URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=18a25916362bbd5330a6c8e40314ed618a6779f0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 23:27:34 2024 +0200
avutil/slicethread: Check pthread_*_init() for failure Fixes: CID1604383 Unchecked return value Fixes: CID1604439 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 23851c9ee0f231122c58955e795e17cfe8ca5d98) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2bdd6aad8a7f6824b1be0fdcf10ad81fc734f1a4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 23:04:42 2024 +0200 avutil/frame: Check log2_crop_align Fixes: CID1604586 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 15540b3d28676d5e797764a04f6681dcd01736f8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=df2c70bd951db7562ffcba3f278a00a240cd005d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 22:55:31 2024 +0200 avutil/buffer: Check ff_mutex_init() for failure Fixes: CID1604487 Unchecked return value Fixes: CID1604494 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 82f5b20ff5be4fccbf42f4b90f155db0076c0462) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2b66ed91e601e3653b5094ec91d75d5678dc8572 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 22:37:54 2024 +0200 avformat/xmv: Check this_packet_size Fixes: CID1604489 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 696685df0ccf437083d15f40358a6ec86f5748ac) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=13d2d2371cb2940b1b1ba6e579f826d6ca31036b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 21:53:58 2024 +0200 avformat/ty: rec_size seems to only need 32bit May help CID1604560 Overflowed integer argument Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit be30913538d4be9a50672ceb683f8745d8aa75a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9ed173954ab04b47d4985d0c9803a612cd18ea65 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 21:05:20 2024 +0200 avformat/tty: Check avio_size() Fixes: CID1220824 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 41745e550a0274571bd9fbfb12b36ff1743d4e9c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=10dca2898a3baf2512e4e69003d1db269b6b9245 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:58:21 2024 +0200 avformat/siff: Basic pkt_size check Fixes: half of CID1258461 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 124a97dd8b7636fb52e042b2e85a44cce40ab5e7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4e8c771bc13bf866836da2f11e6b177db214514a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:49:08 2024 +0200 avformat/sauce: Check avio_size() for failure Fixes: CID1604592 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 759aae590c0298414db4d2925a33b084d7f9e7f9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ae7b317a88aed58196f1ab68f7fa7945cb03d838 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:44:45 2024 +0200 avformat/sapdec: Check ffurl_get_file_handle() for error Fixes: CID1604506 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3e305a0e703843765d4dd7042092c3a38c0f97af) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=75d0aebdc525e1513efc47753c9c16cff4137b18 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:29:10 2024 +0200 avformat/nsvdec: Check asize for PCM Fixes: CID1604527 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e83e24650489e63f6b31e8c72a973db6367947b9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c426f6c4e728027afc5ef94a0187f18d3d46adec Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:20:53 2024 +0200 avformat/mp3dec: Check header_filesize Fixes: CID1608714 Division or modulo by float zero Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cea4dbc903eaf8cb7a4ea53b281deff495ff8fa0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=eb9ce850ba54c8a6684d5e885a4bca88bbf0e178 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:17:00 2024 +0200 avformat/mp3dec; Check for avio_size() failure Fixes: CID1608710 Improper use of negative value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bb936a1a720856a51c48bf907475daa8065920c9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=439ca028bb62590580af317dc365cf95982d952e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 20:03:45 2024 +0200 avformat/mov: Use 64bit for str_size We assign a 64bit variable to it before checking Fixes: CID1604544 Overflowed integer argument Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 046d069552f5c2824f36fcf95d409670208dc94b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=37f05d29b6ed06d855505f64429274dbe618bb15 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 19:29:14 2024 +0200 avformat/mm: Check length Fixes: CID1220824 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 139bf412464e62a83984cd49093936dcaa7a0865) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0644c2677758445a7b5b738f518552e024177cf0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 18:40:46 2024 +0200 avformat/hnm: Check *chunk_size Fixes: CID1604419 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 291356f58b8a1af491c692a89e6c4e70e9496f9d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8cedb04979e307a0cf68d0fea5d7945cbe4e1d8b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 18:37:54 2024 +0200 avformat/hlsenc: Check ret Fixes: CID1609624 Unused value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7e577165c101513b4d8afe164e604cbef6901546) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9806a37bcf42ebd9618adb2ce4a70ce7ecd0d921 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 18:10:00 2024 +0200 avformat/bintext: Check avio_size() return Fixes: CID1604503 Overflowed constant Fixes: CID1604566 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bf61f811e73dc62d1b53ed4ef6044b4e9e195113) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4d56eff13f5117c5df77fb32310c89c1d017f695 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 11 17:38:08 2024 +0200 avformat/asfdec_o: Check size of index object We subtract 24 so it must be at least 24 Fixes: CID1604482 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 891bc070f0294e564a02f9a71f6591b6a62c90cc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8b7a6c18f1e57b4ffad474564fbecda44447bfb7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jul 8 22:42:44 2024 +0200 avfilter/vf_scale: Check ff_scale_adjust_dimensions() for failure Helps: CID1513722 Operands don't affect result Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2a8fb3c2cc07e741bca556eee8aea704fda4c33f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=491bee58137a42feb44ea8b85ab218e69f5a099b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jul 8 22:01:29 2024 +0200 avfilter/scale_eval: Use 64bit, check values in ff_scale_adjust_dimensions() Found by reviewing CID1513722 Operands don't affect result Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ad9df8bcfebc1085cb8b42dae9ab688af824cdab) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fbebb92b2812397fcf1d1d791758745f49c44e62 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jul 8 01:33:11 2024 +0200 avfilter/vf_lut3d: Check av_scanf() Fixes: CID1604398 Unchecked return value Fixes: CID1604542 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ace2e25720b8a26906b15aab7eebbac860bb7bf0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a83209c64adcc51ab565a0373a1a49b48d0a9658 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 14 01:50:15 2024 +0200 avfilter/vf_deshake_opencl: Ensure that the first iteration initializes the best variables Fixes: CID1452759 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9385847af47211e8c618198499ffea99614bb55d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=11fdf674b481797f9e03919360ccbafad07d45bd Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jul 16 23:44:04 2024 +0200 swscale/output: Fix integer overflows in yuv2rgba64_X_c_template Fixes: signed integer overflow: -1082982400 + -1068681048 cannot be represented in type 'int' Fixes: 69995/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-6285740271534080 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bcab9789ef750670277956e79736bca442aec2ff) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d6eb6a05f96c06d2c31f2acea7ae18dbca3aac08 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jul 16 21:31:21 2024 +0200 avformat/mxfdec: Reorder elements of expression in bisect loop Fixes: signed integer overflow: 9223372036854775807 - -1 cannot be represented in type 'long' Fixes: 68578/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-6032171648221184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d8d288479d3431d65318d957aab710b13714fc05) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ceeb1928da9a3aedd6fff935790c70405d4b12bf Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jul 18 21:12:54 2024 +0200 avcodec/pnmdec: Use 64bit for input size check Fixes: out of array read Fixes: poc3 Reported-by: VulDB CNA Team Found-by: CookedMelon Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3faadbe2a27e74ff5bb5f7904ec27bb1f5287dc8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6913ebd5b4b928b232b4f2115cf1c39ea5fe3514 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Jun 19 23:55:01 2024 +0200 avcodec/utvideoenc: Use unsigned shift to build flags Fixes: left shift of 255 by 24 places cannot be represented in type 'int' Fixes: 69083/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_UTVIDEO_fuzzer-5608202363273216 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 69e90491f15d8eef643f8dfd1b75805829496678) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=47cdc9df8de3f84093f0beb50240d761d73ab44c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 17 22:43:22 2024 +0200 avcodec/vc2enc: Fix overflows with storing large values Fixes: left shift of 1431634944 by 2 places cannot be represented in type 'int' Fixes: left shift of 1073741824 by 1 places cannot be represented in type 'int' Fixes: 69061/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VC2_fuzzer-6325700826038272 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit af9935835335cae1ae5a4ec7fc14c1b5e25c1f2d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a0e7f6ea6758ef763382b250018c1654522bb4f3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 20 00:44:08 2024 +0200 avcodec/mpegvideo_enc: Do not duplicate pictures on shifting Fixes: out of array access Fixes: 69098/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer-6107989688778752 Fixes: 69599/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-4848626296225792.fuzz Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9c8881cb3534b257d6e6539f563006599cd96b48) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6737f26da3efe3042294ff743be086612543cd5e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 7 20:47:27 2024 +0200 avdevice/dshow_capture: Fix error handling in ff_dshow_##prefix##_Create() Untested, needs review Fixes: CID1591856 Resource leak Fixes: CID1591887 Resource leak Fixes: CID1591874 Resource leak Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 348968e9f7d8abb743a5dfca8e522ae0cf1ddc8b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ff443c8ab05449320ac0dcdffed41e1c1b4e5079 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jul 7 20:47:24 2024 +0200 avcodec/tiff: Check value on positive signed targets Fixes: CID1604593 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 66d6b8033b4bf8e9b33f26729c4ab9f9b328c5a2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=65565a0aa166cf0af3dd496a39e10038034176ff Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu Jun 13 00:22:10 2024 +0200 avfilter/vf_bm3d: Dont round MSE2SSE to an integer Fixes: CID1439581 Result is not floating-point Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ec18ec9fc1080c37a02f3709afda5c4b08d4ea89) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8f00c0ed21d6711b66eac41ce68da4b3ddc665d7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 27 01:52:24 2024 +0200 avdevice/dshow: Check device_filter_unique_name before use Fixes: CID1591931 Explicit null dereferenced Sponsored-by: Sovereign Tech Fund Reviewed-by: Roger Pack <rogerdp...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 175c19166824bd93b02f60c5178365014212366e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e7c31b312d8951e3192198dd5e077ef51ad544f9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 27 01:34:48 2024 +0200 avdevice/dshow_filter: Use wcscpy_s() Fixes: CID1591929 Copy into fixed size buffer Sponsored-by: Sovereign Tech Fund Reviewed-by: Roger Pack <rogerdp...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit daf61dddc8e27424c320d5c3abe3e0c5182cd5c0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bc5f8416882dd277e9ae3cad2a73566134a60faf Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 5 01:51:59 2024 +0200 avcodec/flac_parser: Assert that we do not overrun the link_penalty array Helps: CID1454676 Out-of-bounds read Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9af348bd1aa41ea10d6719c56ed2b4eda97642f3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=11cdd995856ef71f22ebee83031ae8de50388649 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:56 2024 +0200 avcodec/pixlet: Simplify pfx computation Found by reviewing code related to CID1604365 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0474614e6cf8edcd0077b95772c29fae894a7db9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d636f4a96e50c757852631437e4ab8db9105b229 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:55 2024 +0200 avcodec/motion_est: Fix score squaring overflow Fixes: CID1604552 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f18b442370d714b930e3e983c2e5d789229f3356) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3fc48899767b5f57e38779e763f7a465f95d73fb Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:52 2024 +0200 avcodec/loco: Check loco_get_rice() for failure Fixes: CID1604495 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d55327684349b4db5d5905eefaa7d2aec597908d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=aa2ed020e903969e9aef11d9842408917c231299 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:51 2024 +0200 avcodec/loco: check get_ur_golomb_jpegls() for failure Fixes: CID1604400 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b9899866418cb3bd930846271470e3096917f5f6) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2949adb6fa9b1667fe07722363293d820a196628 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:49 2024 +0200 avcodec/imm4: check cbphi for error Fixes: CID1604356 Overflowed constant Fixes: CID1604573 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6e4c037833c3ca0e0bd3e348701c4c0dc58bed91) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7017910d7ac4739f0edf2d11dd73a37a6efaf027 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:48 2024 +0200 avcodec/iff: Use signed count This is more a style fix than a bugfix (CID1604392 Overflowed constant) Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cfe66dfebb8a1e1394bcf834b6cc785f280ccecf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8cd6565353ffdf20e35c12af5c0c9134dfa00bde Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:46 2024 +0200 avcodec/golomb: Assert that k is in the supported range for get_ur/sr_golomb() Found by code review related to CID1604563 Overflowed return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b2aaeb81f65aaa61238d74a77034b118055340d3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a6fdaba2977f22337ee1525b0437e48eedaa9291 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:45 2024 +0200 avcodec/golomb: Document return for get_ur_golomb_jpegls() and get_sr_golomb_flac() Found while reviewing code related to CID1604409 Overflowed return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7cf5b83f6fa367f99aefc1321bafc0a7e8db33cd) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=26717ad2dc2029b6647bb90917b5adc552a592a7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:44 2024 +0200 avcodec/dxv: Fix type in get_opcodes() Found by code review related to CID1604386 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e5af1c6e91e86b184101ef2abb49178ff409703b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a116ca9b245bc5d0a645d3519ad3bc2bb741d741 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:43 2024 +0200 avcodec/cri: Check length Fixes: CID1604394 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 69dcd123f19acf851f85166159a3719565813fd0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0c24fec67fe6b58613e5b926c43dc9a67879e7e4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jul 5 02:21:42 2024 +0200 avcodec/xsubdec: Check parse_timecode() Fixes: CID1604490 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 96fd9417e250540f228d1ad5b43a77c120208eba) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bb1687c837b90c51e003d599b35b592fdb0e228c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Jul 10 17:49:56 2024 +0200 avutil/imgutils: av_image_check_size2() ensure width and height fit in 32bit width and height > 32bit is not supported and its easier to check in a central place Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ba63e329572b74207045fd82c93fcc0fa0479bc4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f2716bfb1bda6efefd97d7de2ba45ff876a94c11 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 30 22:00:04 2024 +0200 doc/examples/mux: remove nop Found through code review related to CID1604493 Overflowed constant Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e6c0c5731e85f00b5840d9a7d14e38cc3e07d5bc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8c240bcc4a3165dea06578e52a5c02c7a35fc572 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 18 15:48:26 2024 +0200 avcodec/proresenc_kostya: use unsigned alpha for rotation Fixes: left shift of negative value -208 Fixes: 69073/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PRORES_KS_fuzzer-4745020002336768 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 93e0265e27e6dd567812a8661988109421c5447a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c6eb3f1d9b94b9e551db5565646fab46137fb7b9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 7 23:05:47 2024 +0200 avformat/rtmppkt: Simplify and deobfuscate amf_tag_skip() slightly Found while reviewing: CID1530313 Untrusted loop bound Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit cedbef03946625bc0f7f96e9f77ad59c512b9900) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cb7f4c6e8a7280028b652150a2c5ae63de813f81 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 7 21:57:40 2024 +0200 avformat/rmdec: use 64bit for audio_framesize checks It is not entirely clear what would prevent such overflow so even if it is not possible, it is better to use 64bit Fixes: CID1491898 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 665be4fa2f47910bf85a6f17b6cac9dabc6591f0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e9aa304c4378700b875fb40c3815668d5589b7dc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 9 17:47:43 2024 +0200 avutil/hwcontext_d3d11va: correct sizeof IDirect3DSurface9 Fixes: CID1591944 Wrong sizeof argument Sponsored-by: Sovereign Tech Fund Reviewed-by: Steve Lhomme <rob...@ycbcr.xyz> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 628ba061c8d5ae018c3e8aa8ce05b8dfcdfd8410) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b12663d534e037f00538afeaa593a7a95420a556 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 9 17:47:41 2024 +0200 avutil/hwcontext_d3d11va: correct sizeof AVD3D11FrameDescriptor Fixes: CID1591909 Wrong sizeof argument Sponsored-by: Sovereign Tech Fund Reviewed-by: Steve Lhomme <rob...@ycbcr.xyz> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 698ed0d5a5a3a1219179facb5538eea463fae13f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=56d8f5c77998eff75fc6f969f6381a4f9bdbb5a2 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jul 2 01:47:33 2024 +0200 doc/examples/vaapi_encode: Try to check fwrite() for failure Fixes: CID1604548 Unused value Sponsored-by: Sovereign Tech Fund Reviewed-by: "Xiang, Haihao" <haihao.xiang-at-intel....@ffmpeg.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3e4bfff21192aed328c906c85424737128b108f1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c97f60a193a7c19930765821eb5c9ee19e451d29 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 9 00:09:24 2024 +0200 avformat/tls_schannel: Initialize ret Fixes: CID1591881 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit f022afea77ced5067f511530dd8ff137967db1d9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=96d595b129c7f2a8948d5bd2d5573a6f177dd4df Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 20:46:28 2024 +0200 avformat/subfile: Assert that whence is a known case This may help CID1452449 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 426d8c84c37064eef93bbcfaffd886d00a9a4ee8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=82c53d27aa95feb518baa48d99e38d2a654ebcf7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 20:45:32 2024 +0200 avformat/subfile: Merge if into switch() Found while reviewing CID1452449 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2a0a7d964bfd5da8859c715627eeb7a048bddb79) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=13c4320a868ef585933cbab0575f5c50299bed8e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 19:43:15 2024 +0200 avformat/rtsp: Check that lower transport is handled in one of the if() Fixes: CID1473554 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c8200d382503f5fd839a72af7ba93d53880ad4b7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=653d70292fc1d64eef11f6e3784573d22e45a839 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 18:28:49 2024 +0200 avformat/rtsp: initialize reply1 It seems reply1 is initialized by ff_rtsp_send_cmd() in most cases but there are code paths like "continue" which look like they could skip it but even if not writing this so a complex loop after several layers of calls initialized a local variable through a pointer is just bad design. This patch simply initialized the variable. Fixes: CID1473532 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 498ce4e8b82e2312690613df45f87e592dcb91a9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=395df0a9747cd974fd50e9de12cf6a597af286c0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 18:23:47 2024 +0200 avformat/rtsp: use < 0 for error check Found while reviewing CID1473532 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9bb38ba2b782cdb6052ddcb415ef1554b0462401) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fa05a9367dcb608ed108a6ca15bd516847e78052 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Jun 8 10:17:42 2024 +0200 avformat/rtpenc_vc2hq: Check sizes Fixes: CID1452585 Untrusted loop bound Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7a9ddb705152d5090d2cb815f905bf592cc487f5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=683960156a25bbe6d67acc3affcfb960281133af Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 9 17:47:46 2024 +0200 avfilter/af_aderivative: Free out on error Fixes: CID1197065 Resource leak Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 382e9e79f3a0011d93af4b11ca6ba6b85113a09a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6b1f715f839253d4d1afed8305adc4900cd1361a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 10 23:41:07 2024 +0200 avfilter/af_pan: check nb_output_channels before use Fixes: CID1500281 Out-of-bounds write Fixes: CID1500331 Out-of-bounds write Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5fe8bf4aa51350b14d0babd47b0314232e703caf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4882ef9e58f5ab4865a3ed0ea48eb82ee58ec68 Author: Mark Thompson <s...@jkqxz.net> Date: Sun Oct 22 19:35:52 2023 +0100 cbs_av1: Reject thirty-two zero bits in uvlc code The spec allows at least thirty-two zero bits followed by a one to mean 2^32-1, with no constraint on the number of zeroes. The libaom reference decoder does not match this, instead reading thirty-two zeroes but not the following one to mean 2^32-1. These two interpretations are incompatible and other implementations may follow one or the other. Therefore reject thirty-two zeroes because the intended behaviour is not clear. Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7110a36ba07f85ca2996d3b99898a4819e72d9bb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=583b7afb7c5c39cc3464269f3ad3fe7a53b56fc6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 10 23:18:53 2024 +0200 avfilter/af_mcompand: compute half frequency in double Fixes: CID1422217 Result is not floating-point Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2d0d502ff10378e545a1fe42a9503ab44d19fa67) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=64b7bda42c8d2c3f42b329dc6714518978efe1a4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jul 1 23:18:47 2024 +0200 tools/coverity: Phase 1 study of anti-halicogenic for coverity av_rescale() Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 380a8213b165d1fda419c566241d2641cb6f5c3c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=22ba818d4f2685889c6c14c65fa718a90d1c1080 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 11 23:43:37 2024 +0200 avfilter/vf_avgblur: Check plane instead of AVFrame Fixes: CID1551694 Use after free (false positive based on assuming that out == in and one is freed and one used) Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c296d4fdec198a32ea3995e312cede7be83352c7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3942768ffa5e7b543d05564955670adbc87d0ce3 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 7 01:50:00 2024 +0200 avformat/rdt: Check pkt_len Fixes: CID1473553 Untrusted loop bound Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0d0373de3bc6aa6fa5c71247191afccfaf20723d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ef7577db5410d588491b40f367dda46df2c3fe9b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 7 00:19:01 2024 +0200 avformat/mpeg: Check len in mpegps_probe() Fixes: CID1473590 Untrusted loop bound Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit ca237a841e9e78ac02694124d81ff78c74b0bf72) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3ecc18c104ec84eb233c0a0f774cf68106bd18c5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 27 01:52:25 2024 +0200 avdevice/dshow: Check ICaptureGraphBuilder2_SetFiltergraph() for failure Fixes: CID1591939 Logically dead code Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4c285bb2789667bcf014ede8b0ab06ebbbee833f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3eab16d53e5bfb23c3fadbf51815732be05f2fe9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 27 01:52:18 2024 +0200 avcodec/mfenc: check IMFSample_ConvertToContiguousBuffer() for failure Fixes: CID1591911 Logically dead code Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 86cd7c68bc65df6703391f0cdcdbf7c57d6c4780) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1fb574add82f60f6ab12d85ffff1e2e0e091bf30 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 24 01:45:44 2022 +0200 avcodec/vc1_loopfilter: Factor duplicate code in vc1_b_h_intfi_loop_filter() Fixes: CID1435168 Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 63ecce9ba87867b21a7cdcd677bb268c0d807db1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4322bba921fc749f890353365b2c7e6cea723441 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 8 04:15:50 2024 +0200 avformat/img2dec: assert no pipe on ts_from_file Help coverity with CID1500302 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4824156fa06bd60b27f9f0673fbd6a3cfc780e56) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6dfbb077e9100b4e8e32c03ea7723e91ebce3309 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 1 22:33:14 2024 +0200 avcodec/cbs_jpeg: Try to move the read entity to one side in a test The checked entity should be alone on one side of the check, this avoids complex considerations of overflows. This fixes a issue of bad style in our code and a coverity issue. Fixes: CID1439654 Untrusted pointer read Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 385784a148d2886884aac69acc31bf179fac3ac2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3b67a2f883d43cc4685682c9d85a9a210d7bfb09 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Mar 25 03:13:50 2024 +0100 avformat/mov: Check edit list for overflow Fixes: 67492/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5778297231310848 Fixes: signed integer overflow: 2314885530818453536 + 7782220156096217088 cannot be represented in type 'long' Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2882d30e3acfc3155e2be11db653c7c721f94f34) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f015ef3f669d9279848a1e70ffbe11d20b3470dc Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 30 22:23:06 2024 +0200 fftools/ffmpeg: Check read() for failure Fixes: CID1591932 Ignoring number of bytes read Sponsored-by: Sovereign Tech Fund Reviewed-by: Anton Khirnov <an...@khirnov.net> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 34fd247c3bf06418c1eaafacf0d6052e3bbe4f5e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=12df2359e825f9b9575ca56fe5147025b958a6c9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 16 01:59:23 2024 +0200 swscale/output: Avoid undefined overflow in yuv2rgb_write_full() Fixes: signed integer overflow: -140140 * 16525 cannot be represented in type 'int' Fixes: 68859/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-4516387130245120 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c221c7422f07f2245db5c4cdc958b42ca25eb2b7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bd43ebe43bf8bb37625af1ee7d03ee74744ff848 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 16 01:51:22 2024 +0200 swscale/output: alpha can become negative after scaling, use multiply Fixes: left shift of negative value -3245 Fixes: 69047/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-6571511551950848 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9e6c5b6e865a6b1b9c3a471fc06143f11e69d71b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a40d0a38321dce20bcb55782021f6d082aa7942e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 16 19:33:02 2024 +0200 avcodec/targaenc: Allocate space for the palette Fixes: out of array access Fixes: 68927/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TARGA_fuzzer-5105665067515904 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4a7220bd5c1871827ee0edba14fc88f63173e169) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1d992ac6d7352ee7d4e913d51b4f3bbdc9f135b9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 16 23:42:37 2024 +0200 avcodec/r210enc: Use av_rescale for bitrate Fixes: signed integer overflow: 281612954574848 * 65344 cannot be represented in type 'long' Fixes: 68956/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_R210_fuzzer-6459074458746880 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d34d4b6a7ce7fa72239c47d22ab6592d0687ac86) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e6d5edb03c846c38f38a96a651f93b305d95319f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 18 15:48:24 2024 +0200 avcodec/jfdctint_template: Fewer integer anomalies Fixes: signed integer overflow: 105788 * -20995 cannot be represented in type 'int' Fixes: signed integer overflow: 923211729 + 2073948236 cannot be represented in type 'int' Fixes: signed integer overflow: 1281179284 + 2073948236 cannot be represented in type 'int' Fixes: 68975/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PRORES_fuzzer-6266769177116672 Fixes: 68997/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PRORES_KS_fuzzer-6284237161431040 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 228f255b5d9b839149cd53f0537ce76b068228ae) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=71fc1aada661d5571e6298bbec9511eace8f345c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue Jun 18 15:48:23 2024 +0200 avcodec/snowenc: MV limits due to mv_penalty table size Fixes: out of array read Fixes: 69673/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SNOW_fuzzer-5476592894148608 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 3a9292aff320d7b5048b371b1babea2f9b3c4e69) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=30461fcd2c8ca57ce19f428611dce436f03f4a61 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Jun 7 02:32:13 2024 +0200 avformat/mxfdec: Check container_ul->desc before use Fixes: CID1592939 Dereference after null check Sponsored-by: Sovereign Tech Fund Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4cab028bd0e381f2ed4ccb7f139407f1f6f537c0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4bfae9098b5fe965633f9739209437e30b9bd1e Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 16 22:32:03 2024 +0200 MAINTAINERS: Update the entries for the release maintainer for FFmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 97ecfb5a193c43eef2e47b3e45afd3fc629c107d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f76bc6e41cbdef4ee06e8e2f31c4e2f675239b58 Author: Lynne <d...@lynne.ee> Date: Mon Jan 1 00:00:00 2024 +0000 configure: update copyright year (cherry picked from commit b95ee2ec5f84054de8bf6db9fe1b1119d569f269) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5bb3c52f877bb61990a53df1005803f96fcec30a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 3 19:51:49 2024 +0200 avfilter/vf_rotate: Check ff_draw_init2() return value Fixes: NULL pointer dereference Fixes: 3_343 Found-by: De3mond Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9c9f095e30c196c0e3d510dc5300182ddb49a803) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c3894f1418bad42eba86230afed35f5a2c1a930a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 3 01:25:59 2024 +0200 avformat/matroskadec: Assert that num_levels is non negative Maybe Closes: CID1452496 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 019fce18bb0628ac8bc47a81d647a23d604b6123) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=17fc13a9f1b480413852b5b0e5c46c38c05a2982 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 3 01:19:36 2024 +0200 avformat/libzmq: Check av_strstart() Fixes: CID1453457 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 0263b6a48caaff839e4c28df15b299b89c7da92d) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=766fa1c485bfea23572284a3b717cb1ba77ca402 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Jun 3 00:28:16 2024 +0200 avformat/img2dec: Move DQT after unrelated if() Fixes: CID1494636 Missing break in switch Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 7d04c6016b0971fecb890d3a0afe4e6706a1a68e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=482de477e31adb818cd057531a377f24e37b5a48 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Jun 2 23:32:43 2024 +0200 avdevice/xcbgrab: Check sscanf() return Alot more input checking can be performed, this is only checking the obvious missing case Fixes: CID1598562 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 78d6d13babc62fa14727ee590e5a9661f23a0d9f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9b28c8b9e9fd4f05a29c7c37aec90111091847a7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 28 00:53:51 2024 +0200 fftools/cmdutils: Add protective () to FLAGS issue found while reviewing CID1452612 Free of array-typed value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d9b9fc4be26014eb7221d9bbc297a5323d5ad40b) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b28d8acc7cf629f23b0b3b5bbbd34f0a8be668ba Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 8 04:07:40 2024 +0200 avformat/sdp: Check before appending "," Found by reviewing code related to CID1500301 String not null terminated Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5b82852519e92a2b94de0f22da1a81df5b3e0412) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ce6a782fda4134b4a501be22cf4b75f164245a0c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 9 23:30:49 2024 +0200 avcodec/ilbcdec: Remove dead code Yes the same dead code is in "iLBC Speech Coder ANSI-C Source Code" Fixes: CID1509370 Logically dead code Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8a64a003b5d567354e82af679e056615c8464a6f) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8831bff7562a6b319a100aeb85c86f47d74e4e31 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 26 23:50:40 2024 +0200 avcodec/vp8: Check cond init Fixes: CID1598563 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 9b76e49061a321467df23f7b1c8e8e715c8dec71) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4ef3c9ddc9079bbf72eb940b3c213aac7f88fa43 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 26 23:50:40 2024 +0200 avcodec/vp8: Check mutex init Fixes: CID1598556 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4ac7405aafb8e66dff2ac926f33b7ff755f224cf) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c4ec63cec2fac5cc0d72807f745f73b181f8a4e9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 13 00:45:29 2024 +0200 avcodec/notchlc: Check init_get_bits8() for failure Fixes: CID1500300 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 19db9636c52c040d364fe9af94ddeeb1ecfd2c2a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=653f189b4fe55c30442203d178e9f1e806f1e3e4 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 17 00:46:24 2024 +0200 avcodec/tests/dct: Use 64bit in intermediate for error computation Fixes: CID1500284 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 161d0aa2a8d18f1f8a01cbc4c1061eadcbe592e5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2886a355a40e39a548e824886f43ae1c20a5d673 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 16 21:16:00 2024 +0200 avcodec/scpr3: Check add_dec() for failure Fixes: CID1441459 Improper use of negative value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d741638042d827aed994b819857d6587121627ab) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7260e6dcbe49f9d855e614df27c72bff1833e581 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 16 04:13:14 2024 +0200 avcodec/rv34: assert that size is not 0 in rv34_gen_vlc_ext() Helps: CID1548380 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e5098589b0ca74b3f52e09bae277306a1fc0cd43) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2f65a02754a5ff3a5b3d313737b69ea821cb2d9d Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 19 04:49:15 2024 +0200 avcodec/wavpackenc: Use unsigned for potential 31bit shift Fixes: CID1465481 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 6f976db251864ad698c935130370774783bf12f4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7390d83895ff158a0fa04637beb5a29e41150876 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 19 22:07:32 2024 +0200 avcodec/tests/jpeg2000dwt: Use 64bit in comparission Found while reviewing: CID1500309 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 12391b732f811fc6e868be2f08dc188e508d2567) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=03df999a30be6e20ce9f93c5576bc7e76ccaff39 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 19 22:07:31 2024 +0200 avcodec/tests/jpeg2000dwt: Use 64bit in err2 computation This issue cannot happen with the current function parameters Fixes: CID1500309 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 847a53f264db0b22dcc5a23ca9ade71a627f1c6c) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0e6fb091b86a75efaee82d0f6b20dd0cc61c444f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 25 13:18:13 2024 +0200 avformat/fwse: Remove always false expression Fixes: CID1460758 Operands don't affect result Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 348c3a7ffe0c3aecf35f1a26a9f321a4e608dab7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=413f9b1457b67e85361bfe7b3f3d8dd29ebbc72c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 23 02:33:37 2024 +0200 avcodec/sga: Make it clear that the return is intentionally not checked Related: CID1473496 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 00d029d5c0b7029720265d579389a348220decfb) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4b38485dff310315284ea1afb3dbddffba01190 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 23 02:27:28 2024 +0200 avformat/asfdec_f: Use 64bit for preroll computation Fixes: CID1500342 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 70b499476213a198ac0f39450cddaea4b34662f5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=23c45d4421e88fcd045adfebf6208997f554f394 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 23 02:12:09 2024 +0200 avformat/argo_asf: Use 64bit in offset intermediate Fixes: CID1467435 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d9d1f65308d40502015272a3d1cc9f805c77e075) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=254b17eb13b42561be28cacf7ff6e513e13ab432 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Thu May 23 01:51:53 2024 +0200 avformat/ape: Use 64bit for final frame size Fixes: CID1505963 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a2b8d03347930c051358fcbbdc557e57e157d9c9) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f9dc102e7dd3a707be54ed2e58368031f534a6ac Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 17 23:58:30 2024 +0200 avcodec/tiff: Assert init_get_bits8() success in unpack_gray() Helps: CID1441939 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a287f17db22c0c85f0445a1d31139cc70e73205e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3ccbd7d2b5cefd63410b4c45a39e826b70410f52 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 17 23:53:28 2024 +0200 avcodec/tiff: Assert init_get_bits8() success in horizontal_fill() Helps: CID1441167 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8814cedb079d5827e07a92e9424c2314bd0a6047) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b093d8f2023556d05107f81ee458de11010d9622 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Tue May 21 01:35:08 2024 +0200 swscale/yuv2rgb: Use 64bit for brightness computation This will not overflow for normal values Fixes: CID1500280 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit bfc22f364d31d8f2dc2acae1bd03d5894a00b8c5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8da148d8a91527011845c16f5a67c940fa738d47 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 20 22:52:38 2024 +0200 avutil/tests/opt: Check av_set_options_string() for failure This is test code after all so it should test things Fixes: CID1518990 Unchecked return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e3481730ed9b3b781a0d85370826bcc57d601958) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3b005fcaf946ba1f2db864e2ef041ff5a6891335 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 20 21:55:44 2024 +0200 avutil/tests/dict: Check av_dict_set() before get for failure Failure is possible due to strdup() Fixes: CID1516764 Dereference null return value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e8a1e1899d9ededd78f8ec4722fe80c345bbf8f7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=26560f0317e569d9af6040586a0df87f02c80a42 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 27 00:50:02 2024 +0200 avdevice/dshow: fix badly indented line Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c4004605b2fa6e2ecbd1cfc2a1da382e4f5237a5) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b2813ed083bf841f52105e5ba8fb5134e083d049 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 12 00:43:48 2024 +0200 avcodec/mscc & mwsc: Check loop counts before use This could cause timeouts Fixes: CID1439568 Untrusted loop bound Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e35fe3d8b9e345527a05b1ae958ac851fe09f1ed) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=85f89178a9d7a4c28269ae9235e69be5ec5e3116 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun May 12 00:13:58 2024 +0200 avcodec/mpegvideo_enc: Fix potential overflow in RD Fixes: CID1500285 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit b6b2b01025e016ce29e5add57305384a663edcfc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e30ed053d84038ac4909035c4cace2e5266be28a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 11 22:08:21 2024 +0200 avcodec/mpeg4videodec: assert impossible wrap points Helps: CID1473517 Uninitialized scalar variable Helps: CID1473497 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8fc649b931a3cbc3a2dd9b50b75a9261a2fb4b49) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=489f820a6e6161a431ef02e824ae59ebcbe7dea8 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 11 21:04:00 2024 +0200 avcodec/mpeg12dec: Use 64bit in bit computation I dont think this can actually overflow but 64bit seems reasonable to use Fixes: CID1521983 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4c725df059dd9a5f2071e204924105b3ceb74cbc) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a895ed9b2f5d9941fc6220c0dde244fd275e5e87 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 18 00:32:43 2024 +0200 avcodec/vble: Check av_image_get_buffer_size() for failure Fixes: CID1461482 Improper use of negative value Sponsored-by: Sovereign Tech Fund Reviewed-.by: "Xiang, Haihao" <haihao.xi...@intel.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit dd5379db5d83d8b06654582afe327daa6be678a3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5611f2bb8a9b8ddb0bec5878937c01eac8b54f0a Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 18 03:16:08 2024 +0200 avcodec/vp3: Replace check by assert Fixes: CID1452425 Logically dead code Sponsored-by: Sovereign Tech Fund Reviewed-by: Peter Ross <pr...@xvid.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1b991e77b9b19392214f6a788541bea5662de337) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8d075d2bf2a7171bca5fce0fe41f4c3585e1b907 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 10 16:07:04 2024 +0200 avcodec/jpeg2000dec: remove ST=3 case Fixes: CID1460979 Logically dead code Sponsored-by: Sovereign Tech Fund Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 4ed4f9a6c0a99c823706bfc4bb4df53f963f2f5a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0cb5c73e8c2e6c6e25d99437a2ec4e3e1d05f1a1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 13 02:05:56 2024 +0200 avcodec/qsvdec: Check av_image_get_buffer_size() for failure Fixes: CID1477406 Improper use of negative value Sponsored-by: Sovereign Tech Fund Reviewed-by: "Xiang, Haihao" <haihao.xi...@intel.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 8789c550faf4587527faf0bd4f6c6c5c64a04ae2) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=18c0c1a716c5317c86d373131037c0cdd3327830 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri May 3 23:25:10 2024 +0200 avcodec/exr: Fix preview overflow Fixes: CID1515456 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 36126e4c142e43cc703f4b8c535d388ac5e403a4) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=afe733c1d05e50c2196244db3aaea4ffd8aeef11 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 4 23:29:26 2024 +0200 avcodec/fmvc: remove dead assignment Fixes: CID1529220 Unused value Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 96c116254527cc40b386f14b77e17fbe2388d5da) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fb9e642d059e0168e4efd4ed2696a9cdc1b93ff0 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon May 6 03:17:26 2024 +0200 avcodec/h264_slice: Remove dead sps check Fixes: CID1439574 Dereference after null check Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a68aa951b21b8b7db0a5200bcfebc0a077a5f094) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e6295921ac57f23c05a7660e492f63a5ac1bac62 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 11 20:50:44 2024 +0200 avcodec/lpc: copy levenson coeffs only when they have been computed Fixes: CID1473514 Uninitialized scalar variable Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c2d897f3566fdf5c190583c6f5197ead5abec2ed) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c97e85b522f550ebb486f2ee3a0649be259c0a68 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 11 03:14:16 2024 +0200 avutil/tests/base64: Check with too short output array Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c304784a86cc7e2af211ed80ce2121e788680a8e) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fab2443590a8448854336bd38367052d0cc6d1e6 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat May 11 03:13:17 2024 +0200 libavutil/base64: Try not to write over the array end Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 2d216566f258badd07bc58de1e089b6e4175dc46) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0904b9cd867c0c9e7b21744b02fa24120e17ed70 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed May 1 21:44:33 2024 +0200 avcodec/cbs_av1: Avoid shift overflow Fixes: CID1465488 Unintentional integer overflow Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit d7924a4f60f2088de1e6790345caba929eb97030) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f83bd00bcbc470c93a085cbfa15946f86df07f5b Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Apr 24 03:08:14 2024 +0200 doc/examples/demux_decode: Simplify loop Fixes: CID1463550 Logically dead code Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 91d27f7e02e5bec4b6e53cc7a7f15df8be017bb3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2d3a33d18bc3544c8f0efb9cc97828b98497d1c7 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 8 18:38:42 2024 +0200 avcodec/mpegvideo_enc: Fix 1 line and one column images Fixes: Ticket10952 Fixes: poc21ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 96449cfeaeb95fcfd7a2b8d9ccf7719e97471ed1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4a7e45239c35fda8d034febd1ecc2daa894c528 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 26 05:08:36 2024 +0200 swscale/output: Fix integer overflow in yuv2rgba64_full_1_c_template() Fixes: signed integer overflow: -1082982400 + -1079364728 cannot be represented in type 'int' Fixes: 67910/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-5329011971522560 The input is 9bit in 16bit, the fuzzer fills all 16bit thus generating "invalid" input No overflow should happen with valid input. Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 1330a73ccadd855542ac4386f75fd72ff0ab5ea1) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cfdcf61ac118a46b41d3607f0c0da4e9031293ef Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 26 05:08:35 2024 +0200 swscale/output: Fix integer overflow in yuv2rgba64_1_c_template Fixes: signed integer overflow: -831176 * 9539 cannot be represented in type 'int' Fixes: 67869/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-5117342091640832 The input is 9bit in 16bit, the fuzzer fills all 16bit thus generating "invalid" input No overflow should happen with valid input. Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit a56559e688ffde40fcda5588123ffcb978da86d7) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2ec04a11a0c4e33fdd2b9c3ab91d990092679c9f Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 26 03:46:33 2024 +0200 avformat/mxfdec: Check body_offset Fixes: signed integer overflow: 538976288 - -9223372036315799520 cannot be represented in type 'long' Fixes: 68060/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5523457266745344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <g...@haerdin.se> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 20a6bfda0f7c6447ac94611736cee6e9ce6972a0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=71f332ce8290baad3530744972d9b69ba733c672 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 29 23:44:25 2024 +0200 avformat/kvag: Check sample_rate Fixes: Division by 0 Fixes: -copyts -start_at_zero -itsoffset 00:00:01 -itsscale 1 -ss 00:00:02 -i zgclab/ffmpeg_crash/poc1 output.mp4 Found-by: Wang Dawei and Zhou Geng, from Zhongguancun Laboratory Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c26a762ea1bf028a33554a5f7a18d8dd7d82f5a8) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6154ffff40180354df2b218e8c5089ae574f5ae5 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sun Apr 28 21:09:45 2024 +0200 avcodec/ac3_parser: Check init_get_bits8() for failure Fixes: CID1420393 Unchecked return value Sponsored-by: Sovereign Tech Fund Reviewed-by: Lynne <d...@lynne.ee> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 63415168dbd96475372e37ae0fd47bafe151e2f0) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e76147a2b33e3df51986490e76bac3ec558501de Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Fri Apr 26 23:22:53 2024 +0200 avcodec/pngdec: Check last AVFrame before deref Fixes: NULL pointer dereference Fixes: 68184/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APNG_fuzzer-4926478069334016 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 091fdce87e88c8622d8af89ffa6cbb0dc20c3816) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ea248645623b95e98e9560ffcb089b7b41ca7ec1 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Sat Apr 27 00:09:02 2024 +0200 avcodec/hevcdec: Check ref frame Fixes: NULL pointer dereferences Fixes: 68197/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-6382538823106560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Andreas Rheinhardt <andreas.rheinha...@outlook.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 5eb05f44503da3fdff82f1fed8ee2706d9841a9a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bff75516c7c019c915eac79ae5f77201225dfdf9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Wed Apr 24 03:20:38 2024 +0200 doc/examples/vaapi_transcode: Simplify loop Fixes: CID1428858(1/2) Logically dead code Sponsored-by: Sovereign Tech Fund Reviewed-by: "myp...@gmail.com" <myp...@gmail.com> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit c9c11a0866d45827201b034349bceb2dc58a3499) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d6b0c6be5922f4f337124f2793c1296a7859813c Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 22 03:09:54 2024 +0200 avfilter/vf_thumbnail_cuda: Set ret before checking it Fixes: CID1418336 Logically dead code Sponsored-by: Sovereign Tech Fund Reviewed-by: Timo Rothenpieler <t...@rothenpieler.org> Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 02301017d28422e4d0a4badb16f2226e70ec534a) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=30a2abba1ee44d52605fa825d8c150c1b4cb8803 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 22 00:57:43 2024 +0200 avfilter/signature_lookup: Dont copy uninitialized stuff around Fixes: CID1403238 Uninitialized pointer read Fixes: CID1403239 Uninitialized pointer read Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit e7174e66ac6025cea4b8e590525314d3aea6a134) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> URL: http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c12e3144caddc46c8f96b38389d3e9f4cadd39d9 Author: Michael Niedermayer <mich...@niedermayer.cc> Date: Mon Apr 22 00:43:19 2024 +0200 avfilter/signature_lookup: Fix 2 differences to the refernce SW Fixes: CID1403227 Division or modulo by float zero Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> (cherry picked from commit 25cb66369e7b81bd280f0bdd6d51a0e2e11881e3) Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> _______________________________________________ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".