URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=07e3223dd0213cc5f0b65e98a6e1b1500d09ece0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Oct 19 22:07:36 2023 +0200
avformat/rtsp: Use rtsp_st->stream_index Fixes: out of array access Fixes: rtpdec_h264.c149/poc Found-by: Hardik Shah of Vehere Reviewed-by: Martin Storsjö <mar...@martin.st> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e4d5ac8d7d2a08658b3db7dd821246fe6b35381f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2269a892fb424eacfcba90039caeb19eeb4b79bb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Oct 20 23:57:59 2023 +0200 avutil/tx_template: fix integer ovberflwo in fft3() Fixes: signed integer overflow: -1028966111 + -1314089526 cannot be represented in type 'int' Fixes: 63174/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5853273711837184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Lynne <d...@lynne.ee> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 907743239d83f7bbcacc466af8ace4e0f6ebc257) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e770922e3056d8196bc7a7a1f5b4025fe52dbf9b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Oct 4 23:32:17 2023 +0200 avcodec/jpeg2000dec: Check image offset Fixes: left shift of negative value -538967841 Fixes: 62447/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer-6427134337613824 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 88453250dbe952e85899d04867914ef95785530e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d2577e16221fa724fc2bff77eb89d50aabeb7694 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Oct 18 01:39:16 2023 +0200 avformat/mxfdec: Check klv offset Fixes: Assertion klv_offset >= mxf->run_in failed at libavformat/mxfdec.c:736 Fixes: 62936/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5778404366221312.fuzz Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 70f5fa63258f548cd8d067d479658bae61711ff4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7b2b48078c1ce4315c4c366af06b9374c7db1c7b Author: Sean McGovern <gsean...@gmail.com> Date: Sat Oct 14 23:27:24 2023 -0400 libavutil/ppc/cpu.c: check that AT_HWCAP2 is defined It was not introduced until glibc 2.18. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d799ad24045f2ae005c8b4c90bee5330ff15fea8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b902f5113ed8b551e6c755b9f4f79f77f079699c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 19:28:55 2023 +0200 avcodec/h2645_parse: Avoid EAGAIN EAGAIN causes an assertion failure when it is returned from the decoder Fixes: Assertion consumed != (-(11)) failed at libavcodec/decode.c:462 Fixes: assertion_IOT_instruction_decode_c_462/poc Found-by: Hardik Shah of Vehere (Dawn Treaders team) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5ddab49d48343385eadb3a435a5491c476b66ecc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1079565e8e1fe494c9c060b8be0a5e7ad183cd0e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Oct 5 18:27:28 2023 +0200 avcodec/xvididct: Make c* unsigned to avoid undefined overflows Fixes: signed integer overflow: 1496950099 + 728014168 cannot be represented in type 'int' Fixes: 62667/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MJPEGB_fuzzer-6511785170305024 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f7e5537dc1ff2f45a6e4c98091f15e60c3647cfc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6d25672afaf205858b11f1704305f7c64abc3818 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Oct 5 14:17:05 2023 +0200 avcodec/bonk: Fix undefined overflow in predictor_calc_error() Fixes: signed integer overflow: -2146469728 - 1488954 cannot be represented in type 'int' Fixes: 62490/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BONK_fuzzer-5612782399389696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cd66606a8f9124a75a126d579c18f263b874d3a5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=85b9a8f296274467648b5ca1088c676f3a060aa7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Oct 9 00:07:32 2023 +0200 avformat/tmv: Check video chunk size This check matches the audio chunk check Fixes: Timeout Fixes: 62681/clusterfuzz-testcase-minimized-ffmpeg_dem_TMV_fuzzer-5299107876700160 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b79fc7059600b28dce392fc20e5c8bd554c2fc95) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=55769812f7e71794976c7ffac7f39085aeb5bef4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 00:07:20 2023 +0200 avcodec/h264_parser: saturate dts a bit Fixes: signed integer overflow: 0 - -9223372036854775808 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-6112289464123392 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7fedbc7606614cc1a6224effa8df762b6883bdc4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8af32643c05570dbf77f92dc6e60f32badc981c1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 00:00:28 2023 +0200 avformat/asfdec_f: Saturate presentation time in marker Fixes: signed integer overflow: -9223372036315799520 - 3873890816 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5009302746431488 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cedb4736f568a9cc693f81b1f7c33ea2499715ab) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2d87c74e608a6f8d8b6046c99a7d1e4128a43468 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 23:55:20 2023 +0200 avformat/xwma: sanity check bits_per_coded_sample Fixes: signed integer overflow: 65312 * 524296 cannot be represented in type 'int' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_XWMA_fuzzer-6595971445555200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fe6ce28d118d6030984e1ee5c2d92e98514fe3d1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ba90a8dff259cbde24f19815b122fe1faf2b7e2b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 23:44:25 2023 +0200 avformat/matroskadec: Check prebuffered_ns for overflow Fixes: signed integer overflow: 9223372036630775808 + 1000000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fuzzer-5406131992526848 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2d6df3719dd4f75b40cdf25a02f3f075b76ed045) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=df8936ef12cc67cb93ced8090af3e1656557526a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:33:34 2023 +0200 avformat/wavdec: Check left avio_tell for overflow Fixes: signed integer overflow: 155 + 9223372036854775655 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_W64_fuzzer-5364032278495232 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 929ddef3f40102d6a84cfa17ed7c7ffebcf8236e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6ddb165b4bec32032d60c0f4ac63172569566b97 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:28:55 2023 +0200 avformat/tta: Better totalframes check Fixes: signed integer overflow: 4 * 740491135 cannot be represented in type 'int' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_TTA_fuzzer-6298893367508992 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5f0d00464a50994de0993e045e09313ca8d7cc8f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4270205a4b49b8e5119c5c4d67f7f59475d95fc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:14:28 2023 +0200 avformat/rpl: Check for number_of_chunks overflow Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int32_t' (aka 'int') Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_RPL_fuzzer-6086131095830528 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b3c973acbecb879d4949fecdadd2fdfc08dea42b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=034a3e6f9ccddfdfc6b2ddeef18b972a235a5e52 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:04:11 2023 +0200 avformat/mov: compute absolute dts difference without overflow in mov_find_next_sample() Fixes: signed integer overflow: -9223372036854775808 - 9222726413022000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5959420033761280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3508b496e195440d0af0203e2822937b8c6f5598) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d67bb81161fbe7527975aa19291cf2b340b0412a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:59:06 2023 +0200 avformat/jacosubdec: Check timeres Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 51f0ab8b127282415822959ccad7db95ad749b5d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=de458e5d3fa4d79859db3da21d50092a34f28cfc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:48:17 2023 +0200 avformat/jacosubdec: avoid signed integer overflows in get_shift() Fixes: signed integer overflow: 22014562800 * 934633746 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_JACOSUB_fuzzer-5189603246866432 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 32447b149fb61eb48436eddbbb1adf91b70ec5e4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=be3ca673f45e90390d77ffaf3c2f36843388e378 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:34:29 2023 +0200 avformat/jacosubdec: Factorize code in get_shift() a bit Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6490b9aed63c06f20bbc46e0bc801e612d07e81e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5d6524445cc6bb51d619c38772407ba5df3010c0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 00:30:39 2023 +0200 avformat/sbgdec: Check for negative duration or un-representable end pts Fixes: signed integer overflow: 9230955872951340 - -9223372036854775808 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_SBG_fuzzer-6330481893572608 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Nicolas George <geo...@nsup.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9b00b5734d9868971cb6e6cda0f3b8eeed93be9e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f630725cb0d4a23f279acf1fd75782ddc65de7ca Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Sep 17 00:21:52 2023 +0200 avcodec/escape124: Do not return random numbers Fixes: out of array access Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-6035022714634240 Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-6422176201572352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fe6d46490f5ea9155fe0601b6246960ae17317fc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=303afea1a8b16cada926a5680c8bf1615d4d2f53 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 16 23:36:29 2023 +0200 avcodec/apedec: Fix an integer overflow in predictor_update_filter() Fixes: signed integer overflow: -2147483506 + -801380 cannot be represented in type 'int' Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-6578985923117056 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 515c0247a3062ca4639e457c81d2f58c504e9e8f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8a0e48001ff399545a332a064dd47763562ef6b0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 16 22:58:07 2023 +0200 tools/target_dec_fuzzer: Adjust wmapro threshold Fixes: Timeout Fixes: 62266/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMAPRO_fuzzer-5125460729921536 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bb9f8a1cb7d7b5e3742fe2212c144efea258f3d0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3b822405cd350c49cf90911ab4b3408950a3958a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 21 00:29:24 2023 +0200 avcodec/wavarc: Allocate AV_INPUT_BUFFER_PADDING_SIZE Fixes: overread Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-5963163952349184 Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-6048030137909248 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dbcf285abdc7921b065491862be048bdd0c9289d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0ae86db6ba600bf0533ab29969e5d6b32eeaac95 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 21 00:13:27 2023 +0200 avcodec/wavarc: Fix integer overflwo in do_stereo() Fixes: signed integer overflow: 148676193 - -2006512262 cannot be represented in type 'int' Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-5963163952349184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f3c986200d7f4ec934c480b09aa8a13554da032d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=47333e3e3015a61e636a5513e8650d5a99de2f3b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Sep 15 00:32:19 2023 +0200 avutil/tx_template: Fix some signed integer overflows in DECL_FFT5() Fixes: signed integer overflow: -1364715454 + -1468954671 cannot be represented in type 'int' Fixes: 62093/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5538774254485504 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c42a89309ae5e5bf856a6a28f9294562a8b89c48) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f16d72dfeb5340224d1a7ff97ad1ae98aca91bf8 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 14 01:21:29 2023 +0200 avcodec/aacdec_template: Better avoidance of signed integer overflow in imdct_and_windowing_eld() Fixes: 62171/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5644657180409856 Fixes: signed integer overflow: 2 * 1079352273 cannot be represented in type 'int' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7f4fed52165cbc1b2fcc9663fc053516ae77c760) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5fd5e844748687440c9e8448207785dd9a99d543 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 14 00:08:46 2023 +0200 tools/target_dec_fuzzer: Adjust threshold for MVHA Fixes: Timeout Fixes: 62120/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVHA_fuzzer-5647877768347648 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6359b2ce038ef596f1e81b4c1238512d6d5df920) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8aae506dd245a1cef33695494c4e28ffa7d40bfd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Sep 20 01:32:56 2023 +0200 avformat/avs: Check if return code is representable Fixes: leak Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_dem_AVS_fuzzer-6738814988320768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 52d666edec73c834c60811e330f86a7cf1d916da) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f23f0ba87c76df24f935b5c6d294a65927d6e9a6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Sep 19 01:24:37 2023 +0200 avcodec/flacdec: Fix integer overflow in "33bit" DECODER_SUBFRAME_FIXED_WIDE() Fixes: signed integer overflow: 4 * 2307917133220067266 cannot be represented in type 'long' Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLAC_fuzzer-6307690022043648 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 112a077d06585e5cf5efcff76c15a1760b0bb455) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8c5b391c639278f7962ea071fa359f8b622d0543 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Sep 19 01:20:47 2023 +0200 avcodec/flacdec: Fix overflow in "33bit" decorrelate Fixes: signed integer overflow: 538976288 - -9223372036854775808 cannot be represented in type 'long' Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLAC_fuzzer-6275845531238400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 35e6960a6be42ec27de6a3f070071ab7e2e3f27d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=342121cd3550738a7eced187f8a91afc48c63f42 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 1 00:50:15 2023 +0200 avcodec/lcldec: Make PNG filter addressing match the code afterwards Also update check accordingly Fixes: tickets/10237/mszh_306_306_yuv422_nocompress.avi Fixes: tickets/10237/mszh_306_306_yuv411_nocompress.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d11b8bd0c610c212d2a28767f94dc07a8ec473cf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c8319b4e00ca4ca6b7f49878c960c0c5d283664f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 22 20:08:52 2022 +0200 avformat/westwood_vqa: Check chunk size the type is also changed to int as it is interpreted as int in av_get_packet() Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int' Fixes: 50993/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-6593408795279360 Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-4613908817903616 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Anton Khirnov <an...@khirnov.net> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5c0df3da0b7288a43a3b783117064cfcbc8037a5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=33c009130c690ad679639692ffb25b73f03ff23f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:18:14 2023 +0200 avformat/sbgdec: Check for period overflow Fixes: signed integer overflow: 4481246996173000000 - -4778576820000000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_SBG_fuzzer-5063670588899328 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Nicolas George <geo...@nsup.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a9137110eda130ba07a2a43bdedff2421efbb7a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=afb5d20e23d2629e48fff2b3b0908a6058fa5c02 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:11:34 2023 +0200 avformat/concatdec: Check in/outpoint for overflow Fixes: signed integer overflow: 91542414454000000 - -9154241494546000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_CONCAT_fuzzer-4739147999084544 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Nicolas George <geo...@nsup.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dedc78b4b5bdab869f3038798334639d617d2309) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=53bcb6eaf582b78589cb2aedae4fc389e6d712f0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 21 20:09:12 2023 +0200 avformat/mov: Check avif_info Fixes: leak Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-6674082962997248 Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-6674082962997248 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9a3bbf89bd9b32b9849d34920f7afcbd861d4e6b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3a177811f4643040bf226564620f1f23222a6e38 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Sep 22 21:13:44 2023 +0200 avformat/mxfdec: Remove this_partition Suggested-by: Tomas Härdin <g...@haerdin.se> Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5130394286817280 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 442d9412d21590c7a816118032c92070e00a1cc1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ea918615a1c8fda9cfa4d544ba430d8db563495d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Sep 8 00:13:11 2023 +0200 avcodec/xvididct: Fix integer overflow in idct_row() Fixes: signed integer overflow: 1871429831 + 343006811 cannot be represented in type 'int' Fixes: 61784/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AIC_fuzzer-5372151001120768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b12444fe72173ab52b6479708cfd12cb889ca300) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4917892af7d33fa93a7ef5d4ca9d1c80175abd16 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 7 02:13:13 2023 +0200 avcodec/celp_math: avoid overflow in shift by making gain unsigned we have 1 bit more available alternatively we can clip twice as in the g729 reference Fixes: left shift of 23404 by 17 places cannot be represented in type 'int' Fixes: 61728/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ACELP_KELVIN_fuzzer-6280412547383296 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6580a7b2b27973947118482235a2eb1214d968a2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=882052e2938532aa3d3cc88b6d398e5940fcf3d9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Jul 26 22:33:40 2023 +0200 tools/target_dec_fuzzer: Adjust threshold for rtv1 Fixes: 60499/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RTV1_fuzzer-5020295866744832 Fixes: Timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9ee87245c5e6eae017430726cce9b4c20d468c2d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=eb32d51302d8da13853c9656696482c4f7854e32 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 15 02:05:45 2023 +0200 avformat/hls: reduce default max reload to 3 The 1000 did result in the appearance of a never ending reload loop The RFC mandates that "If the client reloads a Playlist file and finds that it has not changed, then it MUST wait for a period of one-half the target duration before retrying." and if it has changed "the client MUST wait for at least the target duration before attempting to reload the Playlist file again" Trying to reload 3 times seems a better default than 1000 given these durations Issue found by: Сергей Колесников Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5f810435c2a6d985fabd9e6c025e0da0c99c39a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d30d9c817a1c33d513d55c34bd75ea480c7c6cc2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 23:58:31 2023 +0200 avformat/format: Stop reading data at EOF during probing Issue found by: Сергей Колесников Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 80f6e0378beae69d31f24b036a1365405dea61d1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=38bc713c6d9236a9c319dbba0c36db0fe38948cc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 3 02:00:51 2023 +0200 avcodec/bonk: Fix integer overflow in predictor_calc_error() Fixes: signed integer overflow: -2147483300 - 12285 cannot be represented in type 'int' Fixes: 59462/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BONK_fuzzer-5714298807386112 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2b25a5168e562676b299ef0f5a086e046833de4c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ebc4d0a310f0a8b752b4c19a6e11bba2548fb43b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 10 01:11:48 2023 +0200 avcodec/jpeg2000dec: jpeg2000 has its own lowres option jpeg2000 overrides the global lowres variable with a lowres field called reduction_factor ffmpeg -lowres X causes the reduction_factor to be set ffplay -lowres X causes both lowres and the reduction_factor to be set ossfuss sets only lowres only the ffmpeg variant works. This patch tries to make the other 2 work. Alternative we could just error out if things are inconsistent. More complex restructuring should be limited to the master branch to keep this reasonably easy to backport Fixes: out of array access Fixes: 59672/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEG2000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c012d1f2bb8735f2b17ce88cd8181d2ffc989b02) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=47bd650d686ebf075713aef508a3f00feb0b1c9a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 00:13:43 2023 +0200 avcodec/huffyuvdec: avoid undefined behavior with get_vlc2() failure Fixes: left shift of negative value -1 Fixes: 59889/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HUFFYUV_fuzzer-5472742275940352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 90647a9249aee8c0ef6c0bced3558ada9643f5b6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=58c8e6170392bb3117dbb07ed29938dcde4bc288 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Sep 10 16:27:02 2023 +0200 avcodec/cscd: Fix "CamStudio Lossless Codec 1.0" gzip files Fixes: tickets/10241/cscd_1_0_306_306_gzip.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ab7d38f970674e6765b5e1adb911c1763b9ce806) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e1a05fdb582465e5437b9496613a0533977c11d1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Mar 8 22:11:59 2023 +0100 avcodec/cscd: Check for CamStudio Lossless Codec 1.0 behavior in end check of LZO files Alternatively the check could be simply made more tolerant Fixes: Ticket10227 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d2a0464fc2dd6f79571a66e6c7a8168323168e46) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=24be4134fd29bea4ce22199959b0b05ef9eade2b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 19:01:37 2023 +0200 avcodec/mpeg4videodec: consider lowres in dest_pcm[] Fixes: out of array access Fixes: 59999/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-5767982157266944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d48476183fad230c8e457b2f314f8e136b973c4e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=45d113af3a2fe83bfbad685aab0a67a224a31841 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 19:45:18 2023 +0200 avcodec/hevcdec: Fix undefined memcpy() There is likely a better way to fix this, this is mainly to show the problem Fixes: MC within same frame resulting in overlapping memcpy() Fixes: 60189/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4992746590175232 Fixes: 61753/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5022150806077440 Fixes: 58062/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4717458841010176 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 94bd1796ff45b396021cd260e9b037bc61815933) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2631c7c7ce4e15af2da2011de061cf6582f963f3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 1 23:35:10 2023 +0200 avcodec/mpeg4videodec: more unsigned in amv computation Fixes: signed integer overflow: -2147483648 + -1048576 cannot be represented in type 'int' Fixes: 59365/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-642654923954585 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0adaa90d89114dc86dbc5704ce31ded5b6750d13) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3fa5039012d32a96f136fb116a0f825ea134cded Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Aug 5 14:35:55 2023 +0200 avcodec/tta: fix signed overflow in decorrelate Fixes: signed integer overflow: 2079654542 - -139267653 cannot be represented in type 'int' Fixes: 60811/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TTA_fuzzer-5915858409750528 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 283bf5c35bc5ac92e061f27c3a680318175a1600) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b7a55ae0a816f42ac4de56aad48af503104b0c73 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Aug 26 01:59:26 2023 +0200 avcodec/apedec: remove unused variable Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7995e175b844198eb73954f0befda5703a7b7a3d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e4dbe25f3b637d747632ea4d4d920daef602e274 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Aug 25 16:59:15 2023 +0200 avcodec/apedec: Fix 48khz 24bit below insane level Fixes: Ticket9816 Fixes: vlc.ape and APE_48K_24bit_2CH_02_01.ape Regression since: ed0001482a74b60f3d5bc5cd7e304c9d65b2fcd5. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 80ad0e2198df4e2961928d8304da58df6db77ec4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e0cd8ac12644bd36323b6a624d88dce2fa086738 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Aug 25 00:24:21 2023 +0200 avcodec/apedec: Fix CRC for 24bps and bigendian Fixes CRC for vlc.ape and APE_48K_24bit_2CH_02_01.ape Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 696e161919f18f13be0f82f41715b445d31022d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=60e46128f720892834804b20f469136f86d6094f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Aug 7 02:33:24 2023 +0200 avcodec/wavarc: Check that nb_samples is not negative It is currently probably not possible for it to be negative as the needed 2Mb input buf size is not achievable. But it is more robust to check for it too. If it would become negative than code like s->samples[0][n] = s->samples[0][s->nb_samples + n]; would crash Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5f5a1ccd04acc74e31e1e4fe7e297b3f589425b3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d57b29ff2b8159a62f0ace8c30d11503326b6da3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Aug 7 00:19:09 2023 +0200 avcodec/wavarc: Check shift Fixes: shift exponent 1285 is too large for 32-bit type 'int' Fixes: 60870/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-5332050340347904 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1a81a40de265df6c5e4e6bb924c5f3c219904f41) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ab1981b445f3ec3255416f901637ba36decf45ce Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Aug 7 00:02:21 2023 +0200 avcodec/xvididct: Fix integer overflow in idct_row() Fixes: signed integer overflow: -1403461578 + -843974775 cannot be represented in type 'int' Fixes: 60868/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG1VIDEO_fuzzer-4599793035378688 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0ce322a51eae87fd3a0eb96f2280175554ef30c5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1e26c4923ac78f3954b979adec76d45a46e123aa Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 01:46:20 2023 +0200 avformat/avr: Check sample rate Fixes: 54979/clusterfuzz-testcase-minimized-ffmpeg_dem_AVR_fuzzer-6681035461230592 Fixes: Timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Andreas Rheinhardt <andreas.rheinha...@outlook.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 32556fa62b1d0615f621fd8f71bdfe3b72e43896) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b07211eb9ec3b15b7a4ecf8e669d284743dfa931 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 23:30:14 2023 +0200 avformat/imf_cpl: Replace NULL content_title_utf8 by "" Suggested-by: Pierre-Anthony Lemieux <p...@sandflow.com> Reviewed-by: Pierre-Anthony Lemieux <p...@sandflow.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ac3e6b74bdd6959ce4411e78161b2f06d0926c43) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ba5e12b2ed22699f2935a81a2f150e98c227c59a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 20:03:01 2023 +0200 avformat/imf_cpl: xmlNodeListGetString() can return NULL Fixes: NULL pointer dereference Fixes: 60166/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5998301577871360 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Pierre-Anthony Lemieux <p...@sandflow.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 509ce40f188734ec74078ebdd8d71f80116d9eaf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=13438a6900fa5ed95df8884e6550914f0f399d7b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 24 18:21:28 2023 +0200 avcodec/aacdec_template: Fix undefined signed interger operations Fixed: signed integer overflow: -2 * -1085502286 cannot be represented in type 'int' Fixed: 57986/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5123651145170944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 87f76d3bee083d33707ed2cb459507186e32fc12) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cea882ef99c90387a49a122d617f18784ac6f795 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 24 18:16:05 2023 +0200 avcodec/wavarc: Fix k limit The implementation does not support k=32 Fixes: shift exponent 32 is too large for 32-bit type 'unsigned int' Fixes: 57976/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-5911925807775744 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 40cec0b46570bb27a5a0145ceab932d0318e6e52) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8bce6ca5823a361c8e0ec2baab2997652255701f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 30 01:24:20 2023 +0200 avcodec/rka: Fix integer overflow in decode_filter() Fixes: signed integer overflow: 2147443649 + 65535 cannot be represented in type 'int' Fixes: 60054/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-5095674572832768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f9b29451e422e672595e95eefd03879a4398a1f6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=15e1093f9a523995549bac162faff528c9910502 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 9 16:01:35 2023 +0200 avformat/rka: bps < 8 is invalid Fixes: division by zero Fixes: 57828/clusterfuzz-testcase-minimized-ffmpeg_dem_RKA_fuzzer-6571818338353152 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 167b4f56f187edafd94fa2e706897ac3bb450511) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1bee64983e5ac48c4415f450f9667aadfd5a4878 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 5 15:56:58 2023 +0200 avcodec/pcm: allow Changing parameters SDR needs this for switching between mono and stereo stations Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 94d44dbe212b3ecb67256c4edfc3d7c3c3ac4472) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=161b2b6ed60a0dcecfd1eaa166430a17edea7d66 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 30 02:59:11 2023 +0200 avutil/tx_template: extend to 2M Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8f48a62151f4a299574959df9a48813303ef4edb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=68604c9dee9cb129abe9a7113c75eeffee60f708 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 10 01:09:52 2023 +0200 avcodec/jpeg2000dec: Check for reduction factor and image offset This combination is not working (it writes out of array) Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9b6d191a66a8d9b3064efecc79a9f44fb14d7875) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=992fc9d75a4bc420e6c7cdfd571808b675ff1052 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 01:26:33 2023 +0200 avutil/softfloat: Basic documentation for av_sincos_sf() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4aa1a42a91438b7107d2d77db1fc5ca95c27740c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5531eacf9ec441f6531e9460f7d35078f69aab2a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 00:59:40 2023 +0200 avutil/softfloat: fix av_sincos_sf() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d84677abd8ffb8ca8ad94eced6d9e03928f35d79) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=410d733a8bbf1da77cb7100bb1cb32781446fea9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 00:20:40 2023 +0200 tools/target_dec_fuzzer: Adjust threshold for speex Fixes: Timeout Fixes: 59731/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SPEEX_fuzzer-4809436670328832 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fe167bae969cf2deac2f5c480fc5c5ac5f8e6267) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=09e888a5b4ddb4944552b6be36d5d075318ece32 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 18 21:00:03 2023 +0200 avcodec/utils: fix 2 integer overflows in get_audio_frame_duration() Fixes: signed integer overflow: 256 * 668003712 cannot be represented in type 'int' Fixes: 59819/clusterfuzz-testcase-minimized-ffmpeg_dem_MATROSKA_fuzzer-4674636538052608 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a4bf559683a999c8faa408fdd8f29bd28a6a47ea) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=aef59048e646d715cf610440c16639c0764018bd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 25 23:40:18 2023 +0200 avcodec/hevcdec: Avoid null pointer dereferences in MC Fixes: runtime error: pointer index expression with base 0x000000000000 overflowed to 0xfffffffffffffff8 Fixes: 58440/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5956015530311680 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a0f4d4e65093a4cb627f05d09b19c922e88cfac1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4c906c58671a9063b3797c1dbe72a02c1eea424b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 25 23:40:16 2023 +0200 avcodec/takdsp: Fix integer overflows Fixes: avcodec/takdsp.c:44:23: runtime error: signed integer overflow: -2097158 - 2147012608 cannot be represented in type 'int' Fixes: 58417/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-5268919664640000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ff8a496d41422b694f66684ada97dcf49e167782) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=52dd7a9f7afb0544dbb90d272e038b98c4a09ce0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 8 15:47:37 2023 +0200 avcodec/mpegvideo_dec: consider interlaced lowres 4:2:0 chroma in edge emulation check better Fixes: out of array read Fixes: 59673/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG1VIDEO_fuzzer-5194311374077952 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d7d3f1af2ab23cae1b2fc36afafc9872bc633808) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=85cb7abb4c4aa486eab62b7f046192926e873607 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 8 15:05:50 2023 +0200 avcodec/rka: use unsigned for buf0 additions Fixes: signed integer overflow: -38912000 + -2109276160 cannot be represented in type 'int' Fixes: 59670/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-4987563245699072 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e736238b35a1e0f69fe8e5a9a7359ba24883c488) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=819e9068afdbdabfb4ba1df7326c38032fb8584a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 25 22:58:53 2023 +0200 avcodec/rka: Avoid undefined left shift Fixes: left shift of 34136248 by 6 places cannot be represented in type 'int' Fixes: 58429/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-5692211592560640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1ee303f1e1677fd997da05ae1cc6aca064f96bdb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a66733a8c9bbf9335993e20dad5b257b23977b80 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 3 21:44:37 2023 +0200 avcodec: Ignoring errors is only possible before the input end Fixes: out of array read Fixes: Ticket 10308 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fead656a7bf523d448fe8bd39c1f2ea36be98fb9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=79af71223d38c4ec6b71c3820f25c6f267b0fc32 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 8 10:26:35 2023 -0400 avformat/jpegxl_probe: Forward error codes Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 09621fd7d93a12974e9664b2aebb8237e5c46f03) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=63270289a03cff70d16810c0910f99819b359d53 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 8 10:26:34 2023 -0400 avformat/jpegxl_probe: check length instead of blindly reading Enable the checked bitreader to avoid overread. Also add a few checks in loops and between blocks so we exit instead of continued execution. Alternatively we could add manual checks so that no overread can happen. This would be slightly faster but a bit more work and a bit more fragile Fixes: Out of array accesses Fixes: 59640/clusterfuzz-testcase-minimized-ffmpeg_dem_JPEGXL_ANIM_fuzzer-6584117345779712 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1ec4553e355039ce69abf8e49389fa43f1f55fc5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c598778d379ba7c992877e884616880a6239a91e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 8 10:26:33 2023 -0400 avformat/jpegxl_probe: Remove intermediate macro obfuscation around get_bits*() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 25c937c0e03895866d9f5bcc659ad6afc53e20f9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=33ee9ab941cea1cf30b94fbf76cdd78dcdde7fa2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 4 19:59:40 2023 +0200 avcodec/noise_bsf: Check for wrapped frames Wrapped frames contain pointers so they need specific code to noise them, the generic code would lead to segfaults Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0889ebc577749ee6abc620bc9030d2002487935f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=339463bd9065f3da56a02ab26d2e4e5f4fb91ded Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 2 01:46:31 2023 +0200 avformat/oggparsetheora: clip duration within 64bit Fixes: signed integer overflow: 9079256848778919936 - -288230376151711746 cannot be represented in type 'long' Fixes: 58248/clusterfuzz-testcase-minimized-ffmpeg_dem_OGG_fuzzer-6326851353313280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b1c3d81e71f78e4b3b2c2901ac4649cb74aec272) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=426117bb7eece8c486f01230a30c267af9a9ee16 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 2 01:09:58 2023 +0200 avcodec/rka: avoid undefined multiply in cmode==0 Fixes: signed integer overflow: -182838 * 32768 cannot be represented in type 'int' Fixes: 58179/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-5333265899978752 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b168aeb734069b09ab174666169f9c5dd631fb1b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=011511791a3eba1001bb9acefa026cf70eb53a62 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Mar 4 23:58:08 2023 +0100 avcodec/rka: use 64bit for srate_pad computation Fixes: left shift of 538976288 by 13 places cannot be represented in type 'int' Fixes: 56148/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-6257370708967424 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cbe5e480aa1679c1dfc20d433e310acd7449af07) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=79edf58ba8d9f806274a12c4495785bad919b221 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Feb 18 21:50:13 2023 +0100 avcodec/bonk: Avoid undefined integer overflow in predictor_calc_error() Fixes: signed integer overflow: -159584 * 5105950 cannot be represented in type 'int' Fixes: 55165/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BONK_fuzzer-5796023719297024 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 43e5e2e42354fafc608830e3c8c46dacd22a851b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=86682ab20f39162fcdea6c20e815af563200bd61 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 5 00:51:38 2023 +0100 avformat/wavdec: Check that smv block fits in available space Fixes: OOM Fixes: 56271/clusterfuzz-testcase-minimized-ffmpeg_dem_WAV_fuzzer-5290810045497344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a76efafdb9be966ae3ad52b32370dc644dd582bf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=24b6f44f96b4e55e95972867340a39ed7fdab379 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 13:52:32 2023 +0200 avcodec/adpcm: Fix integer overflow in intermediate in ADPCM_XMD Fixes: runtime error: signed integer overflow: 2140143616 + 254665816 cannot be represented in type 'int' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ADPCM_XMD_fuzzer-6690181676924928 As a sideeffect this simplifies the equation, the high bits are different after this but only the low 16bits are stored and used in later steps. Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <one...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 722ff740550769035ecc7e41fabb6801d6d7b992) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=838cab9a0747ad7f7a14c38e77b16e7ce1f11ae9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:45:41 2023 +0200 avcodec/dpcm: fix undefined interger overflow in wady Fixes: signed integer overflow: -2147375930 + -133875 cannot be represented in type 'int' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WADY_DPCM_fuzzer-6703727013920768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8f0e200a12c25e288acd31eff0a5000bc74aa34e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=40e81d5a8b725a7135a4312269fa345051d74445 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:38:39 2023 +0200 avcodec/tiff: add a zero DNG_LINEARIZATION_TABLE check Fixes: index 4294967295 out of bounds for type 'uint16_t [65536]' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-5950405086674944 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-6666195176914944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6e98cf0280cd693ef82c4444fe15bc7aef8771b3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4e3f8fd46a0f23b418266389a8d8b038e83c8707 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:34:16 2023 +0200 avcodec/tak: Check remaining bits in ff_tak_decode_frame_header() Fixes: out of array access Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-6682195323650048 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 19b66b89da4b4ff086dc1fc79bbf540e82bdbcb4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0ec70368b064606ede41f86f6aa1f298dff23e8c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:19:10 2023 +0200 avcodec/sonic: Fix two undefined integer overflows Fixes: signed integer overflow: 2147483372 - -148624 cannot be represented in type 'int' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SONIC_fuzzer-5477177805373440 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SONIC_fuzzer-6681622236233728 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2632e9049391d820bde64d1fc138567a66464fcd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fbc224b1265c856c17e606df71aff9f08e9178d1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 16:56:40 2023 +0200 avcodec/utils: the IFF_ILBM implementation assumes that there are a multiple of 16 allocated Fixes: out of array access Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5124452659888128 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-6362836707442688 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 34056a94eab5f8fbc7e0b8510f7c9851931f23b7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fc7f2fdacfb8d3d66ddac92040543581a9576d85 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 15:24:16 2023 +0200 avcodec/flacdec: Fix signed integre overflow Fixes: signed integer overflow: 3011809745540902265 + 6323452730883571725 cannot be represented in type 'long' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLAC_fuzzer-6687553022722048 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fd7352660be0211aabb11dc6d586836515772f81) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=89950105b91ffd3ecff9ed97fa2262036153c49c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 15:18:45 2023 +0200 avcodec/exr: Cleanup befor return Fixes: leaks Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_EXR_fuzzer-6703454090559488 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 885ff3b8798791eb2b0f53360a2ab4b1f9c5f6dc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9000efe97fa4e18c7f69f8a8ca8465fef631863e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 15:06:59 2023 +0200 avcodec/pngdec: Do not pass AVFrame into global header decode The global header should not contain a frame, and decoding it would result in leaks Fixes: memleak Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APNG_fuzzer-6603443149340672 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d31d4f32283f765c79d6e127d31ee2c37a0acef7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=344f333c6cc8f98f41a3e3e0d273c6342d698d05 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 15:05:47 2023 +0200 avcodec/pngdec: remove AVFrame argument from decode_iccp_chunk() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7117b380a7eb9419625aa8835edec2c3c17e638b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8c8a08e1bfa7e0ac418194b916a39d6639d521f3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:51:02 2023 +0200 avcodec/wavarc: Check order before using it to write the list Fixes: out of array access Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-6247711015043072 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-6487578428964864 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-6651587794960384 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-6686265824378880 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e2e34c7731372b65b41ddb11334ccaeba4a76f13) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=63aa0cfd0ec72590d0aafc44bd77cb7629e359bf Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Nov 5 19:33:33 2022 +0100 avcodec/bonk: decode multiple passes in intlist_read() at once This makes the worst case much faster Fixes: Timeout Fixes: 51363/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BONK_fuzzer-5660734784143360 Fixes: 57957/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BONK_fuzzer-5874095467397120 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 957106a24d2960e1d0359a1774b547c1292b4704) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1d7dd08199adc4ce4c3f0613ea924961de60f3e8 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Feb 12 22:49:01 2023 +0100 avcodec/vorbisdec: Check codebook float values to be finite Fixes: Timeout Fixes: 55116/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VORBIS_fuzzer-4572159970508800 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cadd7e7a7589b5c118ad1648a09c629a6b65a3be) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6500c15977fe1723d63381d44bcecaefa708a255 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jan 24 22:48:46 2023 +0100 avcodec/g2meet: Replace fake allocation avoidance for framebuf framebuf is only allocated when the new width/height are larger than the old but nothing sets the old so its always allocated. Use av_fast_mallocz() instead. Fixes: Timeout Fixes: 55094/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_G2M_fuzzer-5116909932904448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 38adbc6eebd7f2f34ecf1b0b18019e88bad9d9f4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=81ab8469888701d3a8ad1dd1f13a9044443a101f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jan 22 00:51:05 2023 +0100 avutil/tx_priv: Use unsigned in BF() to avoid signed overflows Fixes: signed integer overflow: 100183269 - -2132769113 cannot be represented in type 'int' Fixes: 55063/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5039294027005952 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit eddf7e2a3e9459fd26a76fb2984a6c9b994e2d89) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=19db9ffb3b9f3c57a7bb9ddbafe39380dad11dcb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:17 2023 +0100 avcodec/lcldec: More space for rgb24 Fixes: Ticket 10239 Fixes: zlib_306_306_rgb24.av Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e2c3aa8e2b800c5b860315277b3ea426b8b23393) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=735f6be31181662b8cb76b095c89b6dce7a82cc9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:15 2023 +0100 avcodec/lcldec: Support 4:1:1 and 4:2:2 with odd width Fixes: Ticket10240 Fixes: zlib_306_306_yuv422.avi Fixes: zlib_306_306_yuv411.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0cf1ac905d2d97355a389c3baa4e132824b29f21) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a06bf3dae88b66ad7f161fc8baf1ef6363c22b41 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:14 2023 +0100 libavcodec/lcldec: width and height should not be unsigned Computations like col < width - 3 will not work with unsigned width=1 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3eb4e28c26c3bce608214f392ab1fe6ee28ec1df) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=953e26755bbb759714b4d53b59428f56733fae6d Author: Pierre-Anthony Lemieux <p...@palemieux.com> Date: Wed Apr 26 08:09:40 2023 -0700 avformat/imf: fix invalid resource handling (cherry picked from commit 23d968d55a6e00dfc46799cfd0eb2ed02379037d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0291b86a94d39cdfe6af5ff5965d18ad5f6777f7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 9 15:18:55 2023 +0200 avcodec/escape124: Check that blocks are allocated before use Fixes: NULL pointer dereference Fixes: 57819/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-5077280228769792 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5366ae12b9ba60404822f6b39b41f6c0d98a7c8a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d84e889785a3ae655fadb4361f66add4a2edc78f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 9 14:48:37 2023 +0200 avcodec/rka: Fix signed integer overflow in decode_filter() Fixes: signed integer overflow: -631553 * 32768 cannot be represented in type 'int' Fixes: 57814/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RKA_fuzzer-4614661233573888 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0ecda4fbce8e77152e9b450c4efa8c1b81c8982e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a85d0bc84bc5ffae1607f830e442f9c82d1d08d9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 9 13:18:42 2023 +0200 avcodec/huffyuvdec: Fix undefined behavior with shift Fixes: left shift of negative value -1 Fixes: 57554/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFVHUFF_fuzzer-4853603839115264 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 27e7857bd1127974ffe1512293abee83b1035194) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=67919ba6826c5af0ea161f00bc7d206870f8c0d5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:57:56 2023 +0200 avcodec/j2kenc: Replace RGB24 special case by generic test This fixes RGB48 with libavcodec as decoder Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ad4d647591dbd953a5cf3a32a779ee5e42465bbb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1ed34709ffb08833cebfdf8ee408d668534ecbdb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:50:26 2023 +0200 avcodec/j2kenc: Replace BGR48 / GRAY16 test by test for number of bits BGR48 is not supported and this was probably meant to be RGB48 so this fixes RGB48 a bit Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7fb70d27a26bb4072edf68857636fa4343ee24a3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4cec33869ede3df366b213a7832054311c1dbb61 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:40:31 2023 +0200 avcodec/j2kenc: simplify pixel format setup Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 644d15716d5cfb28e4ea0c0ada163f70807e9a5c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9a086ad5b1bf23f4ef0b3654929307f33b4db4d3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:21:28 2023 +0200 avcodec/j2kenc: Fix funky bpno errors on decoding Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 816676085e3d32f27d4001d9b95590046c487eb6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=407e6cde75e15afaaf1d7abff516bf2ba56bd2bd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:18:05 2023 +0200 avcodec/j2kenc: remove misleading pred value This field is only checked for being 0 or not and not zero means 5/3 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0adb375377f369b69b24d86bbfe674b7693ccf3c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fa35ce082ab405ffc55862741dde35dc6804ddc7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 30 18:15:36 2023 +0200 avcodec/j2kenc: fix 5/3 DWT identifer Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f6955b6df4b599ff5604e82987b96957414f8dd5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=efab690c163419741ba50ca67104e8a9fd5bd8da Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 26 22:35:50 2023 +0200 avcodec/vp3: Check width to avoid assertion failure Fixes: Assertion failure on x86-32 av_assert2(block_w * sizeof(pixel) <= FFABS(buf_linesize)); in ff_emulated_edge_mc() Fixes: 39641/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THEORA_fuzzer-5925660741206016 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dab1cd2dc0471d497f481736059b2023c5b7986a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=14da53d4c67366a9201537e293ed8e04b4b297b2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 26 21:34:03 2023 +0200 avcodec/g729postfilter: Limit shift in long term filter Fixes: shift exponent 34 is too large for 32-bit type 'int' Fixes: 57389/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ACELP_KELVIN_fuzzer-6229522659016704 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6d1d8609ac1054017ea3d11b325ed94a1205e9fd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b89cda3269d367d70adc9e41b32c0c28dbda46d2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 26 19:49:21 2023 +0200 avcodec/wavarc: Fix several integer overflows Fixes: signed integer overflow: -532410125 + -1759642300 cannot be represented in type 'int' Fixes: 57045/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WAVARC_fuzzer-637023665297817 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1942dbb8cab8417838793d9810a21673355f3a9b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=deeb0b6e94b49d5e7d440cdcb8946362df6bc7dd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Mar 24 00:48:56 2023 +0100 avcodec/tests/snowenc: Fix 2nd test (cherry picked from commit 163013c72452621624f634c706824c77222b77c5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=89c0a651ad1c62486165af3c50e37c7eb61814da Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Mar 24 00:31:40 2023 +0100 avcodec/tests/snowenc: return a failure if DWT/IDWT mismatches Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 771c266c0be29e6a1001fbd6795dd343147da1f2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ea6ec6b507796c4c0073bff5e918d3e7fc2393dc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Mar 24 00:18:06 2023 +0100 avcodec/snowenc: Fix visual weight calculation Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5b5fcadea059ab458a886261a5b7a1cc134b517a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c2a484cf5bfabdc393a2f690e61bf2f071faadad Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 23 19:07:47 2023 +0100 avcodec/tests/snowenc: unbreak DWT tests the IDWT data type mismatched current code Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8b3351bbead47f7f306621b45c8f2391b6bd23d2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1957bd11109c5c970732698ecaa414e46f7c2506 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Nov 27 23:34:33 2022 +0100 avcodec/mpeg12dec: Check input size Fixes: Timeout Fixes: 53599/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IPU_fuzzer-4950102511058944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7c130d6911f5b09bfc648f6ae678c4c0749f61bb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=438ea0eaf33bfde417fce6e641ea90e21791566e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 5 22:37:44 2023 +0100 avcodec/escape124: Fix some return codes Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 98df605f7a8e80471a113f7beb0983c90aa84525) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f081f94601a24d370a7d5c708c5422d407c2a53a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 5 22:25:04 2023 +0100 avcodec/escape124: fix signdness of end of input check Fixes: Timeout Fixes: 56561/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-5560363635834880 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 87ad0a5dd7d12c91badc215c3b5d6745fa7acb02) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=318c29592519a2bce19d2dbc67a3c41ef9872675 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Feb 28 20:24:26 2023 +0100 Use https for repository links Reviewed-by: Stefano Sabatini <stefa...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 011f30fc8205eff8e775d04afb98e02685cd8a7a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> _______________________________________________ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".