[FFmpeg-cvslog] fate/vvc: Add vvc-frames-with-ltr.vvc
ffmpeg | branch: master | Frank Plowman | Wed Jan 8 11:49:58 2025 +| [cb60b29ac54e46080e1b9f71d50ee87dbf4d625b] | committer: James Almer fate/vvc: Add vvc-frames-with-ltr.vvc This sample is rather difficult, containing a lot of subtle edge cases which revealed errors in the VVC decoder. It covers 88.4% of lines in libavcodec/vvc and brings the line coverage of the entire VVC fate suite from 96.3% to 97.2%. Signed-off-by: Frank Plowman Signed-off-by: James Almer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cb60b29ac54e46080e1b9f71d50ee87dbf4d625b --- tests/fate/vvc.mak | 8 +--- tests/ref/fate/vvc-frames-with-ltr | 25 + 2 files changed, 30 insertions(+), 3 deletions(-) diff --git a/tests/fate/vvc.mak b/tests/fate/vvc.mak index fb176b7745..532bf44e19 100644 --- a/tests/fate/vvc.mak +++ b/tests/fate/vvc.mak @@ -43,11 +43,13 @@ $(VVC_TESTS_10BIT): SCALE_OPTS := -pix_fmt yuv420p10le -vf scale $(VVC_TESTS_444_10BIT): SCALE_OPTS := -pix_fmt yuv444p10le -vf scale fate-vvc-conformance-%: CMD = framecrc -c:v vvc -i $(TARGET_SAMPLES)/vvc-conformance/$(subst fate-vvc-conformance-,,$(@)).bit $(SCALE_OPTS) fate-vvc-output-ref: CMD = framecrc -c:v vvc -i $(TARGET_SAMPLES)/vvc/Hierarchical.bit $(SCALE_OPTS) +fate-vvc-frames-with-ltr: CMD = framecrc -c:v vvc -i $(TARGET_SAMPLES)/vvc/vvc_frames_with_ltr.vvc -pix_fmt yuv420p10le -vf scale FATE_VVC-$(call FRAMECRC, VVC, VVC, VVC_PARSER) += $(VVC_TESTS_8BIT) fate-vvc-output-ref -FATE_VVC-$(call FRAMECRC, VVC, VVC, VVC_PARSER SCALE_FILTER) +=\ -$(VVC_TESTS_10BIT) \ -$(VVC_TESTS_444_10BIT) \ +FATE_VVC-$(call FRAMECRC, VVC, VVC, VVC_PARSER SCALE_FILTER) += \ +$(VVC_TESTS_10BIT) \ +$(VVC_TESTS_444_10BIT) \ +fate-vvc-frames-with-ltr \ FATE_SAMPLES_FFMPEG += $(FATE_VVC-yes) diff --git a/tests/ref/fate/vvc-frames-with-ltr b/tests/ref/fate/vvc-frames-with-ltr new file mode 100644 index 00..357af8e732 --- /dev/null +++ b/tests/ref/fate/vvc-frames-with-ltr @@ -0,0 +1,25 @@ +#tb 0: 1/25 +#media_type 0: video +#codec_id 0: rawvideo +#dimensions 0: 800x872 +#sar 0: 0/1 +0, 0, 0,1, 2092800, 0xce6d9094 +0, 1, 1,1, 2092800, 0x599f9867 +0, 2, 2,1, 2092800, 0x6d068c57 +0, 3, 3,1, 2092800, 0x90e4d43c +0, 4, 4,1, 2092800, 0x0e2c5d62 +0, 5, 5,1, 2092800, 0x4d6c0288 +0, 6, 6,1, 2092800, 0x6334cd3f +0, 7, 7,1, 2092800, 0xd76d4407 +0, 8, 8,1, 2092800, 0x9bbc1e0b +0, 9, 9,1, 2092800, 0xad3851b1 +0, 10, 10,1, 2092800, 0x37876792 +0, 11, 11,1, 2092800, 0x1f55a6b6 +0, 12, 12,1, 2092800, 0x94b37de2 +0, 13, 13,1, 2092800, 0x35e81d80 +0, 14, 14,1, 2092800, 0xa6c0de46 +0, 15, 15,1, 2092800, 0xb1a64e7a +0, 16, 16,1, 2092800, 0xc02796a7 +0, 17, 17,1, 2092800, 0x30ab91c4 +0, 18, 18,1, 2092800, 0xe480a19f +0, 19, 19,1, 2092800, 0x2818666d ___ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avformat/mxfdec: Check edit_unit for being larger than signed 64bit
ffmpeg | branch: master | Michael Niedermayer | Sun Dec 1 03:53:42 2024 +0100| [f7cc023f06c42fce8652b8d8f8cf981d36aeed2e] | committer: Michael Niedermayer avformat/mxfdec: Check edit_unit for being larger than signed 64bit Fixes: signed integer overflow: 2 * -4962931467012268000 cannot be represented in type 'long' Fixes: 376496313/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-4921469185884160 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f7cc023f06c42fce8652b8d8f8cf981d36aeed2e --- libavformat/mxfdec.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavformat/mxfdec.c b/libavformat/mxfdec.c index 1bae523c2a..02db8d4cb3 100644 --- a/libavformat/mxfdec.c +++ b/libavformat/mxfdec.c @@ -1928,6 +1928,8 @@ static int mxf_edit_unit_absolute_offset(MXFContext *mxf, MXFIndexTable *index_t // clamp to actual range of index index_end = av_sat_add64(last_segment->index_start_position, last_segment->index_duration); edit_unit = FFMAX(FFMIN(edit_unit, index_end), first_segment->index_start_position); +if (edit_unit < 0) +return AVERROR_PATCHWELCOME; // guess which table segment this edit unit is in // saturation is fine since it's just a guess ___ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avcodec/osq: Fixes several undefined overflows in do_decode()
ffmpeg | branch: master | Michael Niedermayer | Sun Dec 1 03:31:56 2024 +0100| [0f511b4518fa4337f603275f865eb13ac5520d0f] | committer: Michael Niedermayer avcodec/osq: Fixes several undefined overflows in do_decode() Fixes: signed integer overflow: 1239596184 + 2119376059 cannot be represented in type 'int' Fixes: 376136844/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_OSQ_fuzzer-6581164455821312 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0f511b4518fa4337f603275f865eb13ac5520d0f --- libavcodec/osq.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/libavcodec/osq.c b/libavcodec/osq.c index 1bf6264699..83b4a9d618 100644 --- a/libavcodec/osq.c +++ b/libavcodec/osq.c @@ -300,7 +300,7 @@ static int do_decode(AVCodecContext *avctx, AVFrame *frame, int decorrelate, int dst[n] += (int)(P2 + P3) / 2 + (unsigned)p; break; case 8: -dst[n] += (int)(P2 + P3) / 2; +dst[n] += (int)(P2 + P3) / 2 + 0U; break; case 9: dst[n] += (int)(P2 * 2 + P3) / 3 + (unsigned)p; @@ -309,13 +309,13 @@ static int do_decode(AVCodecContext *avctx, AVFrame *frame, int decorrelate, int dst[n] += (int)(P2 + P3 * 2) / 3 + (unsigned)p; break; case 11: -dst[n] += (int)((unsigned)dst[A] + dst[B]) / 2; +dst[n] += (int)((unsigned)dst[A] + dst[B]) / 2 + 0U; break; case 12: dst[n] += (unsigned)dst[B]; break; case 13: -dst[n] += (int)(unsigned)(dst[D] + dst[B]) / 2; +dst[n] += (int)((unsigned)dst[D] + dst[B]) / 2 + 0U; break; case 14: dst[n] += (int)((unsigned)P2 + dst[A]) / 2 + (unsigned)p; ___ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] swscale/output: Fix undefined overflow in yuv2rgba64_full_X_c_template()
ffmpeg | branch: master | Michael Niedermayer | Sun
Dec 1 03:25:09 2024 +0100| [56faee21c136942c491f30a2e82cfbbfce180beb] |
committer: Michael Niedermayer
swscale/output: Fix undefined overflow in yuv2rgba64_full_X_c_template()
Fixes: signed integer overflow: -1082982400 + -1195645138 cannot be represented
in type 'int'
Fixes:
376136843/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-4791844321427456
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=56faee21c136942c491f30a2e82cfbbfce180beb
---
libswscale/output.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/libswscale/output.c b/libswscale/output.c
index 8407cc0abb..21c3bdc307 100644
--- a/libswscale/output.c
+++ b/libswscale/output.c
@@ -1355,9 +1355,9 @@ yuv2rgba64_full_X_c_template(SwsInternal *c, const
int16_t *lumFilter,
B =U * c->yuv2rgb_u2b_coeff;
// 8bit: 30 - 22 = 8bit, 16bit: 30bit - 14 = 16bit
-output_pixel(&dest[0], av_clip_uintp2(((R_B + Y)>>14) + (1<<15), 16));
-output_pixel(&dest[1], av_clip_uintp2((( G + Y)>>14) + (1<<15), 16));
-output_pixel(&dest[2], av_clip_uintp2(((B_R + Y)>>14) + (1<<15), 16));
+output_pixel(&dest[0], av_clip_uintp2(((int)(R_B + (unsigned)Y)>>14) +
(1<<15), 16));
+output_pixel(&dest[1], av_clip_uintp2(((int)( G + (unsigned)Y)>>14) +
(1<<15), 16));
+output_pixel(&dest[2], av_clip_uintp2(((int)(B_R + (unsigned)Y)>>14) +
(1<<15), 16));
if (eightbytes) {
output_pixel(&dest[3], av_clip_uintp2(A, 30) >> 14);
dest += 4;
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avfilter/af_pan: Fix sscanf() use
ffmpeg | branch: master | Michael Niedermayer | Mon
Jan 6 22:01:39 2025 +0100| [b5b6391d64807578ab872dc58fb8aa621dcfc38a] |
committer: Michael Niedermayer
avfilter/af_pan: Fix sscanf() use
Fixes: Memory Data Leak
Found-by: Simcha Kosman
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b5b6391d64807578ab872dc58fb8aa621dcfc38a
---
libavfilter/af_pan.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavfilter/af_pan.c b/libavfilter/af_pan.c
index 0d20b0307b..5feb2439c7 100644
--- a/libavfilter/af_pan.c
+++ b/libavfilter/af_pan.c
@@ -196,7 +196,7 @@ static av_cold int init(AVFilterContext *ctx)
sign = 1;
while (1) {
gain = 1;
-if (sscanf(arg, "%lf%n *%n", &gain, &len, &len))
+if (sscanf(arg, "%lf%n *%n", &gain, &len, &len) >= 1)
arg += len;
if (parse_channel_name(&arg, &in_ch_id, &named)){
av_log(ctx, AV_LOG_ERROR,
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avcodec/aacsbr_template: Clear n_q on error
ffmpeg | branch: master | Michael Niedermayer | Sun
Dec 1 22:27:18 2024 +0100| [3f029bfb7f9ca1c73fecb8d0eacf3c4e0550f771] |
committer: Michael Niedermayer
avcodec/aacsbr_template: Clear n_q on error
Fixes: index 5 out of bounds for type 'uint8_t [5]'
Fixes:
377748135/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5167109774049280
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3f029bfb7f9ca1c73fecb8d0eacf3c4e0550f771
---
libavcodec/aacsbr_template.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/libavcodec/aacsbr_template.c b/libavcodec/aacsbr_template.c
index 436b549fe7..9fae44d9a5 100644
--- a/libavcodec/aacsbr_template.c
+++ b/libavcodec/aacsbr_template.c
@@ -599,6 +599,7 @@ static int sbr_make_f_derived(AACDecContext *ac,
SpectralBandReplication *sbr)
if (sbr->n_q > 5) {
av_log(ac->avctx, AV_LOG_ERROR, "Too many noise floor scale factors:
%d\n", sbr->n_q);
+sbr->n_q = 1;
return -1;
}
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avformat/iamf_parse: Check output_channel_count
ffmpeg | branch: master | Michael Niedermayer | Sun Dec 1 21:40:43 2024 +0100| [4485a0fd77c50157feb308090d84b52cd84e80a2] | committer: Michael Niedermayer avformat/iamf_parse: Check output_channel_count Fixes: -nan is outside the range of representable values of type 'int' Fixes: 377072730/clusterfuzz-testcase-minimized-ffmpeg_dem_IAMF_fuzzer-6545416570601472 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4485a0fd77c50157feb308090d84b52cd84e80a2 --- libavformat/iamf_parse.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/iamf_parse.c b/libavformat/iamf_parse.c index 2394536f72..7cf27651ee 100644 --- a/libavformat/iamf_parse.c +++ b/libavformat/iamf_parse.c @@ -422,7 +422,7 @@ static int ambisonics_config(void *s, AVIOContext *pb, output_channel_count = avio_r8(pb); // C substream_count = avio_r8(pb); // N -if (audio_element->nb_substreams != substream_count) +if (audio_element->nb_substreams != substream_count || output_channel_count == 0) return AVERROR_INVALIDDATA; order = floor(sqrt(output_channel_count - 1)); ___ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] tools/target_dec_fuzzer: Adjust threshold for MSCC
ffmpeg | branch: master | Michael Niedermayer | Sun
Dec 1 22:08:28 2024 +0100| [695b7c71d999f55a61d65790c149c200ee2b5251] |
committer: Michael Niedermayer
tools/target_dec_fuzzer: Adjust threshold for MSCC
Fixes: Timeout
Fixes:
377574369/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MSCC_fuzzer-4924697608781824
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=695b7c71d999f55a61d65790c149c200ee2b5251
---
tools/target_dec_fuzzer.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c
index 70bb8e8f9f..b3be69f94d 100644
--- a/tools/target_dec_fuzzer.c
+++ b/tools/target_dec_fuzzer.c
@@ -267,6 +267,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t
size) {
case AV_CODEC_ID_MOTIONPIXELS:maxpixels /= 256; break;
case AV_CODEC_ID_MP4ALS: maxsamples /= 65536; break;
case AV_CODEC_ID_MSA1:maxpixels /= 16384; break;
+case AV_CODEC_ID_MSCC:maxpixels /= 4096; break;
case AV_CODEC_ID_MSRLE: maxpixels /= 16;break;
case AV_CODEC_ID_MSS2:maxpixels /= 16384; break;
case AV_CODEC_ID_MSZH:maxpixels /= 128; break;
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avfilter/vf_addroi: Add missing NULL termination to addroi_var_names[]()
ffmpeg | branch: master | Michael Niedermayer | Sun
Jan 5 02:36:25 2025 +0100| [b72de492959fb19eab37368232e65a4371c367f7] |
committer: Michael Niedermayer
avfilter/vf_addroi: Add missing NULL termination to addroi_var_names[]()
Fixes: out of array read
Found-by: Elias Myllymäki
Reviewed-by: Alexander Strasser
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b72de492959fb19eab37368232e65a4371c367f7
---
libavfilter/vf_addroi.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/libavfilter/vf_addroi.c b/libavfilter/vf_addroi.c
index de857eced4..d6765e9d8c 100644
--- a/libavfilter/vf_addroi.c
+++ b/libavfilter/vf_addroi.c
@@ -39,6 +39,7 @@ enum {
static const char *const addroi_var_names[] = {
"iw",
"ih",
+NULL,
};
typedef struct AddROIContext {
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avfilter/vf_grayworld: Use the correct pointer for av_log()
ffmpeg | branch: master | Michael Niedermayer | Mon
Jan 6 05:06:10 2025 +0100| [9ffa127aa6853790acb40004fbab97f13ff4c72e] |
committer: Michael Niedermayer
avfilter/vf_grayworld: Use the correct pointer for av_log()
Fixes: crash
Found-by: Elias Myllymäki
Reviewed-by: Alexander Strasser
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9ffa127aa6853790acb40004fbab97f13ff4c72e
---
libavfilter/vf_grayworld.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/libavfilter/vf_grayworld.c b/libavfilter/vf_grayworld.c
index a6a51dcb7d..91b097a4b8 100644
--- a/libavfilter/vf_grayworld.c
+++ b/libavfilter/vf_grayworld.c
@@ -266,10 +266,10 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *in)
}
/* input and output transfer will be linear */
if (in->color_trc == AVCOL_TRC_UNSPECIFIED) {
-av_log(s, AV_LOG_WARNING, "Untagged transfer, assuming linear
light.\n");
+av_log(ctx, AV_LOG_WARNING, "Untagged transfer, assuming linear
light.\n");
out->color_trc = AVCOL_TRC_LINEAR;
} else if (in->color_trc != AVCOL_TRC_LINEAR) {
-av_log(s, AV_LOG_WARNING, "Gray world color correction works on linear
light only.\n");
+av_log(ctx, AV_LOG_WARNING, "Gray world color correction works on
linear light only.\n");
}
td.in = in;
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] tools/target_dec_fuzzer: Adjust threshold for TDSC
ffmpeg | branch: master | Michael Niedermayer | Sun
Dec 1 03:37:47 2024 +0100| [4bd9b5f52057915033a0cefeb9749ea99c301c6a] |
committer: Michael Niedermayer
tools/target_dec_fuzzer: Adjust threshold for TDSC
Fixes: Timeout
Fixes:
376320337/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TDSC_fuzzer-6259585758855168
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4bd9b5f52057915033a0cefeb9749ea99c301c6a
---
tools/target_dec_fuzzer.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c
index 1e5811e772..98a4921d90 100644
--- a/tools/target_dec_fuzzer.c
+++ b/tools/target_dec_fuzzer.c
@@ -303,6 +303,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t
size) {
case AV_CODEC_ID_SRGC:maxpixels /= 128; break;
case AV_CODEC_ID_TARGA: maxpixels /= 128; break;
case AV_CODEC_ID_TAK: maxsamples /= 1024; break;
+case AV_CODEC_ID_TDSC:maxpixels /= 128; break;
case AV_CODEC_ID_TGV: maxpixels /= 32;break;
case AV_CODEC_ID_THEORA: maxpixels /= 16384; break;
case AV_CODEC_ID_TQI: maxpixels /= 1024; break;
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] tools/target_dec_fuzzer: Adjust threshold for VP6
ffmpeg | branch: master | Michael Niedermayer | Sun
Dec 1 13:50:53 2024 +0100| [70514ff0ecf5762ff355a59cbdc0ef18bc5b4a4f] |
committer: Michael Niedermayer
tools/target_dec_fuzzer: Adjust threshold for VP6
Fixes: Timeout (would need 62sec)
Fixes:
376731123/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VP6_fuzzer-5926437896388608
Found-by: continuous fuzzing process
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=70514ff0ecf5762ff355a59cbdc0ef18bc5b4a4f
---
tools/target_dec_fuzzer.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/tools/target_dec_fuzzer.c b/tools/target_dec_fuzzer.c
index 98a4921d90..70bb8e8f9f 100644
--- a/tools/target_dec_fuzzer.c
+++ b/tools/target_dec_fuzzer.c
@@ -319,6 +319,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t
size) {
case AV_CODEC_ID_VP3: maxpixels /= 4096; break;
case AV_CODEC_ID_VP4: maxpixels /= 4096; break;
case AV_CODEC_ID_VP5: maxpixels /= 256; break;
+case AV_CODEC_ID_VP6: maxpixels /= 4096; break;
case AV_CODEC_ID_VP6F:maxpixels /= 4096; break;
case AV_CODEC_ID_VP6A:maxpixels /= 4096; break;
case AV_CODEC_ID_VP7: maxpixels /= 256; break;
___
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
[FFmpeg-cvslog] avcodec/vc1dec: Clear block_index in vc1_decode_reset()
ffmpeg | branch: master | Michael Niedermayer | Sun Dec 1 23:30:55 2024 +0100| [251de1791e645f16e80b09d82999d4a5e24b1ad1] | committer: Michael Niedermayer avcodec/vc1dec: Clear block_index in vc1_decode_reset() Fixes: 377965565/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VC1_fuzzer-4504434689769472 Fixes: out of array access Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=251de1791e645f16e80b09d82999d4a5e24b1ad1 --- libavcodec/vc1dec.c | 1 + 1 file changed, 1 insertion(+) diff --git a/libavcodec/vc1dec.c b/libavcodec/vc1dec.c index 5f1a5bd437..2c314e7b55 100644 --- a/libavcodec/vc1dec.c +++ b/libavcodec/vc1dec.c @@ -788,6 +788,7 @@ static av_cold void vc1_decode_reset(AVCodecContext *avctx) for (i = 0; i < 4; i++) av_freep(&v->sr_rows[i >> 1][i & 1]); ff_mpv_common_end(&v->s); +memset(v->s.block_index, 0, sizeof(v->s.block_index)); av_freep(&v->mv_type_mb_plane); av_freep(&v->direct_mb_plane); av_freep(&v->forward_mb_plane); ___ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog To unsubscribe, visit link above, or email ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
