URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f0fff36b1da7bd87a24e2bde79f3fe30fb52fb2e Author: Andreas Rheinhardt <andreas.rheinha...@outlook.com> Date: Tue Feb 13 14:20:55 2024 +0100
fate/subtitles: Ignore line endings for sub-scc test Since 7bf1b9b35769b37684dd2f18a54f01d852a540c8, the test produces ordinary \n, yet this is not what the reference file used for the most time, leading to test failures. Reviewed-by: Martin Storsjö <mar...@martin.st> Signed-off-by: Andreas Rheinhardt <andreas.rheinha...@outlook.com> (cherry picked from commit 99d33cc661fbd04e8657831b818042b11f1862a2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ed81994a1477fb36e5facfa4c20532f096e50258 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 4 00:38:20 2024 +0200 avformat/mxfdec: Check index_edit_rate Fixes: Assertion b >=0 failed at libavutil/mathematics.c:62 Fixes: 67811/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5108429687422976 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ed49391961999f028e0bc55767d0eef6eeb15e49) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4bb78609a36236397aff7b0bd66b0235deef94af Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Apr 4 00:31:40 2024 +0200 swscale/utils: Fix xInc overflow Fixes: signed integer overflow: 2 * 1073741824 cannot be represented in type 'int' Fixes: 67802/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-6249515855183872 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1a9eda65d027e0167f7363e0514f71311ac5d8d1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=71da96b7728e6e17c597eefe2391c5d523356722 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 1 18:29:46 2024 +0200 avformat/mxfdec: Make edit_unit_byte_count unsigned Suggested-by: Marton Balint <c...@passwd.hu> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f30fe5e8d002e15f07eaacf720c5654097cb62df) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d04239ba7c42da553c033c34a8c7acf13bca3f43 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Mar 30 19:51:43 2024 +0100 avformat/movenc: Check that cts fits in 32bit Fixes: Assertion av_rescale_rnd(start_dts, mov->movie_timescale, track->timescale, AV_ROUND_DOWN) <= 0 failed at libavformat/movenc.c:3694 Fixes: poc2 Found-by: Wang Dawei and Zhou Geng, from Zhongguancun Laboratory Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d88c284c18bf6cd3dd24a7c86b5e496dd3037405) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cf1b7ab0ec7df60fe725fe89f7abe08f59485536 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Mar 29 03:35:18 2024 +0100 avformat/mxfdec: Check first case of offset_temp computation for overflow This is kind of ugly Fixes: signed integer overflow: 255 * 1157565362826411919 cannot be represented in type 'long' Fixes: 67313/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-6250434245230592 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d6ed6f6e8dffcf777c336869f56002da588e2de8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d5877b21a271bb41fb48aec40fff251fdab9fe86 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Feb 12 19:40:07 2024 +0100 avfilter/vf_signature: Dont crash on no frames Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3d5f03bbc8bba2929cc09b07d2731ae5d392e772) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=251b3c3892e79bd9dd93a973d16c28667fde131e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 01:00:13 2024 +0100 avformat/westwood_vqa: Fix 2g packets Fixes: signed integer overflow: 2147483424 * 2 cannot be represented in type 'int' Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-4576211411795968 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 86f73277bf014e2ce36dd2594f1e0fb8b3bd6661) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0c7d6c4eea3e98262533dba9607e39b759f8ec41 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:57:33 2024 +0100 avformat/matroskadec: Check timescale Fixes: 3.82046e+18 is outside the range of representable values of type 'unsigned int' Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fuzzer-6381436594421760 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e849eb23432e45d0a1fda3901bb84eff0ce91282) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8f5b0e124927f6a949bd89608cc6d030714ab0c8 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:50:36 2024 +0100 avformat/wavdec: satuarte next_tag_ofs, data_end Fixes: signed integer overflow: 5053074104798691550 + 5053074104259715104 cannot be represented in type 'long' Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_WAV_fuzzer-6515315309936640 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 61dca9e150b723a160d4a570885f3e5326c3d276) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=21b8fbf060e5fef52c9d6380398487486eeca2ce Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:39:49 2024 +0100 avformat/sbgdec: Check for negative duration Fixes: signed integer overflow: 9223372036854775807 - -8000000 cannot be represented in type 'long' Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_SBG_fuzzer-5133181743136768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0bed22d597b78999151e3bde0768b7fe763fc2a6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a94b67bab451b94aefec117fe5a6543fda447d17 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:36:40 2024 +0100 avformat/rpl: Use 64bit for total_audio_size and check it Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_RPL_fuzzer-4677434693517312 Fixes: signed integer overflow: 5555555555555555556 * 8 cannot be represented in type 'long long' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 878625812f164fbb733f442965235656d9eaccc8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dae887cfd0165044e75def3fe7919089a397bfdf Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:27:39 2024 +0100 avformat/timecode: use 64bit for intermediate for rounding in fps_from_frame_rate() Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-4802790784303104 Fixes: signed integer overflow: 1768972133 + 968491058 cannot be represented in type 'int' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3d8d778a68531b406455f8090d81216ef374ab75) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ae348065a89a088bfbe38539ca7ea4dae665d410 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:21:28 2024 +0100 avformat/jacosubdec: Use 64bit for abs Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_JACOSUB_fuzzer-5401294942371840 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 746203af3116288b1dd4442e46a5724ba759e831) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0889e913be4ed5bd044c55a4af7a4e1aaf8ac657 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 00:16:39 2024 +0100 avformat/concatdec: Check user_duration sum Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_CONCAT_fuzzer-6434245599690752 Fixes: signed integer overflow: 9223372026773000000 + 22337000000 cannot be represented in type 'long' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 007486058c2eb7a7518450a2ddb4fa98845887a3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2c9832bca288555bd72f32c5a29d23b3d8ed26d1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 02:52:04 2024 +0100 avcodec/truemotion1: Height not being a multiple of 4 is unsupported mb_change_bits is given space based on height >> 2, while more data is read Fixes: out of array access Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION1_fuzzer-5201925062590464.fuzz Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ebdcf9849905fdd67dcd3ab93e55e47ded35fda2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4ddc5bc4bd4d3a5bf13faacbe96bb34fe3496754 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Mar 26 01:46:02 2024 +0100 avcodec/hcadec: do not set hfr_group_count to invalid values Fixes: 62285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HCA_fuzzer-6247136417087488 Fixes: out of array write Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit addb85ea39300c36010ffb6dc0d28b2ea62b4805) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2e396e6ca8536e7f3957ff8e3181ee3f75ac8ada Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Dec 26 03:51:23 2023 +0100 avformat/concatdec: clip outpoint - inpoint overflow in get_best_effort_duration() An alternative would be to limit all time/duration fields to below 64bit Fixes: signed integer overflow: -93000000 - 9223372036839000000 cannot be represented in type 'long long' Fixes: 64546/clusterfuzz-testcase-minimized-ffmpeg_dem_CONCAT_fuzzer-5110813828186112 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dd733b2be472cea766c62984237533b239e9a93d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d633748e02ac06434093389304fdc61b5d083af6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Oct 10 19:52:33 2023 +0200 avformat/jacosubdec: clarify code add comments, rename variables and indent things differently Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e83e8d443b5b86aabf17d1cfb7fba9abf15e24fd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=37306dd6674685c3ff838a474ada1df2b9025aad Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 00:45:33 2023 +0200 avformat/cafdec: Check that data chunk end fits within 64bit Fixes: signed integer overflow: 64 + 9223372036854775803 cannot be represented in type 'long long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_CAF_fuzzer-6536881135550464 Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_CAF_fuzzer-6536881135550464 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b792e4d4c772b7b5ef8ea32be187a871000e50c2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d30403b7a738686af7f00f1a14facc62bccfb674 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 00:56:06 2023 +0200 avformat/iff: Saturate avio_tell() + 12 Fixes: signed integer overflow: 9223372036854775796 + 12 cannot be represented in type 'long long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-4898373660704768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b8e754525ca3d3fd835f7360e11f29b02b39cd62) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=42f495fbe1b32c316103f52732ce6726bc032227 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 00:51:29 2023 +0200 avformat/dxa: Adjust order of operations around block align Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_DXA_fuzzer-5730576523198464 Fixes: signed integer overflow: 2147483566 + 82 cannot be represented in type 'int' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 50d8e4f27398fd5778485a827d7a2817921f8540) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9557810a81624f222d603e0fdf3778054f8d8cc4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 00:38:17 2023 +0200 avformat/cafdec: dont seek beyond 64bit Fixes: signed integer overflow: 64 + 9223372036854775807 cannot be represented in type 'long long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_CAF_fuzzer-6418242730328064 Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_CAF_fuzzer-6418242730328064 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d973fcbcc2f944752ff10e6a76b0b2d9329937a7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=794eb4f53652a6ebe55264af0793d12f962b6a03 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Mar 20 03:51:05 2024 +0100 avformat/id3v2: read_uslt() check for the amount read Fixes: timeout Fixes: 66783/clusterfuzz-testcase-minimized-ffmpeg_dem_GENH_fuzzer-5356884892647424 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c0f4abe2aa0117a10fb651f2c1c030d4cd516081) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0c2fffba79e51379cba611d6fef7b45023970a66 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Feb 28 19:38:41 2024 +0100 avcodec/proresenc_kostya: Remove bug similarity text According to kostya, it is not based on Wassermans encoder CC: Kostya Shishkov <kostya.shish...@gmail.com> CC: Anatoliy Wasserman <anatoliy.wasser...@yandex.ru> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e0e30e07a1755c4f7829f64d35dc07e399c02c6e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8064fc02d96fe3ccff0321f79cfdf829ab97675e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Feb 27 22:27:03 2024 +0100 avcodec/vorbisdec: Check remaining data in vorbis_residue_decode_internal() Fixes: timeout Fixes: 66326/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VORBIS_fuzzer-6295291863040000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dc89cf804a811c0d25f4649a99f7fab4b5b416fa) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d2e9778f981b7ca1e7ff9759bd09556ba915ae9f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Feb 20 03:32:38 2024 +0100 libswscale/utils: Fix bayer to yuvj Fixes: out of array access. Earlier code assumes that a unscaled bayer to yuvj420 converter exists but the later code then skips yuvj420 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e9cc9e492f987ce23ce8c514258a17952dd20401) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e92cc45c145c9782d47d18f2d170ccdf49933a82 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Feb 17 01:34:25 2024 +0100 swscale/swscale: Check srcSliceH for bayer Fixes: Assertion srcSliceH > 1 failed at libswscale/swscale_unscaled.c:1359 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 64098d0cd8ab1d27f78a335ca684f00a419b2160) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=facfb2d25d5163bd1ba83e3f549259f5f2319306 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Feb 17 01:04:13 2024 +0100 swscale/utils: Allocate more dithererror Fixes: out of array read Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 18f26f8a2f8dc3b9ec3ac3ab8e03fce15cc8c88d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4f8ef0c2744e6bff590549045f217c5bd07cef95 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Feb 3 20:11:56 2024 +0100 avcodec/indeo3: Round dimensions up in allocate_frame_buffers() Fixes: Ticket6581 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3be80ce299d0073118ae42f5d99c14f912751d93) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8887a0df3ca3b3d48642b7cd134b89b86e24d1fa Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Jan 31 02:37:57 2024 +0100 avutil/rational: Document what is to be expected from av_d2q() of doubles representing rational numbers Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f465badb062c8023bc245f4878e7a6a082afc416) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dde3d172741c06a824e5d1ecde0e730e821b6ed3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Feb 5 12:40:30 2024 +0100 avfilter/signature_lookup: Do not dereference NULL pointers after malloc failure Fixes: CID 1403229 Dereference after null check Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 98ae1ad7cf16bd10a4fa79f676439edc4da7cba6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1796dc942c77def1e74974aec706acdabaa3a8c2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Feb 5 12:10:41 2024 +0100 avfilter/signature_lookup: dont leave uncleared pointers in sll_free() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6c504829514333439d15deb5717567fb4bdbbee0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0845294d7ce22ec5c0c18d43a672c00c48e6dda0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Dec 30 03:09:52 2023 +0100 avcodec/mpegvideo_enc: Use ptrdiff_t for stride Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e063c1d079086150580ed7a9ad076da122e27f76) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=294ec29bdec577d18c35c2bc1481985d5e756574 Author: Romain Beauxis <to...@rastageeks.org> Date: Mon Jan 1 09:52:50 2024 -0600 libavformat/hlsenc.c: Populate OTI using AAC profile in write_codec_attr. This patch populates the third entry for HLS codec attribute using the AAC profile. The HLS specifications[1] require this value to be the Object Type ID as referred to in table 1.3 of ISO/IEC 14496-3:2009[2]. The numerical constants in the code refer to these OTIs minus one, as documented in commit 372597e[3], confirmed by comparing the values in the code with the values in the table mentioned above. Links: 1: https://datatracker.ietf.org/doc/html/rfc6381#section-3.3 2: https://csclub.uwaterloo.ca/~ehashman/ISO14496-3-2009.pdf 3: https://github.com/FFmpeg/FFmpeg/commit/372597e5381c097455a7b73849254d56083eb056 Changes in this version: - Default value set to "mp4a.40.2" when profile is unknown for backward compatibility. Signed-off-by: Steven Liu <liuq...@kuaishou.com> (cherry picked from commit 797f0b27c175022d896e46db4ac2873e3e0a70af) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4c80dceeb9d4a53a505139c3e45a6128c326e2bd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Dec 30 03:06:39 2023 +0100 avcodec/mpegvideo_enc: Dont copy beyond the image Fixes: out of array access Fixes: tickets/10754/poc17ffmpeg Discovered by Zeng Yunxiang. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a066b8a809fa6d8b31398d41787822803f8762f2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=22ef17004c8311577126ac260c8119e696b41ff5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Dec 30 02:51:32 2023 +0100 avfilter/vf_minterpolate: Check pts before division Fixes: FPE Fixes: tickets/10758/poc20ffmpeg Discovered by Zeng Yunxiang Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 68146f06f852078866b3ef1564556e3a272920c7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=49e71a2a932153d26f048c1d8af7aad1f9d95c90 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Oct 2 16:10:22 2023 +0200 avformat/flacdec: Avoid double AVERRORS Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 029294ff541c9c85092f81dd45f18081d234f0d5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fc4095e4388baee2b82525ed1568abba9a8cd8f5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Oct 2 16:09:31 2023 +0200 avfilter/vf_vidstabdetect: Avoid double AVERRORS Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bb04235d728a2b85d6cbe14dd60184faa932c855) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=77ad8e90c14e716408429979f31128a356e34a98 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 22 22:27:08 2023 +0100 avfilter/vf_swaprect: round coordinates down Fixes: out of array access: Fixes: tickets/10745/poc12ffmpeg Found-by: Li Zeyuan and Zeng Yunxiang. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7deaca71b32c556620e05954ca2d13fbe9aacf1f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=651ed7555af317b4a8df9fa322efd3397adbe0fd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 22 22:26:22 2023 +0100 avfilter/vf_swaprect: Use height for vertical variables Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9f4c5bd7d23eb94afe85290e03748f52483102b8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=aa26e3fce76e27f3f304b7578adac35207faedbe Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 22 22:25:25 2023 +0100 avfilter/vf_swaprect: assert that rectangles are within memory Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9d1ba698d2bed1d4bed731b3be62e84d72c35476) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e6d1ed99ae415df3d8d05d7bd0c788561f97e303 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 22 21:49:48 2023 +0100 avfilter/af_alimiter: Check nextpos before use Fixes: out of array read Fixes: tickets/10744/poc11ffmpeg Found-by: Li Zeyuan and Zeng Yunxiang. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a88b06f9ee8c88f78bdd614fc25283225223e858) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5715c8ed18cdc1ec31e28d840fdf7ffe5fc37600 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Dec 23 04:03:01 2023 +0100 avfilter/af_stereowiden: Check length Fixes: out of array access Fixes: tickets/10746/poc13ffmpeg Found-by: Zeng Yunxiang Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 50f0f8c53c818f73fe2d752708e2fa9d2a2d8a07) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4d9f97ffb1b4c66ff2a37e07c0506b531c5f3c43 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 22 12:31:35 2023 +0100 avfilter/vf_weave: Fix odd height handling Fixes: out of array access Fixes: tickets/10743/poc10ffmpeg Found-by: Zeng Yunxiang and Li Zeyuan Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0ecc1f0e48930723d7a467761b66850811c23e62) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a3eb80824f078282a558591a6e7cd736f1ef7e25 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Dec 24 20:50:51 2023 +0100 avfilter/vf_gradfun: Do not overread last line The code works in steps of 2 lines and lacks support for odd height Implementing odd height support is better but for now this fixes the out of array access Fixes: out of array access Fixes: tickets/10702/poc6ffmpe Found-by: Zeng Yunxiang Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e4d2666bdc3dbd177a81bbf428654a5f2fa3787a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bb9390148cf8b21ec2efb468970a972d55404d04 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 15 22:37:49 2023 +0100 avformat/mov: do not set sign bit for chunk_offsets Fixes: signed integer overflow: 2314885530818453536 - -7412889664301817824 cannot be represented in type 'long' Fixes: 64296/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-6304027146846208 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cfc0a68d4d3192779e356a852e71b8218e7a00ab) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3044269ae846caab30b65d3bb983633bf4c573de Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Dec 15 22:23:33 2023 +0100 avcodec/jpeglsdec: Check Jpeg-LS LSE Fixes: signed integer overflow: 2147478526 + 33924 cannot be represented in type 'int' Fixes: shift exponent 32 is too large for 32-bit type 'unsigned int' Fixes: 64243/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer-5195717848989696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c72a20f01a6122e1832f73801ea5f54b188abea3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=033d431f15552a49420bfe6ec19726d72ec20723 Author: Brad Smith <b...@comstyle.com> Date: Sun Dec 24 14:33:31 2023 -0500 configure: Enable section_data_rel_ro for FreeBSD and NetBSD aarch64 / arm Fixes the build. It's a requirement when utilizing PIE. Signed-off-by: Brad Smith <b...@comstyle.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6066c430e33b4cbf5dc8ff8b3a6d149f51d20300) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=581b4c6958ddb907f865de6a0b62642f74199ae6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Dec 2 00:26:03 2023 +0100 avformat/mov: Ignore duplicate ftyp Fixes: switch_1080p_720p.mp4 Found-by: Dale Curtis <dalecur...@chromium.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4cdf2c7f768015c74078544d153f243b6d9b9ac5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=84b928f90f827d837029955c8436fdc32d4dfd1b Author: Dale Curtis <dalecur...@chromium.org> Date: Wed Nov 22 22:17:37 2023 +0000 avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow: 9223372036853334272 + 1375731456 cannot be represented in type 'int64_t' (aka 'long') Signed-off-by: Dale Curtis <dalecur...@chromium.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2182173a6933c02b0853751034bd5e0bf829b5f7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bd7a10a2a85ce7f248cd46357e2f911620057203 Author: Martin Storsjö <mar...@martin.st> Date: Mon Oct 18 12:31:38 2021 +0300 seek: Fix crashes in ff_seek_frame_binary if built with latest Clang 14 Passing an uninitialized variable as argument to a function is undefined behaviour (UB). The compiler can assume that UB does not happen. Hence, the compiler can assume that the variables are never uninitialized when passed as argument, which means that the codepaths that initializes them must be taken. In ff_seek_frame_binary, this means that the compiler can assume that the codepaths that initialize pos_min and pos_max are taken, which means that the conditions "if (sti->index_entries)" and "if (index >= 0)" can be optimized out. Current Clang git versions (upcoming Clang 14) enabled an optimization that does this, which broke the current version of this function (which intentionally left the variables uninitialized, but silencing warnings about being uninitialized). See [1] for discussion on the matter. [1] https://reviews.llvm.org/D105169#3069555 Signed-off-by: Martin Storsjö <mar...@martin.st> (cherry picked from commit ab792634197e364ca1bb194f9abe36836e42f12d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5c66a586023be20246cf112a793dc645645518ae Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Nov 8 01:44:07 2023 +0100 avcodec/4xm: Check for cfrm exhaustion Fixes: index -1 out of bounds for type 'CFrameBuffer [100]' Fixes: 63877/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5854263397711872 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bb0a684d93f793457f7bff3940a1398eb9e91703) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7272c11132d8b999dc6537b0e927e753f2678500 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Nov 8 01:37:11 2023 +0100 avformat/mov: Disallow FTYP after streams Fixes: Assertion !c->fc->nb_streams failed at libavformat/mov.c:7799 Fixes: 63875/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5479178702815232 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 19fcf4313148e86aa47d81a8d5d5e8d056f1f906) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d6b98523179c2b68f035cc6327007a84ee77d9bc Author: Frank Plowman <p...@frankplowman.com> Date: Wed Nov 8 07:55:57 2023 +0000 doc/html: fix styling issue with Texinfo 7.0 Texinfo 7.0 produces quite different HTML to Texinfo 6.8. Without this change, enumerated option flags (i.e. Possible values of x are...) render as white text on a white background with Texinfo 7.0 and are unreadable. This change removes a style for the selector `.table .table` which causes the background to turn white for these elements. As far as I can tell, it is not actually used anywhere in files generated by Texinfo 6.8. Signed-off-by: Frank Plowman <p...@frankplowman.com> (cherry picked from commit f16900bda23414caf9ec3f9dc50db7d4caf59a8b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6a9e2b4cda745ca3a4c129004a77c596a6336472 Author: Frank Plowman <p...@frankplowman.com> Date: Wed Nov 8 07:55:18 2023 +0000 doc/html: support texinfo 7.0 Resolves trac ticket #10636 (http://trac.ffmpeg.org/ticket/10636). Texinfo 7.0, released in November 2022, changed the names of various functions. Compiling docs with Texinfo 7.0 resulted in warnings and improperly formatted documentation. More old names appear to have been removed in Texinfo 7.1, released October 2023, which causes docs compilation to fail. This commit addresses the issue by adding logic to switch between the old and new function names depending on the Texinfo version. Texinfo 6.8 produces identical documentation before and after the patch. CC https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1938238.html https://bugs.gentoo.org/916104 Signed-off-by: Frank Plowman <p...@frankplowman.com> (cherry picked from commit f01fdedb69e4accb1d1555106d8f682ff1f1ddc7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2c49783d0520c36dbc1b39f88af8cc168b0970fa Author: Matthew White <mehw.is...@inventati.org> Date: Sun Nov 14 01:10:58 2021 +0000 doc/t2h.pm: fix missing TOC with texinfo 6.8 and above Since texinfo 6.8, there's no longer an INLINE_CONTENTS variable. makeinfo: warning: set_from_init_file: unknown variable INLINE_CONTENTS texinfo commit 62a6adfb33b006e187483779974bbd45f0f782b1 replaced INLINE_CONTENTS with OUTPUT_CONTENTS_LOCATION. texinfo commit 41f8ed4eb42bf6daa7df7007afd946875597452d replaced OUTPUT_CONTENTS_LOCATION with CONTENTS_OUTPUT_LOCATION. With texinfo 6.8 and above, the same as INLINE_CONTENTS=1 could be achieved by CONTENTS_OUTPUT_LOCATION=inline. https://www.gnu.org/software/texinfo/manual/texinfo/html_node/HTML-Customization-Variables.html (cherry picked from commit bfbd5954e50e407693932b3900ca77c3daee26d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=84ffcbd81005b021a309df4563d061ef6d59d016 Author: Matthew White <mehw.is...@inventati.org> Date: Sun Nov 14 00:42:27 2021 +0000 doc/t2h.pm: fix missing CSS with texinfo 6.8 and above Since texinfo commit 6a5ceab6a48a4f052baad9f3474d741428409fd7, the formatting functions, in particular begin_file, program_string and end_file, are prefixed with format_, i.e. format_begin_file, etc. This patch fixes building the documentation when texinfo 6.8, or above, is used: Unknown formatting type begin_file at /usr/bin/makeinfo line 415. Unknown formatting type program_string at /usr/bin/makeinfo line 415. Unknown formatting type end_file at /usr/bin/makeinfo line 415. (cherry picked from commit c980dd7a976635426f129417836251740e19b54b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3d7330a39f529794b9895d29beb3b49f812969d7 Author: Andreas Rheinhardt <andreas.rheinha...@outlook.com> Date: Mon Oct 9 00:16:08 2023 +0200 avformat/matroskadec: Fix declaration-after-statement warnings Reviewed-by: Michael Niedermayer <mich...@niedermayer.cc> Signed-off-by: Andreas Rheinhardt <andreas.rheinha...@outlook.com> (cherry picked from commit 37b5f4a1f6a9c7c8f3620c6b1f7f2b0bb997e5d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0077a817a1dd83790f674c3b5078b2dba106d228 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Oct 19 22:07:36 2023 +0200 avformat/rtsp: Use rtsp_st->stream_index Fixes: out of array access Fixes: rtpdec_h264.c149/poc Found-by: Hardik Shah of Vehere Reviewed-by: Martin Storsjö <mar...@martin.st> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e4d5ac8d7d2a08658b3db7dd821246fe6b35381f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=30ee2f61ae39d66f0cde711415c57881edf03865 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Oct 4 23:32:17 2023 +0200 avcodec/jpeg2000dec: Check image offset Fixes: left shift of negative value -538967841 Fixes: 62447/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer-6427134337613824 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 88453250dbe952e85899d04867914ef95785530e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=272887983c0360b19f040853887bbf7400214fa0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Oct 18 01:39:16 2023 +0200 avformat/mxfdec: Check klv offset Fixes: Assertion klv_offset >= mxf->run_in failed at libavformat/mxfdec.c:736 Fixes: 62936/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5778404366221312.fuzz Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 70f5fa63258f548cd8d067d479658bae61711ff4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=71843d817427b59298365c0fa660e84dc5d129b2 Author: Sean McGovern <gsean...@gmail.com> Date: Sat Oct 14 23:27:24 2023 -0400 libavutil/ppc/cpu.c: check that AT_HWCAP2 is defined It was not introduced until glibc 2.18. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d799ad24045f2ae005c8b4c90bee5330ff15fea8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=89745c5354b7cabb5e75ea9e1f4ad4e4f7da0421 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 19:28:55 2023 +0200 avcodec/h2645_parse: Avoid EAGAIN EAGAIN causes an assertion failure when it is returned from the decoder Fixes: Assertion consumed != (-(11)) failed at libavcodec/decode.c:462 Fixes: assertion_IOT_instruction_decode_c_462/poc Found-by: Hardik Shah of Vehere (Dawn Treaders team) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5ddab49d48343385eadb3a435a5491c476b66ecc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8b9e9ba0c2f6d52b993cf6654fc443c98707eb24 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Oct 5 18:27:28 2023 +0200 avcodec/xvididct: Make c* unsigned to avoid undefined overflows Fixes: signed integer overflow: 1496950099 + 728014168 cannot be represented in type 'int' Fixes: 62667/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MJPEGB_fuzzer-6511785170305024 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f7e5537dc1ff2f45a6e4c98091f15e60c3647cfc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1ccf76fd72538cbd40eb69f7baab98de58bab9f9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Oct 9 00:07:32 2023 +0200 avformat/tmv: Check video chunk size This check matches the audio chunk check Fixes: Timeout Fixes: 62681/clusterfuzz-testcase-minimized-ffmpeg_dem_TMV_fuzzer-5299107876700160 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b79fc7059600b28dce392fc20e5c8bd554c2fc95) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e449d52810a78d33efcec7fc664aa34671d51cd1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 00:07:20 2023 +0200 avcodec/h264_parser: saturate dts a bit Fixes: signed integer overflow: 0 - -9223372036854775808 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-6112289464123392 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7fedbc7606614cc1a6224effa8df762b6883bdc4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b73688e921ba6eb1a862882d989fcea316472931 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Oct 1 00:00:28 2023 +0200 avformat/asfdec_f: Saturate presentation time in marker Fixes: signed integer overflow: -9223372036315799520 - 3873890816 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5009302746431488 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cedb4736f568a9cc693f81b1f7c33ea2499715ab) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=330e0a691c5348f6a860d3ea43ac5fbcecfc9705 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 23:55:20 2023 +0200 avformat/xwma: sanity check bits_per_coded_sample Fixes: signed integer overflow: 65312 * 524296 cannot be represented in type 'int' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_XWMA_fuzzer-6595971445555200 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fe6ce28d118d6030984e1ee5c2d92e98514fe3d1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6d953391614d8e997114a4a99ea10873929c12ae Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 23:44:25 2023 +0200 avformat/matroskadec: Check prebuffered_ns for overflow Fixes: signed integer overflow: 9223372036630775808 + 1000000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fuzzer-5406131992526848 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2d6df3719dd4f75b40cdf25a02f3f075b76ed045) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=af121ad20d8e495f8caa5413e5f2f70e25d38d8a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:33:34 2023 +0200 avformat/wavdec: Check left avio_tell for overflow Fixes: signed integer overflow: 155 + 9223372036854775655 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_W64_fuzzer-5364032278495232 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 929ddef3f40102d6a84cfa17ed7c7ffebcf8236e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=75d9ad37595985a3642b7bab9d00bb905e58d459 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:28:55 2023 +0200 avformat/tta: Better totalframes check Fixes: signed integer overflow: 4 * 740491135 cannot be represented in type 'int' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_TTA_fuzzer-6298893367508992 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5f0d00464a50994de0993e045e09313ca8d7cc8f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5765e49ec355e1c6d364fd611dbaf08003125ae0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:14:28 2023 +0200 avformat/rpl: Check for number_of_chunks overflow Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int32_t' (aka 'int') Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_RPL_fuzzer-6086131095830528 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b3c973acbecb879d4949fecdadd2fdfc08dea42b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2f663c61258b27796dab841e90d5ba8104fe87d3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:04:11 2023 +0200 avformat/mov: compute absolute dts difference without overflow in mov_find_next_sample() Fixes: signed integer overflow: -9223372036854775808 - 9222726413022000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5959420033761280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3508b496e195440d0af0203e2822937b8c6f5598) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8316cec3b1b92a145791233a7442cdf5c6a1df70 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:59:06 2023 +0200 avformat/jacosubdec: Check timeres Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 51f0ab8b127282415822959ccad7db95ad749b5d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=18743477dabbb1ee62b5070c7d5611d8fea5d62f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:48:17 2023 +0200 avformat/jacosubdec: avoid signed integer overflows in get_shift() Fixes: signed integer overflow: 22014562800 * 934633746 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_JACOSUB_fuzzer-5189603246866432 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 32447b149fb61eb48436eddbbb1adf91b70ec5e4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=022e8c9021147ce22703566ff197288507991577 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:34:29 2023 +0200 avformat/jacosubdec: Factorize code in get_shift() a bit Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6490b9aed63c06f20bbc46e0bc801e612d07e81e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ee6d5dd13b33ece0a6745ecb73f4e2413372977d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Sep 17 00:21:52 2023 +0200 avcodec/escape124: Do not return random numbers Fixes: out of array access Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-6035022714634240 Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ESCAPE124_fuzzer-6422176201572352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fe6d46490f5ea9155fe0601b6246960ae17317fc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=454eac7b8785542744e4d97f29cabb10c20bdce3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Sep 20 01:32:56 2023 +0200 avformat/avs: Check if return code is representable Fixes: leak Fixes: 62164/clusterfuzz-testcase-minimized-ffmpeg_dem_AVS_fuzzer-6738814988320768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 52d666edec73c834c60811e330f86a7cf1d916da) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5371943592f5722e826c7769cdaebd65a61504ef Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 1 00:50:15 2023 +0200 avcodec/lcldec: Make PNG filter addressing match the code afterwards Also update check accordingly Fixes: tickets/10237/mszh_306_306_yuv422_nocompress.avi Fixes: tickets/10237/mszh_306_306_yuv411_nocompress.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d11b8bd0c610c212d2a28767f94dc07a8ec473cf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=81011356062ffe7557049f8ede9ef54b87d7e94e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 22 20:08:52 2022 +0200 avformat/westwood_vqa: Check chunk size the type is also changed to int as it is interpreted as int in av_get_packet() Fixes: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int' Fixes: 50993/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-6593408795279360 Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-4613908817903616 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Anton Khirnov <an...@khirnov.net> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5c0df3da0b7288a43a3b783117064cfcbc8037a5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9fd6d62eb59b6be10f4c55457714da651d35c664 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 21:18:14 2023 +0200 avformat/sbgdec: Check for period overflow Fixes: signed integer overflow: 4481246996173000000 - -4778576820000000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_SBG_fuzzer-5063670588899328 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Nicolas George <geo...@nsup.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a9137110eda130ba07a2a43bdedff2421efbb7a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=559b379cbd350a99356de320be2445925f4ffaf4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Sep 30 19:11:34 2023 +0200 avformat/concatdec: Check in/outpoint for overflow Fixes: signed integer overflow: 91542414454000000 - -9154241494546000000 cannot be represented in type 'long' Fixes: 51896/clusterfuzz-testcase-minimized-ffmpeg_dem_CONCAT_fuzzer-4739147999084544 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Nicolas George <geo...@nsup.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dedc78b4b5bdab869f3038798334639d617d2309) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=83c99e5ac17f8897776b4152083d53d15187f77c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Sep 8 00:13:11 2023 +0200 avcodec/xvididct: Fix integer overflow in idct_row() Fixes: signed integer overflow: 1871429831 + 343006811 cannot be represented in type 'int' Fixes: 61784/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AIC_fuzzer-5372151001120768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b12444fe72173ab52b6479708cfd12cb889ca300) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=242f410a70fae2d5babf38544c10d868901a8103 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Sep 7 02:13:13 2023 +0200 avcodec/celp_math: avoid overflow in shift by making gain unsigned we have 1 bit more available alternatively we can clip twice as in the g729 reference Fixes: left shift of 23404 by 17 places cannot be represented in type 'int' Fixes: 61728/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ACELP_KELVIN_fuzzer-6280412547383296 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6580a7b2b27973947118482235a2eb1214d968a2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=225c89f4023b6021758b323c73aa3b046f24f7d6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Jul 26 22:33:40 2023 +0200 tools/target_dec_fuzzer: Adjust threshold for rtv1 Fixes: 60499/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RTV1_fuzzer-5020295866744832 Fixes: Timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9ee87245c5e6eae017430726cce9b4c20d468c2d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0318ed865b206c4279311b7abc8bf627b9fac085 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 15 02:05:45 2023 +0200 avformat/hls: reduce default max reload to 3 The 1000 did result in the appearance of a never ending reload loop The RFC mandates that "If the client reloads a Playlist file and finds that it has not changed, then it MUST wait for a period of one-half the target duration before retrying." and if it has changed "the client MUST wait for at least the target duration before attempting to reload the Playlist file again" Trying to reload 3 times seems a better default than 1000 given these durations Issue found by: Сергей Колесников Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5f810435c2a6d985fabd9e6c025e0da0c99c39a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=12437cfbf06d4ec718f02c9c9fc3bb2792987d6b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 10 23:58:31 2023 +0200 avformat/format: Stop reading data at EOF during probing Issue found by: Сергей Колесников Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 80f6e0378beae69d31f24b036a1365405dea61d1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9e9a7cc4fafc5c403a257b2f22cfbabcf67cd2d6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 00:13:43 2023 +0200 avcodec/huffyuvdec: avoid undefined behavior with get_vlc2() failure Fixes: left shift of negative value -1 Fixes: 59889/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HUFFYUV_fuzzer-5472742275940352 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 90647a9249aee8c0ef6c0bced3558ada9643f5b6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e93ee8f8d8d41601d3d993e94af6c25eed27746f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Sep 10 16:27:02 2023 +0200 avcodec/cscd: Fix "CamStudio Lossless Codec 1.0" gzip files Fixes: tickets/10241/cscd_1_0_306_306_gzip.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ab7d38f970674e6765b5e1adb911c1763b9ce806) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=10212e7a0fc1c71194c137cff0db7ff4346c2275 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Mar 8 22:11:59 2023 +0100 avcodec/cscd: Check for CamStudio Lossless Codec 1.0 behavior in end check of LZO files Alternatively the check could be simply made more tolerant Fixes: Ticket10227 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d2a0464fc2dd6f79571a66e6c7a8168323168e46) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8659d16f68d4f332a6ae8238f083a1c609747e36 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 19:45:18 2023 +0200 avcodec/hevcdec: Fix undefined memcpy() There is likely a better way to fix this, this is mainly to show the problem Fixes: MC within same frame resulting in overlapping memcpy() Fixes: 60189/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4992746590175232 Fixes: 61753/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5022150806077440 Fixes: 58062/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-4717458841010176 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 94bd1796ff45b396021cd260e9b037bc61815933) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cb4ffd639ef5be11c1333d63982c08f2cddc4e5e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 1 23:35:10 2023 +0200 avcodec/mpeg4videodec: more unsigned in amv computation Fixes: signed integer overflow: -2147483648 + -1048576 cannot be represented in type 'int' Fixes: 59365/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-642654923954585 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0adaa90d89114dc86dbc5704ce31ded5b6750d13) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=98c823f60c7923e2a3883ce4fdad9984a5413969 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Aug 5 14:35:55 2023 +0200 avcodec/tta: fix signed overflow in decorrelate Fixes: signed integer overflow: 2079654542 - -139267653 cannot be represented in type 'int' Fixes: 60811/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TTA_fuzzer-5915858409750528 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 283bf5c35bc5ac92e061f27c3a680318175a1600) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=46957599852b96dddccc1f6da80d8419d53831ee Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Aug 25 00:24:21 2023 +0200 avcodec/apedec: Fix CRC for 24bps and bigendian Fixes CRC for vlc.ape and APE_48K_24bit_2CH_02_01.ape Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 696e161919f18f13be0f82f41715b445d31022d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=13d00223078805d38f775ab33848734722487e21 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Aug 7 00:02:21 2023 +0200 avcodec/xvididct: Fix integer overflow in idct_row() Fixes: signed integer overflow: -1403461578 + -843974775 cannot be represented in type 'int' Fixes: 60868/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG1VIDEO_fuzzer-4599793035378688 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0ce322a51eae87fd3a0eb96f2280175554ef30c5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5a88bf8ee704fa5ccf43b80148ebe2bd575b83e0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 23 01:46:20 2023 +0200 avformat/avr: Check sample rate Fixes: 54979/clusterfuzz-testcase-minimized-ffmpeg_dem_AVR_fuzzer-6681035461230592 Fixes: Timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Andreas Rheinhardt <andreas.rheinha...@outlook.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 32556fa62b1d0615f621fd8f71bdfe3b72e43896) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=53e3119d0f6e996c2b76fbb5058091528fbfd284 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 10 01:09:52 2023 +0200 avcodec/jpeg2000dec: Check for reduction factor and image offset This combination is not working (it writes out of array) Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9b6d191a66a8d9b3064efecc79a9f44fb14d7875) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=949636ca60228eccb188d10724e96ad11be7fb08 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 01:26:33 2023 +0200 avutil/softfloat: Basic documentation for av_sincos_sf() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4aa1a42a91438b7107d2d77db1fc5ca95c27740c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2c57b7c65b2bf6ce2ce446d02d31d45041cd3cec Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 20 00:59:40 2023 +0200 avutil/softfloat: fix av_sincos_sf() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d84677abd8ffb8ca8ad94eced6d9e03928f35d79) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5524362efb6096c914a9b0c16a0e499a8c1be36c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 18 21:00:03 2023 +0200 avcodec/utils: fix 2 integer overflows in get_audio_frame_duration() Fixes: signed integer overflow: 256 * 668003712 cannot be represented in type 'int' Fixes: 59819/clusterfuzz-testcase-minimized-ffmpeg_dem_MATROSKA_fuzzer-4674636538052608 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a4bf559683a999c8faa408fdd8f29bd28a6a47ea) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=99c01fa0df9407ee3f386e442e3e98cc6cdb830b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 25 23:40:18 2023 +0200 avcodec/hevcdec: Avoid null pointer dereferences in MC Fixes: runtime error: pointer index expression with base 0x000000000000 overflowed to 0xfffffffffffffff8 Fixes: 58440/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5956015530311680 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a0f4d4e65093a4cb627f05d09b19c922e88cfac1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9280883d982810953959e78667521080cb596d3e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 25 23:40:16 2023 +0200 avcodec/takdsp: Fix integer overflows Fixes: avcodec/takdsp.c:44:23: runtime error: signed integer overflow: -2097158 - 2147012608 cannot be represented in type 'int' Fixes: 58417/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-5268919664640000 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ff8a496d41422b694f66684ada97dcf49e167782) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=72c57f893812ab49871379b16868b82ae07363f6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 3 21:44:37 2023 +0200 avcodec: Ignoring errors is only possible before the input end Fixes: out of array read Fixes: Ticket 10308 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit fead656a7bf523d448fe8bd39c1f2ea36be98fb9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2dcc7dbba877af570aa6eb3a53484cb5f0bb2cbe Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 4 19:59:40 2023 +0200 avcodec/noise_bsf: Check for wrapped frames Wrapped frames contain pointers so they need specific code to noise them, the generic code would lead to segfaults Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0889ebc577749ee6abc620bc9030d2002487935f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=724f2b3fbdac267eca3d994c18fa0bbf4802ff19 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 2 01:46:31 2023 +0200 avformat/oggparsetheora: clip duration within 64bit Fixes: signed integer overflow: 9079256848778919936 - -288230376151711746 cannot be represented in type 'long' Fixes: 58248/clusterfuzz-testcase-minimized-ffmpeg_dem_OGG_fuzzer-6326851353313280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b1c3d81e71f78e4b3b2c2901ac4649cb74aec272) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=006ac8b4b5adb07a2aa39b3db50cb089eb3b8c4d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Mar 5 00:51:38 2023 +0100 avformat/wavdec: Check that smv block fits in available space Fixes: OOM Fixes: 56271/clusterfuzz-testcase-minimized-ffmpeg_dem_WAV_fuzzer-5290810045497344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a76efafdb9be966ae3ad52b32370dc644dd582bf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b56dc43f8f8bb27c183b295b9a54b66e30d75a55 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:38:39 2023 +0200 avcodec/tiff: add a zero DNG_LINEARIZATION_TABLE check Fixes: index 4294967295 out of bounds for type 'uint16_t [65536]' Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-5950405086674944 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TIFF_fuzzer-6666195176914944 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6e98cf0280cd693ef82c4444fe15bc7aef8771b3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=98310766fcb37736706714731bd52cfd7e4251a2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 17:34:16 2023 +0200 avcodec/tak: Check remaining bits in ff_tak_decode_frame_header() Fixes: out of array access Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TAK_fuzzer-6682195323650048 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 19b66b89da4b4ff086dc1fc79bbf540e82bdbcb4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cfdd9a59ff2a9b0e59d7932bf9258b6fde0c4da2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 16:56:40 2023 +0200 avcodec/utils: the IFF_ILBM implementation assumes that there are a multiple of 16 allocated Fixes: out of array access Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5124452659888128 Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-6362836707442688 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 34056a94eab5f8fbc7e0b8510f7c9851931f23b7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8d93e90c6d8c3971b11a4fb6c1b17af8d8c48c74 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 16 15:06:59 2023 +0200 avcodec/pngdec: Do not pass AVFrame into global header decode The global header should not contain a frame, and decoding it would result in leaks Fixes: memleak Fixes: 45982/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APNG_fuzzer-6603443149340672 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d31d4f32283f765c79d6e127d31ee2c37a0acef7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=941c6191fc40021246d1bd237bc7f8a1bc76ebfe Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Feb 12 22:49:01 2023 +0100 avcodec/vorbisdec: Check codebook float values to be finite Fixes: Timeout Fixes: 55116/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VORBIS_fuzzer-4572159970508800 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cadd7e7a7589b5c118ad1648a09c629a6b65a3be) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8b8c61082148d0f66d9d2bd6f5e15e77ef22628a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jan 24 22:48:46 2023 +0100 avcodec/g2meet: Replace fake allocation avoidance for framebuf framebuf is only allocated when the new width/height are larger than the old but nothing sets the old so its always allocated. Use av_fast_mallocz() instead. Fixes: Timeout Fixes: 55094/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_G2M_fuzzer-5116909932904448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 38adbc6eebd7f2f34ecf1b0b18019e88bad9d9f4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=22106d274bf2bec56b103e32061c5450a77aa887 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:17 2023 +0100 avcodec/lcldec: More space for rgb24 Fixes: Ticket 10239 Fixes: zlib_306_306_rgb24.av Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e2c3aa8e2b800c5b860315277b3ea426b8b23393) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d4966d6324212c9b100c0f32250150873f9ca8fd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:15 2023 +0100 avcodec/lcldec: Support 4:1:1 and 4:2:2 with odd width Fixes: Ticket10240 Fixes: zlib_306_306_yuv422.avi Fixes: zlib_306_306_yuv411.avi Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0cf1ac905d2d97355a389c3baa4e132824b29f21) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=99e0f485a5290feef5fd6af3547df0e2f2e2c32d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Mar 9 13:57:14 2023 +0100 libavcodec/lcldec: width and height should not be unsigned Computations like col < width - 3 will not work with unsigned width=1 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3eb4e28c26c3bce608214f392ab1fe6ee28ec1df) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> _______________________________________________ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".