[FFmpeg-cvslog] avformat/hlsenc: donnot show duplicate segment warning at byterange mode

ffmpeg | branch: master | Steven Liu | Mon Jun 19 10:35:41 2017 +0800| [3996ae930256f5c387f2d2e46908b7c433efc588] | committer: Steven Liu avformat/hlsenc: donnot show duplicate segment warning at byterange mode When the hlsenc at BYTERANGE mode, it should not show the warning message: "Duplica

[FFmpeg-cvslog] x86/aacpsdsp: add ff_ps_hybrid_analysis_ileave_sse

ffmpeg | branch: master | James Almer | Mon Jun 12 19:27:29 2017 -0300| [8bb59e6742eeb00a418e49ef8ea601d1d637e51a] | committer: James Almer x86/aacpsdsp: add ff_ps_hybrid_analysis_ileave_sse About 2x faster than the c version. > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8bb59e6

[FFmpeg-cvslog] x86/aacpsdsp: add ff_ps_hybrid_synthesis_deint_{sse,sse4}

ffmpeg | branch: master | James Almer | Sun Jun 18 22:33:27 2017 -0300| [e229df9478b2c6d476ea44d0e492609d4ab4e0c5] | committer: James Almer x86/aacpsdsp: add ff_ps_hybrid_synthesis_deint_{sse,sse4} About 2x faster than the c version. > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=

[FFmpeg-cvslog] avformat/oggenc: add ogg_init() and ogg_free()

ffmpeg | branch: master | James Almer | Sun May 28 17:07:06 2017 -0300| [3c5a53cdfa099bba8bd951f95b85727b4b3b5d68] | committer: James Almer avformat/oggenc: add ogg_init() and ogg_free() Reviewed-by: Michael Niedermayer Signed-off-by: James Almer > http://git.videolan.org/gitweb.cgi/ffmpeg.g

[FFmpeg-cvslog] fate: use do_md5sum instead of the md5 protocol for most md5 fate tests

ffmpeg | branch: master | Marton Balint | Fri Jun 16 22:08:02 2017 +0200| [7ed6f9168b7fd13915e19b5cb1ed599c1a2d6d31] | committer: Marton Balint fate: use do_md5sum instead of the md5 protocol for most md5 fate tests The md5 protocol has no seek support, but some tests use seeks. This changes t

[FFmpeg-cvslog] avfilter/af_amix: fix possible hang

ffmpeg | branch: master | Paul B Mahol | Sun Jun 18 18:38:36 2017 +0200| [478a1949d92002969786d1422f9f860d8d6456de] | committer: Paul B Mahol avfilter/af_amix: fix possible hang Fixes #6424. Signed-off-by: Paul B Mahol > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=478a1949d9200

[FFmpeg-cvslog] vf_hwmap: Properly free a locally derived device

ffmpeg | branch: master | Mark Thompson | Fri Jun 16 23:11:51 2017 +0100| [70808859ddf4c636472b56f5ec637c4754276867] | committer: Mark Thompson vf_hwmap: Properly free a locally derived device Fixes CID 1412853. (cherry picked from commit a670eea56087d0ecd4fbeccf3a9beb9110b7031f) > http://gi

[FFmpeg-cvslog] avconv_hw: Free device on initialisation failure

ffmpeg | branch: master | Mark Thompson | Fri Jun 16 23:18:55 2017 +0100| [f434ddf48e084a7a5631e7a9dd1d9771d97e114c] | committer: Mark Thompson avconv_hw: Free device on initialisation failure Fixes CID 1412852. (cherry picked from commit c2b0bea40f1fd4399ff6184a2df4f397c0f4b3ab) > http://gi

[FFmpeg-cvslog] vf_hwmap: Add missing error code

ffmpeg | branch: master | Mark Thompson | Fri Jun 16 23:08:47 2017 +0100| [d984b29b21f6442fb6a809c08c07533dd496b1f9] | committer: Mark Thompson vf_hwmap: Add missing error code Fixes CID 1412854. (cherry picked from commit 5635c80bf59d90e63ede473e2c014647850a8446) > http://git.videolan.org/g

[FFmpeg-cvslog] libavfilter/af_biquads: add shorter option for width_type

ffmpeg | branch: master | Paul B Mahol | Sun Jun 18 17:31:03 2017 +0200| [a23a56e77c0c2059f27baa194abc3213aee8825f] | committer: Paul B Mahol libavfilter/af_biquads: add shorter option for width_type Signed-off-by: Paul B Mahol > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a23a5

[FFmpeg-cvslog] Update for 3.1.9

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 18 15:41:44 2017 +0200| [dcace98d085bb0993eebc8ee1112be3f1e3f4a07] | committer: Michael Niedermayer Update for 3.1.9 Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dcace98d085bb0993ee

[FFmpeg-cvslog] avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 17 15:06:21 2017 +0200| [575ba21007872ef481b6fe54142fe4f476fb72c4] | committer: Michael Niedermayer avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows Fixes: runtime error: signed integer overflow: 580

[FFmpeg-cvslog] avcodec/truemotion2: Move skip computation after checks

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 15 23:41:46 2017 +0200| [cfaa5affadd538b0bce37389d38df4a58f7589a6] | committer: Michael Niedermayer avcodec/truemotion2: Move skip computation after checks Fixes: runtime error: signed integer overflow: 630067357 * 4 cannot be repre

[FFmpeg-cvslog] avcodec/hevcpred_template: Fix left shift of negative value

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 17 14:54:19 2017 +0200| [2d0fd04f1619d98738fa5a06d2f7e486ca7badaf] | committer: Michael Niedermayer avcodec/hevcpred_template: Fix left shift of negative value Fixes: runtime error: left shift of negative value -1 Fixes: 2250/cluster

[FFmpeg-cvslog] avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 18 14:37:19 2017 +0200| [8a38efad428f9e8bdea69c0a8d706ffb1de87ad5] | committer: Michael Niedermayer avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output Fixes: runtime error: signed integer overflow: 2147483543 + 128 c

[FFmpeg-cvslog] avcodec/jpeg2000dec: Check nonzerobits more completely

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 16 19:57:08 2017 +0200| [d51d7b0971443f17d3ca598fd6d83ade6785f442] | committer: Michael Niedermayer avcodec/jpeg2000dec: Check nonzerobits more completely Fixes: runtime error: shift exponent 36 is too large for 32-bit type 'int' Fix

[FFmpeg-cvslog] avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 17 00:34:08 2017 +0200| [10dc2c48ed0424a3a895e85cb4aa3bdc605bc10d] | committer: Michael Niedermayer avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps() Fixes: runtime error: signed integer overflow: 2147483647 + 6 cannot

[FFmpeg-cvslog] avcodec/hevc_refs: Check nb_refs in add_candidate_ref()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 15 01:26:01 2017 +0200| [8d0c353b733bb36919b7c2ec7ae92d75d28196ed] | committer: Michael Niedermayer avcodec/hevc_refs: Check nb_refs in add_candidate_ref() Fixes: runtime error: index 16 out of bounds for type 'int [16]' Fixes: 2209/

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jun 14 23:49:23 2017 +0200| [c19fd272482ec0c74e53486e473b0b9b1b68184f] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case Fixes: runtime error: signed integer overflow: 131072

[FFmpeg-cvslog] avcodec/mpeg4videodec: Check sprite delta upshift against overflowing.

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jun 14 23:55:17 2017 +0200| [5d609474f3b5196f33204dc572cf4914d88cda2e] | committer: Michael Niedermayer avcodec/mpeg4videodec: Check sprite delta upshift against overflowing. Fixes: runtime error: signed integer overflow: -268386304 * 16

[FFmpeg-cvslog] avcodec/shorten: Sanity check maxnlpc

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 9 02:16:54 2017 +0200| [37c77f74c277631463fe7e82e54bae5efdc48bee] | committer: Michael Niedermayer avcodec/shorten: Sanity check maxnlpc Fixes OOM Fixes: 2131/clusterfuzz-testcase-minimized-4718045157130240 Found-by: continuous fuz

[FFmpeg-cvslog] avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 15 23:26:18 2017 +0200| [3e6b7d5802f1e218f2462628489e6ffba1024bed] | committer: Michael Niedermayer avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2() Fixes: runtime error: negation of -2147483648 cannot be represe

[FFmpeg-cvslog] avcodec/hevcdec: Check nb_sps

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 15 01:28:28 2017 +0200| [2d7e26277a7b0a349e8c789357924a6659a8eb5f] | committer: Michael Niedermayer avcodec/hevcdec: Check nb_sps Signed-off-by: Michael Niedermayer (cherry picked from commit bc406744620710911de9157eafa3e61d0246566f

[FFmpeg-cvslog] avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 13 16:25:59 2017 +0200| [fe3fcc551d710e0a7207322e02ba7974f0d1c293] | committer: Michael Niedermayer avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble() Fixes: runtime error: shift exponent -10 is negative Found-by: continuous fuz

[FFmpeg-cvslog] avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 13 13:28:23 2017 +0200| [fc5bbdf2c5ab27d71a282b336383eb3d775d7037] | committer: Michael Niedermayer avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible Fixes: 1775/clusterfuzz-testcase-minimi

[FFmpeg-cvslog] avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 20:28:46 2017 +0200| [3a3c32ea1f81e3364bf693926e9c88ddde659f05] | committer: Michael Niedermayer avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123 Fixes: 2208/clusterfuzz-testcase-minimized-5976593765761024

[FFmpeg-cvslog] avcodec/tiff: Fix leak of geotags[].val

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 01:05:26 2017 +0200| [427ee58d613a6d8a011f237cf4e11ee7dbe63018] | committer: Michael Niedermayer avcodec/tiff: Fix leak of geotags[].val Fixes: 2176/clusterfuzz-testcase-minimized-5908197216878592 Found-by: continuous fuzzing pro

[FFmpeg-cvslog] avcodec/cfhd: Check band parameters before storing them

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 10 18:45:08 2017 +0200| [f263c4687f60c489d7086bbd4a58d1bb279fde80] | committer: Michael Niedermayer avcodec/cfhd: Check band parameters before storing them Fixes out of array read Fixes: 2169/clusterfuzz-testcase-minimized-5688641642

[FFmpeg-cvslog] avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 00:45:20 2017 +0200| [9f5ada68805113d96b26ec0eee7748714a7910d4] | committer: Michael Niedermayer avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int' Fixes: 2175/clusterfu

[FFmpeg-cvslog] avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 10 19:43:25 2017 +0200| [4f2aaccff0ecc3a0b5f3c1791c7bb5837ae3f602] | committer: Michael Niedermayer avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int' Fixes: 2174/cluster

[FFmpeg-cvslog] avcodec/snowdec: Fix runtime error: left shift of negative value -1

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 14:34:54 2017 +0200| [afc6d2242cbc29bd027283aa0e003357d867c1e0] | committer: Michael Niedermayer avcodec/snowdec: Fix runtime error: left shift of negative value -1 Fixes: 2197/clusterfuzz-testcase-minimized-6010716676947968 Foun

[FFmpeg-cvslog] avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 20:19:59 2017 +0200| [562690a7f73e371ffe2532f23e90b664c9380619] | committer: Michael Niedermayer avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int' Fixes: 2181/

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 11 14:32:35 2017 +0200| [7927112377b5f1be313e69fb05b74898ba194b4a] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616 Fixes: 2195/clusterfuzz-testcase-minimized-47367215330

[FFmpeg-cvslog] avcodec/pafvideo: Fix assertion failure

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 6 16:21:37 2017 +0200| [fb1d3fb1e5afacafff805a0e948c5cd3a4290ba5] | committer: Michael Niedermayer avcodec/pafvideo: Fix assertion failure Fixes: 2100/clusterfuzz-testcase-minimized-4522961547558912 Found-by: continuous fuzzing pro

[FFmpeg-cvslog] avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 8 13:44:32 2017 +0200| [cd16f4cf4b08d46b1284768522be4b71ae6fc71e] | committer: Michael Niedermayer avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int' Fixes:

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 6 16:28:57 2017 +0200| [faa104541d36fa081cc56eeb8eb679e956fad54d] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int' Fixes: 2106/clu

[FFmpeg-cvslog] avcodec/indeo4: Check remaining data in Pic hdr extension parsing code

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 8 13:58:47 2017 +0200| [26afadbd29359dea996d7fb2fd647bf9cbb59584] | committer: Michael Niedermayer avcodec/indeo4: Check remaining data in Pic hdr extension parsing code Fixes: Timeout Fixes: 2115/clusterfuzz-testcase-minimized-6594

[FFmpeg-cvslog] avcodec/takdec: Fix multiple runtime error: signed integer overflow: 637072 * 4096 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 6 16:01:16 2017 +0200| [e8aa646e4a23a77a7b47ff6c563092a95c1c258a] | committer: Michael Niedermayer avcodec/takdec: Fix multiple runtime error: signed integer overflow: 637072 * 4096 cannot be represented in type 'int' Fixes: 2079/c

[FFmpeg-cvslog] avcodec/mjpegdec: Check that reference frame matches the current frame

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon Jun 5 22:23:15 2017 +0200| [79f0677332c3ca619b6bd192df13106a6235378e] | committer: Michael Niedermayer avcodec/mjpegdec: Check that reference frame matches the current frame Fixes: out of array read Fixes: 2097/clusterfuzz-testcase-mini

[FFmpeg-cvslog] avutil/softfloat: Fix sign error in and improve documentation of av_int2sf()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 20:45:09 2017 +0200| [1f4da7c38460e42e43a22d461b74d6f7dfcb4d8c] | committer: Michael Niedermayer avutil/softfloat: Fix sign error in and improve documentation of av_int2sf() Signed-off-by: Michael Niedermayer (cherry picked from

[FFmpeg-cvslog] avformat/hls: Check local file extensions

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 3 21:20:04 2017 +0200| [e0a3b8670d27863bfe6175b383918a5516a6bc42] | committer: Michael Niedermayer avformat/hls: Check local file extensions This reduces the attack surface of local file-system information leaking. It prevents the

[FFmpeg-cvslog] avcodec/dxv: Check remaining bytes in dxv_decompress_raw()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 15:41:18 2017 +0200| [0ad5a36b8b7a08c24dca4f1505922aa1efc8c117] | committer: Michael Niedermayer avcodec/dxv: Check remaining bytes in dxv_decompress_raw() Fixes: Timeout Fixes: 2006/clusterfuzz-testcase-minimized-5766515037044736

[FFmpeg-cvslog] avcodec/cavs: Fix runtime error: signed integer overflow: -12648062 * 256 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon Jun 5 19:33:56 2017 +0200| [bcf63142d1596095d3ae72bd8a8807bc77f500b2] | committer: Michael Niedermayer avcodec/cavs: Fix runtime error: signed integer overflow: -12648062 * 256 cannot be represented in type 'int' Fixes: 2067/clusterfuz

[FFmpeg-cvslog] avcodec/qdrw: Fix null pointer dereference

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 21:37:47 2017 +0200| [6f49b9a6881349601e6ab41a2eaedadc90dbb02d] | committer: Michael Niedermayer avcodec/qdrw: Fix null pointer dereference The RGB555 PACKBITSRGN case tries to read a palette, if such palette is actually stored th

[FFmpeg-cvslog] avcodec/tiff: Avoid loosing allocated geotag values

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon Jun 5 20:39:21 2017 +0200| [42b26b41a4e626fc9dbcb5e897a21729b2c85c87] | committer: Michael Niedermayer avcodec/tiff: Avoid loosing allocated geotag values Fixes memleak Fixes: 2076/clusterfuzz-testcase-minimized-6542640243802112 Found-

[FFmpeg-cvslog] avcodec/hevc_ps: Fix runtime error: index 32 out of bounds for type 'uint8_t [32]'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 17:06:27 2017 +0200| [278b8d18ad297b0841a22f9f6aca5efe0c33eb6f] | committer: Michael Niedermayer avcodec/hevc_ps: Fix runtime error: index 32 out of bounds for type 'uint8_t [32]' Fixes: 2010/clusterfuzz-testcase-minimized-620928

[FFmpeg-cvslog] avcodec/pafvideo: Check packet size and frame code before ff_reget_buffer()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 13:38:02 2017 +0200| [e04d3aadc01f905a774c143073bb38683ce93161] | committer: Michael Niedermayer avcodec/pafvideo: Check packet size and frame code before ff_reget_buffer() Fixes 1745/clusterfuzz-testcase-minimized-616069336557158

[FFmpeg-cvslog] avformat/options: log filename on open

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 2 14:47:16 2017 +0200| [6af15d2d896dc4a909a1d80d70d227f96730f3a2] | committer: Michael Niedermayer avformat/options: log filename on open The loglevel is choosen so that the main filename and any images of multi image sequences are

[FFmpeg-cvslog] avcodec/wavpack: Fix runtime error: shift exponent 32 is too large for 32-bit type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 1 18:48:37 2017 +0200| [3ecefcabe076578b8e31217043af578cfac0a682] | committer: Michael Niedermayer avcodec/wavpack: Fix runtime error: shift exponent 32 is too large for 32-bit type 'int' Fixes: 1967/clusterfuzz-testcase-minimized-

[FFmpeg-cvslog] avcodec/ac3dec_fixed: Fix runtime error: left shift of 419 by 23 places cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 4 13:02:51 2017 +0200| [80d39a5bb34dff46de36c243cf4394a8508d9377] | committer: Michael Niedermayer avcodec/ac3dec_fixed: Fix runtime error: left shift of 419 by 23 places cannot be represented in type 'int' Fixes: 1352/clusterfuzz-

[FFmpeg-cvslog] avcodec/aacps: Fix runtime error: left shift of 1073741824 by 1 places cannot be represented in type 'INTFLOAT' (aka 'int')

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 2 22:31:02 2017 +0200| [cc6eec316e2a49c255f068821c6de497b2e3f1c1] | committer: Michael Niedermayer avcodec/aacps: Fix runtime error: left shift of 1073741824 by 1 places cannot be represented in type 'INTFLOAT' (aka 'int') Fixes: 2

[FFmpeg-cvslog] avcodec/wavpack: Fix runtime error: signed integer overflow: 2013265955 - -134217694 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 22:53:02 2017 +0200| [4007ba9833cb0725124f22147ca0523857ff5982] | committer: Michael Niedermayer avcodec/wavpack: Fix runtime error: signed integer overflow: 2013265955 - -134217694 cannot be represented in type 'int' Fixes: 1922

[FFmpeg-cvslog] avcodec/cinepak: Check input packet size before frame reallocation

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 22:18:23 2017 +0200| [89b2e25e138d3cf7e1651ded171c9c7cbfff00ad] | committer: Michael Niedermayer avcodec/cinepak: Check input packet size before frame reallocation Reduces time spend decoding 1917/clusterfuzz-testcase-minimized-50

[FFmpeg-cvslog] avcodec/hevc_ps: Fix runtime error: signed integer overflow: 2147483628 + 256 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 22:02:07 2017 +0200| [317690375e78904e8bd11f4c0f46d8ddf29a8b65] | committer: Michael Niedermayer avcodec/hevc_ps: Fix runtime error: signed integer overflow: 2147483628 + 256 cannot be represented in type 'int' Fixes: 1909/cluste

[FFmpeg-cvslog] avcodec/ra144: Fixes runtime error: signed integer overflow: 7160 * 327138 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 15:52:56 2017 +0200| [6ad05cbad1de2bbdaaeb34fd66931c485ef3e8a5] | committer: Michael Niedermayer avcodec/ra144: Fixes runtime error: signed integer overflow: 7160 * 327138 cannot be represented in type 'int' Fixes: 1908/clusterfu

[FFmpeg-cvslog] avcodec/pnm: Use ff_set_dimensions()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 13:39:45 2017 +0200| [4911902c6f312bd060e2b7d4158a84f0aa7b1db9] | committer: Michael Niedermayer avcodec/pnm: Use ff_set_dimensions() Fixes: OOM Fixes: 1906/clusterfuzz-testcase-minimized-4599315114754048 Found-by: continuous fuz

[FFmpeg-cvslog] avcodec/cavsdec: Fix runtime error: signed integer overflow: 59 + 2147483600 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 31 13:21:58 2017 +0200| [2a55e8bda94375e2d61236c618e2a119b21217b2] | committer: Michael Niedermayer avcodec/cavsdec: Fix runtime error: signed integer overflow: 59 + 2147483600 cannot be represented in type 'int' Fixes: 1903/cluster

[FFmpeg-cvslog] avformat/avidec: Limit formats in gab2 to srt and ass/ssa

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 30 21:29:20 2017 +0200| [39c729c375a67eb87d420e2079a003af6f0c7bf2] | committer: Michael Niedermayer avformat/avidec: Limit formats in gab2 to srt and ass/ssa This prevents part of one exploit leading to an information leak Found-by:

[FFmpeg-cvslog] avcodec/acelp_pitch_delay: Fix runtime error: value 4.83233e+39 is outside the range of representable values of type 'float'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 30 04:03:09 2017 +0200| [276eae8adc95c83ef0717376142af2e2f5b55d17] | committer: Michael Niedermayer avcodec/acelp_pitch_delay: Fix runtime error: value 4.83233e+39 is outside the range of representable values of type 'float' Fixes:

[FFmpeg-cvslog] avcodec/wavpack: Check float_shift

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 30 03:13:21 2017 +0200| [ea70971cbe9ffd23cfd0bf519280a131097f8979] | committer: Michael Niedermayer avcodec/wavpack: Check float_shift Fixes: runtime error: shift exponent 40 is too large for 32-bit type 'unsigned int' Fixes: 1898/c

[FFmpeg-cvslog] avcodec/truemotion2: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 21:54:02 2017 +0200| [e561676c55aa9d3745b5e30b41693a179cbee8d2] | committer: Michael Niedermayer avcodec/truemotion2: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes part of: 1888/cluster

[FFmpeg-cvslog] avcodec/wavpack: Fix runtime error: signed integer overflow: 24 * -2147483648 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 30 03:09:11 2017 +0200| [64168825dec02348010bce8ee664b2bdb6d66007] | committer: Michael Niedermayer avcodec/wavpack: Fix runtime error: signed integer overflow: 24 * -2147483648 cannot be represented in type 'int' Fixes: 1894/cluste

[FFmpeg-cvslog] avcodec/ra144: Fix runtime error: signed integer overflow: -2449 * 1398101 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 21:44:32 2017 +0200| [b31bb8a6142cea7a4e84450fe8c1dec8ee8eab4f] | committer: Michael Niedermayer avcodec/ra144: Fix runtime error: signed integer overflow: -2449 * 1398101 cannot be represented in type 'int' Fixes: 1885/clusterfu

[FFmpeg-cvslog] avcodec/jpeg2000dec: Use ff_set_dimensions()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon May 29 13:45:29 2017 +0200| [4ba6f68b27c2668943982d04c8bc624504c8375b] | committer: Michael Niedermayer avcodec/jpeg2000dec: Use ff_set_dimensions() Fixes: OOM Fixes: 1890/clusterfuzz-testcase-minimized-6329019509243904 Found-by: contin

[FFmpeg-cvslog] avcodec/ansi: Fix frame memleak

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon May 29 14:07:33 2017 +0200| [f11bc174292fc6cea5aa35b25572eb45b057d236] | committer: Michael Niedermayer avcodec/ansi: Fix frame memleak Fixes: 1892/clusterfuzz-testcase-minimized-4519341733183488 Found-by: continuous fuzzing process ht

[FFmpeg-cvslog] avcodec/truemotion2: Fix passing null pointer to memset()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 21:54:02 2017 +0200| [79f75b123b3416a824ae36c2c8a898a4dd1ee820] | committer: Michael Niedermayer avcodec/truemotion2: Fix passing null pointer to memset() Fixes part of: 1888/clusterfuzz-testcase-minimized-5237704826552320 Found-

[FFmpeg-cvslog] avcodec/ra144: Fix runtime error: signed integer overflow: 11184810 * 404 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 21:38:24 2017 +0200| [37709a5f8205e7ed8ade812df66c6489404eb40d] | committer: Michael Niedermayer avcodec/ra144: Fix runtime error: signed integer overflow: 11184810 * 404 cannot be represented in type 'int' Fixes: 1884/clusterfuz

[FFmpeg-cvslog] avcodec/webp: Fixes null pointer dereference

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 10 18:37:50 2017 +0200| [f88fd9027c49f20ce0ff0b04658322314fac605e] | committer: Michael Niedermayer avcodec/webp: Fixes null pointer dereference Fixes: 1470/clusterfuzz-testcase-minimized-5404421666111488 Fixes: 1472/clusterfuzz-test

[FFmpeg-cvslog] avcodec/aac_defines: Add missing () to AAC_HALF_SUM() macro

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 20:08:49 2017 +0200| [78603ff0f9e0c717f3637f1442ef1d108e5d7d91] | committer: Michael Niedermayer avcodec/aac_defines: Add missing () to AAC_HALF_SUM() macro Fixes: runtime error: shift exponent 1073741848 is too large for 32-bit t

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 18:09:47 2017 +0200| [228093ec9368dba09a33c1a3f15b5966b1d871e7] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes: 1878/clusterfuzz-te

[FFmpeg-cvslog] avcodec/ylc: Check count in build_vlc()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 17:20:42 2017 +0200| [41c6624c885c8ff0a921118b9d8af680d7acee4c] | committer: Michael Niedermayer avcodec/ylc: Check count in build_vlc() Fixes: runtime error: signed integer overflow: 211633430 + 2147483647 cannot be represented

[FFmpeg-cvslog] avcodec/sheervideo: Check input buffer size before allocating and decoding

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 13:30:46 2017 +0200| [efa7ce36e372e458b534529bb7d0a21b89368ad6] | committer: Michael Niedermayer avcodec/sheervideo: Check input buffer size before allocating and decoding Fixes: Timeout Fixes: 1858/clusterfuzz-testcase-minimized-

[FFmpeg-cvslog] avcodec/jpeg2000dec: Check tile offsets more completely

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 13:52:13 2017 +0200| [c04d2b2f9ded653af6d3bf6064d767550bcc62eb] | committer: Michael Niedermayer avcodec/jpeg2000dec: Check tile offsets more completely Signed-off-by: Michael Niedermayer (cherry picked from commit 9c1812491f7be2

[FFmpeg-cvslog] avcodec/snow: Fix runtime error: signed integer overflow: 1086573993 + 1086573994 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 17:12:35 2017 +0200| [b778eb8d64c2143eef04d470e76f2a701bdc2b32] | committer: Michael Niedermayer avcodec/snow: Fix runtime error: signed integer overflow: 1086573993 + 1086573994 cannot be represented in type 'int' Fixes: 1871/cl

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix multiple runtime error: shift exponent 127 is too large for 32-bit type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 03:34:09 2017 +0200| [cadb2d590dc926601e2025036038ee427f26a6c2] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix multiple runtime error: shift exponent 127 is too large for 32-bit type 'int' Fixes: 1851/clusterfuzz-test

[FFmpeg-cvslog] avcodec/jpeg2000: Fix runtime error: signed integer overflow: 4185 + 2147483394 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 14:00:30 2017 +0200| [ed1a66821382586c80799c1fc625419a567b5c82] | committer: Michael Niedermayer avcodec/jpeg2000: Fix runtime error: signed integer overflow: 4185 + 2147483394 cannot be represented in type 'int' Fixes: 1870/clus

[FFmpeg-cvslog] doc/filters: Clarify scale2ref example

ffmpeg | branch: release/3.1 | Kevin Mark | Sat May 27 10:10:46 2017 -0400| [5aaec845738ba401a97eae4fb16955610f30b1d8] | committer: Michael Niedermayer doc/filters: Clarify scale2ref example Signed-off-by: Kevin Mark Signed-off-by: Michael Niedermayer (cherry picked from commit 114e8716214d4

[FFmpeg-cvslog] avcodec/wnv1: More strict buffer size check

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 03:18:02 2017 +0200| [f4ff72cde6fc542cd653779e4279eb28732f0a38] | committer: Michael Niedermayer avcodec/wnv1: More strict buffer size check This requires at least 25% of a picture to allocate and decode it Fixes: Timeout Fixes:

[FFmpeg-cvslog] avcodec/sbrdsp_template: Fix: runtime error: signed integer overflow: 849815297 + 1315389781 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 23 21:08:48 2017 +0200| [9ff9355b84977bba806fdaa979e19a90898f54d4] | committer: Michael Niedermayer avcodec/sbrdsp_template: Fix: runtime error: signed integer overflow: 849815297 + 1315389781 cannot be represented in type 'int' Fix

[FFmpeg-cvslog] avcodec/mlpdec: Do not leave invalid values in matrix_out_ch[] on error

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat May 27 13:17:34 2017 +0200| [f71d15f04fef53a870f8f00233edcb4fbb461580] | committer: Michael Niedermayer avcodec/mlpdec: Do not leave invalid values in matrix_out_ch[] on error Fixes: runtime error: index 12 out of bounds for type 'uint8_

[FFmpeg-cvslog] avcodec/libfdk-aacdec: Correct buffer_size parameter

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu May 25 03:21:50 2017 +0200| [1c0524da00f06acef67465164512c251402c8bce] | committer: Michael Niedermayer avcodec/libfdk-aacdec: Correct buffer_size parameter the timeDataSize argument to aacDecoder_DecodeFrame() seems undocumented and un

[FFmpeg-cvslog] avformat/mux: Fix copy an paste typo

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri May 26 18:01:31 2017 +0200| [162ad001b834568ca96f28af21633919a3e9b0df] | committer: Michael Niedermayer avformat/mux: Fix copy an paste typo Found-by: Roger Scott Signed-off-by: Michael Niedermayer (cherry picked from commit 1a36354698

[FFmpeg-cvslog] avcodec/ra144dec: Fix runtime error: left shift of negative value -17

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat May 27 13:07:00 2017 +0200| [4354def5efb7b5fcad6295b38b0624d9a5b295a4] | committer: Michael Niedermayer avcodec/ra144dec: Fix runtime error: left shift of negative value -17 Fixes: 1830/clusterfuzz-testcase-minimized-5828293733384192 Fo

[FFmpeg-cvslog] avcodec/ivi_dsp: Fix runtime error: left shift of negative value -2

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 28 03:03:46 2017 +0200| [8da4f91fca831d8d8e8e4aa257d4a2927a2af9e3] | committer: Michael Niedermayer avcodec/ivi_dsp: Fix runtime error: left shift of negative value -2 Fixes: 1839/clusterfuzz-testcase-minimized-6238490993885184 Foun

[FFmpeg-cvslog] avutil/internal: Do not enable CHECKED with DEBUG

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Apr 7 13:49:09 2017 +0200| [9aaadb1ee3eb276ba5dd4f9d0143895cc0f85432] | committer: Michael Niedermayer avutil/internal: Do not enable CHECKED with DEBUG This avoids potential undefined behavior in debug mode while still allowing develop

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix runtime error: signed integer overflow: -2147483648 * -1 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu May 25 23:01:27 2017 +0200| [b77ce15e472256499606f415df269716929765ec] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix runtime error: signed integer overflow: -2147483648 * -1 cannot be represented in type 'int' Fixes: 1825/c

[FFmpeg-cvslog] avcodec/sanm: Fix uninitialized reference frames

ffmpeg | branch: release/3.1 | Max Justicz | Wed May 24 15:25:50 2017 +0200| [1d35eda0b2c59f742512f39f1ddeabf662fc69bf] | committer: Michael Niedermayer avcodec/sanm: Fix uninitialized reference frames Fixes: poc.snm Signed-off-by: Michael Niedermayer (cherry picked from commit ca616b0f72c65

[FFmpeg-cvslog] avcodec/smc: Check remaining input

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu May 25 20:07:49 2017 +0200| [e383baee9c665163c3a35847e5b555cc94206e95] | committer: Michael Niedermayer avcodec/smc: Check remaining input Fixes: Timeout Fixes: 1818/clusterfuzz-testcase-minimized-5039166473633792 Found-by: continuous f

[FFmpeg-cvslog] avcodec/jpeg2000dec: Fix copy and paste error

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu May 25 11:11:33 2017 +0200| [5202bef67aadf67af4e276998470658ad40f7541] | committer: Michael Niedermayer avcodec/jpeg2000dec: Fix copy and paste error Found-by: jamrial Signed-off-by: Michael Niedermayer (cherry picked from commit 5782e0

[FFmpeg-cvslog] avcodec/jpeg2000dec: Check tile offsets

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 24 19:40:42 2017 +0200| [b3f8d3880002ab934f7afdf7d96001dbee6afe4e] | committer: Michael Niedermayer avcodec/jpeg2000dec: Check tile offsets Fixes: runtime error: signed integer overflow: 4096 - -2147483648 cannot be represented in t

[FFmpeg-cvslog] avcodec/ivi_dsp: Fix multiple runtime error: left shift of negative value -71

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon May 22 01:19:50 2017 +0200| [7b074e728d2402099107d283f6660400c2bdd550] | committer: Michael Niedermayer avcodec/ivi_dsp: Fix multiple runtime error: left shift of negative value -71 Fixes: 1734/clusterfuzz-testcase-minimized-538563081509

[FFmpeg-cvslog] avcodec/jpeglsdec: Check get_bits_left() before decoding a picture

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue May 23 22:18:52 2017 +0200| [3b67878ab4f6598b3af46ec9d10f1f11244084ca] | committer: Michael Niedermayer avcodec/jpeglsdec: Check get_bits_left() before decoding a picture Signed-off-by: Michael Niedermayer (cherry picked from commit 4bc

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix runtime error: shift exponent 34 is too large for 32-bit type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 16:53:55 2017 +0200| [9a680966d1be0305855bfa4a5cee7cbbe1bbf218] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix runtime error: shift exponent 34 is too large for 32-bit type 'int' Fixes: 1721/clusterfuzz-testcase-minim

[FFmpeg-cvslog] avcodec/vmnc: Check location before use

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 13:22:16 2017 +0200| [859188863b9d54362a291b52bee7ce0b953cffc2] | committer: Michael Niedermayer avcodec/vmnc: Check location before use Fixes: runtime error: signed integer overflow: 65535 * 64256 cannot be represented in type '

[FFmpeg-cvslog] avcodec/mpeg4videodec: Check for multiple VOL headers

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 16:01:27 2017 +0200| [9ac7c504eaa44fcd75fbc8e731e81e61210fc11c] | committer: Michael Niedermayer avcodec/mpeg4videodec: Check for multiple VOL headers Fixes multiple: runtime error: signed integer overflow: 2147115008 + 413696 ca

[FFmpeg-cvslog] avcodec/mjpegdec: Fix runtime error: signed integer overflow: -32767 * 130560 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 21:49:54 2017 +0200| [a8fb8cd716dfe29a113068f9e3ded58912dcebfb] | committer: Michael Niedermayer avcodec/mjpegdec: Fix runtime error: signed integer overflow: -32767 * 130560 cannot be represented in type 'int' Fixes: 1724/cluste

[FFmpeg-cvslog] avcodec/takdec: Fix runtime error: signed integer overflow: 8192 * 524308 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed May 17 00:07:02 2017 +0200| [e6d6363eb30dfdf3c4aeb3f269ee63a91a79b042] | committer: Michael Niedermayer avcodec/takdec: Fix runtime error: signed integer overflow: 8192 * 524308 cannot be represented in type 'int' Fixes: 1630/clusterfuz

[FFmpeg-cvslog] avcodec/aac_defines: Fix: runtime error: left shift of negative value -2

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 02:51:04 2017 +0200| [87de89ac7856598cfb7bd3b74387c68defa517e6] | committer: Michael Niedermayer avcodec/aac_defines: Fix: runtime error: left shift of negative value -2 Fixes: 1716/clusterfuzz-testcase-minimized-4691012196761600

[FFmpeg-cvslog] avcodec/takdec: Fix runtime error: left shift of negative value -63

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun May 21 02:46:55 2017 +0200| [56ce2cae385e2de3b6f7618c28cb28ce7a87d012] | committer: Michael Niedermayer avcodec/takdec: Fix runtime error: left shift of negative value -63 Fixes: 1713/clusterfuzz-testcase-minimized-5791887476654080 Foun

[FFmpeg-cvslog] avcodec/fic: Fix multiple runtime error: signed integer overflow: 5793 * 419752 cannot be represented in type 'int'

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu May 18 17:13:18 2017 +0200| [3a69d5d3f01d407b9c8fc58c31fc53f93b8e31a1] | committer: Michael Niedermayer avcodec/fic: Fix multiple runtime error: signed integer overflow: 5793 * 419752 cannot be represented in type 'int' Fixes: 1669/clus

  1   2   >