0200 avcodec/mjpegdec: Fix runtime error: signed integer overflow: -24543 * 2031616 cannot be represented in type 'int' Fixes: 943/clusterfuzz-testcase-5114865297391616 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a78ae465fda902565ed041d93403e04490b4be0d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=175a569f5bfae35509474f6e85e86932974c6bac Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 03:24:40 2017 +0200 avcodec/cavsdec: Fix undefined behavior from integer overflow Fixes: 1335/clusterfuzz-testcase-minimized-5566961566089216 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a0e5f7f363555d2befafb1c9e1579dbe0a2fbca7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dd3a5f04b91dfaa3d22946b4ab9156dda7155899 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 5 02:51:13 2017 +0200 avcodec/dvdsubdec: Fix runtime error: left shift of 242 by 24 places cannot be represented in type 'int' Fixes: 1080/clusterfuzz-testcase-5353236754071552 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ce7098b8f2b59c62b5abdb3d74819db75cf67698) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a5bcb36874eb174bfee4e141f2f50343e447a17a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 3 05:21:51 2017 +0200 libavcodec/mpeg4videodec: Convert sprite_offset to 64bit This avoids intermediates from overflowing (the final values are checked) Fixes: runtime error: signed integer overflow: -167712 + -2147352576 cannot be represented in type 'int' Fixes: 1298/clusterfuzz-testcase-minimized-5955580877340672 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c1c3a14073b33f790075f2884ea5c64451a6c876) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=142c65ba9ca65674f0227c70e82f3c9a2a0d16fe Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 4 18:40:46 2017 +0200 avcodec/pngdec: Use ff_set_dimensions() Fixes OOM Fixes: 1314/clusterfuzz-testcase-minimized-4621997222920192 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a0296fc056f0d86943c697c505a181744b07dd45) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dfda395b2f0151568d5080c8e14a0df9edfa04aa Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 4 15:24:46 2017 +0200 avcodec/msvideo1: Check buffer size before re-getting the frame Fixes timeout Fixes: 1306/clusterfuzz-testcase-minimized-6152296217968640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cabfed6895fcc679cd6a6244a12d800e0f3f2d20) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=927ff67ab44b08fa0f57ac73faa2b438cbf740ce Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Apr 22 21:59:29 2017 +0200 avcodec/h264_cavlc: Fix undefined behavior on qscale overflow Fixes: 1214/clusterfuzz-testcase-minimized-6130606599569408 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fc8cff96ed45dfdb91ed03e9942845f28be0e770) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=44eabc5d5d9ed479cad1df0acc8f172093e44364 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 7 22:27:50 2017 +0200 avcodec/dcadsp: Fix runtime error: signed integer overflow Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9244b839b788e4677019041907ff5a4378a23490) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=78fd652af442fd14156a1bdaec4741e79511b9ff Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 27 15:10:26 2017 +0200 avcodec/svq3: Reject dx/dy beyond 16bit The code does use 16bit sized arrays later so larger deltas would not work Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 48b3117844177d8442bc9fa3ede1d31ce82ae6fc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=65a9d0c66c31caa36f41860f80c33c811c75e7f1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 27 15:10:25 2017 +0200 avcodec/svq3: Increase offsets to prevent integer overflows Fixes: 1280/clusterfuzz-testcase-minimized-6102353767825408 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 382b4fc9b5f3102f59743bf9c8619b31dd8ede1b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b1fc2c5c2560913c01b91550d8fb2f21bf601a02 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 1 18:53:52 2017 +0200 avcodec/indeo2: Check remaining bits in ir2_decode_plane() Fixes: 1290/clusterfuzz-testcase-minimized-5815578902134784 Fixes: timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b29feec9829cfab2523c8d95e35bd69e689ea4af) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b6a4aeb2f6359eb33d650ae9eb2941425aa855ac Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 1 18:46:27 2017 +0200 avcodec/vp3: Check remaining bits in unpack_dct_coeffs() Decreases the time spend decoding junk. May fix: 1283/clusterfuzz-testcase-minimized-6221126759874560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2f00300b779e7b247c85db0d7daef448225105ff) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0875b2651dad34ed30e17ce12c2334ee64c7cd23 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 28 02:50:42 2017 +0200 doc/developer: Add terse documentation of assumed C implementation defined behavior Suggested-by: "Ronald S. Bultje" <rsbul...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b706ddbae3f4a11c58560b914807931556108b55) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=681ca7ecd08a28e0fd87b6d0e882eb078f0441c7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 1 17:53:11 2017 +0200 avcodec/bmp: Use ff_set_dimensions() Fixes out of memory Fixes: 1282/clusterfuzz-testcase-minimized-5400131681648640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 63b8d4146d78595638417e431ea390aaf01f560f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=51f24cb3f59b78336f4f669669a82c026227359f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 27 02:27:16 2017 +0200 avcodec/mdec: Fix runtime error: left shift of negative value -127 Fixes undefined behavior Fixes: 1275/clusterfuzz-testcase-minimized-6718162017976320 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6ca82975b7a8eaf676a52738ec8e7e36732327cc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=87dcc7502dc6c893c34eb9b63b3ad22f2c146a67 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 27 02:08:54 2017 +0200 avcodec/x86/vc1dsp_init: Fix build failure with --disable-optimizations and clang compilers doing DCE at -O0 do not necessarily understand "complex" boolean expressions Build succeeds with this change, this was the only failure Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fa8fd0808f1086fc85abba5cf123faf41da49305) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3ffde707dfa3cf240bb61cf91a74c2129a0489db Author: Martin Vignali <martin.vign...@gmail.com> Date: Tue Apr 25 22:52:50 2017 +0200 libavcodec/exr : fix float to uint16 conversion for negative float value Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e46d63745215c04637e7797228bad36bce49d881) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2ff9e21f7fcecbda36669b95ff8b30b5c34bd371 Author: Derek Buitenhuis <derek.buitenh...@gmail.com> Date: Thu Apr 20 16:17:44 2017 +0100 avformat/webmdashenc: Validate the 'streams' adaptation sets parameter It should not be a value larger than the number of streams we have, or it will cause invalid reads and/or SIGSEGV. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ec07efa70012845e8642df67a4a773f510a17088) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9eb0d76e25c6a7c7ee18f8895fa73338697851f6 Author: Derek Buitenhuis <derek.buitenh...@gmail.com> Date: Thu Apr 20 13:14:42 2017 +0100 avformat/webmdashenc: Require the 'adaptation_sets' option to be set This seems to be non-optional, and if the muxer is run without it, strlen() is run on NULL, causing a segfault. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cbd3a68f3e1c2d1679370301eb5e1a32a2df64fe) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> _______________________________________________ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog