Hi Ganesh, On 04.01.2016 06:49, Ganesh Ajjanagadde wrote: > Generally, my strengths are in algorithmic/mathematical/numerical > improvements. I have a strong interest in security (both its > "practical" and "theoretical" variants), but with nowhere near the > same level of knowledge. > > Clarifications: by algorithmic improvements, I do not usually count > asm code, but make exceptions in some cases. In particular, I have > minimal knowledge of assembly and minimal motivation in learning it. > However, I may examine at some point cases where I am convinced that a > compiler can't do the needful. > By theoretical aspects of security, I refer to defensive programming, > some forms of undefined behavior (e.g rint64_clip, many ubsan > failures), and other such things such as those flagged by Coverity. By > practical aspects of security, I refer to things like fuzzing crashes, > other ubsan failures, and other things flagged by Coverity or found by > audit.
If you're interested in fixing some forms of undefined behavior (which?) I can send you a couple of samples triggering them. I have far too many of these to be able to fix them any time soon. Best regards, Andreas _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel