[FFmpeg-cvslog] fate-api-h264-slice: use the heap for nal buffer

ffmpeg | branch: master | Peter Ross | Wed Nov 21 01:31:44 2018 +1100| [3fc7b69496fd586a609f9c8a2f1ed17e46bf5fff] | committer: Michael Niedermayer fate-api-h264-slice: use the heap for nal buffer nal buffer is 512 kilobytes Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb

[FFmpeg-cvslog] avcodec/truemotion2: Check huffman code max bits

ffmpeg | branch: master | Michael Niedermayer | Mon Nov 19 23:47:13 2018 +0100| [77bf85515e59f7b17685fbbec943ff46f6217719] | committer: Michael Niedermayer avcodec/truemotion2: Check huffman code max bits Fixes: Timeout Fixes: 10984/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION

[FFmpeg-cvslog] api-h264-slice-test: use av_be2ne16 instead of ntohs

ffmpeg | branch: master | Peter Ross | Tue Nov 20 18:51:52 2018 +1100| [7cda7d217cd0e9eaa38cc0d5dbbb6204b92fce97] | committer: Michael Niedermayer api-h264-slice-test: use av_be2ne16 instead of ntohs avformat/network.h is not required here. Signed-off-by: Michael Niedermayer > http://git.vi

[FFmpeg-cvslog] avfilter/vf_overlay: fix crash with negative y

ffmpeg | branch: master | Paul B Mahol | Tue Nov 20 23:18:47 2018 +0100| [57815cfad5c5d6beb6f3fc0ae86b050a970d3a08] | committer: Paul B Mahol avfilter/vf_overlay: fix crash with negative y > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=57815cfad5c5d6beb6f3fc0ae86b050a970d3a08 ---

[FFmpeg-cvslog] avcodec/shorten: Fix integer overflow with offset

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Nov 9 19:59:27 2018 +0100| [0728911951100305e8b2379ac37c44f5ac0c1c75] | committer: Michael Niedermayer avcodec/shorten: Fix integer overflow with offset Fixes: signed integer overflow: -1625810908 - 582229060 cannot be represented in t

[FFmpeg-cvslog] avcodec/pngdec: Check compression method

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Nov 9 03:12:45 2018 +0100| [3ae8a4cf060e5eda6c5192879131301c94dddc70] | committer: Michael Niedermayer avcodec/pngdec: Check compression method method 0 (inflate/deflate) is the only specified in the specification and the only supporte

[FFmpeg-cvslog] avcodec/cavsdec: Propagate error codes inside decode_mb_i()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Nov 4 20:00:16 2018 +0100| [0acb6f692ef247bbf6612cc1212897613c175a06] | committer: Michael Niedermayer avcodec/cavsdec: Propagate error codes inside decode_mb_i() Fixes: Timeout Fixes: 10702/clusterfuzz-testcase-minimized-ffmpeg_AV_COD

[FFmpeg-cvslog] avutil/integer: Fix integer overflow in av_mul_i()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Oct 24 01:44:12 2018 +0200| [6f84b1c458c6aafc9f1ba5d5a6da8792fc60ec8b] | committer: Michael Niedermayer avutil/integer: Fix integer overflow in av_mul_i() Found-by: fate Signed-off-by: Michael Niedermayer (cherry picked from commit 3cc3

[FFmpeg-cvslog] avcodec/jpeg2000dec: Fix off by 1 error in JPEG2000_PGOD_CPRL handling

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Oct 20 22:35:37 2018 +0200| [bdd3c7af5ee18c3bcc71525f7062234eaf95b164] | committer: Michael Niedermayer avcodec/jpeg2000dec: Fix off by 1 error in JPEG2000_PGOD_CPRL handling Fixes: assertion failure Fixes: 10785/clusterfuzz-testcase-mi

[FFmpeg-cvslog] avcodec/mpegaudio_parser: Consume more than 0 bytes in case of the unsupported mp3adu case

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Oct 28 21:08:39 2018 +0100| [cf21323dd4600a76cd9cb78563999733571ebdbd] | committer: Michael Niedermayer avcodec/mpegaudio_parser: Consume more than 0 bytes in case of the unsupported mp3adu case Fixes: Timeout Fixes: 10966/clusterfuzz-

[FFmpeg-cvslog] avcodec/msrle: Check that the input is large enough to contain a end of picture code

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Oct 21 14:40:14 2018 +0200| [3049d6d8219b517020de0f0a1759e96fed49ef37] | committer: Michael Niedermayer avcodec/msrle: Check that the input is large enough to contain a end of picture code Fixes: Timeout Fixes: 10625/clusterfuzz-testca

[FFmpeg-cvslog] avformat/flvenc: Check audio packet size

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jul 28 15:03:50 2018 +0200| [d8ecb335fe4852bbc172c7b79e66944d158b4d92] | committer: Michael Niedermayer avformat/flvenc: Check audio packet size Fixes: Assertion failure Fixes: assert_flvenc.c:941_1.swf Found-by: #CHEN HONGXU# Signed-o

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix typo in sprite delta check

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Oct 18 01:19:36 2018 +0200| [d74cd4d69ab7bfb0bf7042115ae3d0d5f290889f] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix typo in sprite delta check Fixes: Integer overflow Fixes: 10890/clusterfuzz-testcase-minimized-ffmpeg_AV_

[FFmpeg-cvslog] avcodec/dvdsubdec: Sanity check len in decode_rle()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Sep 13 03:33:50 2018 +0200| [c2f02af6968498b482d12cc27d0c91891c444a0a] | committer: Michael Niedermayer avcodec/dvdsubdec: Sanity check len in decode_rle() Fixes: Timeout Fixes: 9778/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DVD

[FFmpeg-cvslog] avformat/utils: Never store negative values in last_IP_duration

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Oct 12 20:55:25 2018 +0200| [dc13bac6deaa3ee3641d331556ac41556993e07e] | committer: Michael Niedermayer avformat/utils: Never store negative values in last_IP_duration Fixes: integer overflow compute_pkt_fields() Fixes: compute_pkt_usan

[FFmpeg-cvslog] avcodec/unary: Improve get_unary() docs

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Sep 22 15:18:17 2018 +0200| [604957c557dfbbb1a8e913519b0aa266b5b3dbc0] | committer: Michael Niedermayer avcodec/unary: Improve get_unary() docs Found-by: kierank Signed-off-by: Michael Niedermayer (cherry picked from commit ad89e203bfed

[FFmpeg-cvslog] avformat/utils: Fix integer overflow in discontinuity check

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Oct 12 03:00:32 2018 +0200| [6ce3fee455d66c2a51f9a5551a9356efde28e193] | committer: Michael Niedermayer avformat/utils: Fix integer overflow in discontinuity check Fixes: signed integer overflow: 7738135736989908991 - -795430851631736422

[FFmpeg-cvslog] avcodec/h264_cavlc: Check mb_skip_run

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Oct 4 03:13:41 2018 +0200| [89a8b69e9bf658383aacbda7f372191385ae2bd4] | committer: Michael Niedermayer avcodec/h264_cavlc: Check mb_skip_run Fixes: 10300/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-6292205497483264 Fi

[FFmpeg-cvslog] avcodec/ra144: Fix integer overflow in add_wav()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Oct 10 04:25:50 2018 +0200| [e42f2eb165e7a4242e9c09d2286351cd0bd79ca6] | committer: Michael Niedermayer avcodec/ra144: Fix integer overflow in add_wav() Fixes: signed integer overflow: -2144033225 + -5208934 cannot be represented in typ

[FFmpeg-cvslog] avcodec/dvdsubdec: Avoid branch in decode_run_8bit()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Sep 13 04:24:49 2018 +0200| [6645783a3aa46107405c2f7aca65e7a7f13cf5a6] | committer: Michael Niedermayer avcodec/dvdsubdec: Avoid branch in decode_run_8bit() Speed improvment 35.5 sec -> 34.7sec Reviewed-by: Paul B Mahol Signed-off-by:

[FFmpeg-cvslog] avcodec/zmbv: Update decomp_len in raw frames

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Sep 17 21:33:59 2018 +0200| [edae5259c05506a0923f709ce080144c4846ca28] | committer: Michael Niedermayer avcodec/zmbv: Update decomp_len in raw frames decomp_len is used in raw frames, so it should not be left at the value from whatever w

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix undefined shift in get_amv()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Sep 15 00:20:38 2018 +0200| [49023147c7fcb8319830be698b280e65e82ddf22] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix undefined shift in get_amv() Fixes: runtime error: shift exponent -1 is negative Fixes: 9938/clusterfuzz-

[FFmpeg-cvslog] avcodec/zmbv: Check that the decompressed data size is correct

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Sep 18 00:28:37 2018 +0200| [79c018351e6e0a3e3f58b4b7831a6642c3a4f42c] | committer: Michael Niedermayer avcodec/zmbv: Check that the decompressed data size is correct This checks the value exactly for intra frames and checks it against a

[FFmpeg-cvslog] avcodec/shorten: Fix bitstream end check in read_header()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Sep 15 02:08:20 2018 +0200| [f2640f76489464f4a0016c729aa04d46d3638abb] | committer: Michael Niedermayer avcodec/shorten: Fix bitstream end check in read_header() Fixes: Timeout Fixes: 9961/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_

[FFmpeg-cvslog] avcodec/shorten: Check verbatim length

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 12 22:43:33 2018 +0200| [ed0f21a89a416e3b53754dc6fc6eba100695431a] | committer: Michael Niedermayer avcodec/shorten: Check verbatim length Fixes: Timeout Fixes: 9252/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SHORTEN_fuzzer-5

[FFmpeg-cvslog] avcodec/hq_hqa: Check remaining input bits in hqa_decode_mb()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Aug 20 22:53:32 2018 +0200| [db39404c1581b16a307ca2089346267a98a28b91] | committer: Michael Niedermayer avcodec/hq_hqa: Check remaining input bits in hqa_decode_mb() Fixes: Timeout Fixes: 9634/clusterfuzz-testcase-minimized-ffmpeg_AV_CO

[FFmpeg-cvslog] avcodec/vb: Check for end of bytestream before reading blocktype

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Aug 20 22:19:23 2018 +0200| [8717129d58e987d0a7516a731e39969eed71a27e] | committer: Michael Niedermayer avcodec/vb: Check for end of bytestream before reading blocktype Fixes: Timeout Fixes: 9601/clusterfuzz-testcase-minimized-ffmpeg_AV

[FFmpeg-cvslog] avcodec/shorten: Fix integer overflow in residual/LPC combination

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 12 22:55:59 2018 +0200| [bb070fc4684dd80a82983469ccf685dfeb3e1c4e] | committer: Michael Niedermayer avcodec/shorten: Fix integer overflow in residual/LPC combination Fixes: signed integer overflow: -540538872 + -2012739576 cannot be

[FFmpeg-cvslog] avcodec/h264_refs: Document last if() in ff_h264_execute_ref_pic_marking()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Aug 17 02:06:27 2018 +0200| [fb0cd972a704fbe8100837c16b18e2cbde3d5215] | committer: Michael Niedermayer avcodec/h264_refs: Document last if() in ff_h264_execute_ref_pic_marking() Signed-off-by: Michael Niedermayer (cherry picked from co

[FFmpeg-cvslog] avcodec/ra144: Fix undefined integer overflow in add_wav()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 26 02:26:24 2018 +0200| [2d65c44f220c57cd5afcddee8430ded2177288eb] | committer: Michael Niedermayer avcodec/ra144: Fix undefined integer overflow in add_wav() Fixes: signed integer overflow: -26884 * 91439 cannot be represented in ty

[FFmpeg-cvslog] avcodec/snowdec: Fix integer overflow with motion vector residual

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Aug 20 20:15:19 2018 +0200| [7ddcb02809f958adb0b4348d48678a1459c99857] | committer: Michael Niedermayer avcodec/snowdec: Fix integer overflow with motion vector residual Fixes: signed integer overflow: -19818 + -2147483648 cannot be repr

[FFmpeg-cvslog] avformat/mlvdec: read_string() received unsigned size, make the argument unsigned

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Aug 16 15:36:28 2018 +0200| [b671ebfd61b64b5e336f747b8a6abd59a535454d] | committer: Michael Niedermayer avformat/mlvdec: read_string() received unsigned size, make the argument unsigned Fixes: infinite loop Fixes: mlv-timeout-e3b8cab983

[FFmpeg-cvslog] avcodec/mpegaudio_parser: Initialize poutbuf*

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 5 14:51:36 2018 +0200| [a36d649ffce62932b4a1ae59a0403568fa648c2a] | committer: Michael Niedermayer avcodec/mpegaudio_parser: Initialize poutbuf* Possibly fixes: null pointer dereference Possibly fixes: 9352/clusterfuzz-testcase-min

[FFmpeg-cvslog] avformat/nsvdec: Do not parse multiple NSVf

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Aug 16 12:23:20 2018 +0200| [898f83386354c88c15515c4ae74658d5b123c72b] | committer: Michael Niedermayer avformat/nsvdec: Do not parse multiple NSVf The specification states "NSV files may contain a single file header. " Fixes: out of arr

[FFmpeg-cvslog] avcodec/qtrle: Check remaining bytestream in qtrle_decode_XYbpp()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 29 12:40:48 2018 +0200| [b12e1618a39ab0d82ecaa301e7cceade71b7c9e3] | committer: Michael Niedermayer avcodec/qtrle: Check remaining bytestream in qtrle_decode_XYbpp() Fixes: Timeout Fixes: 9213/clusterfuzz-testcase-minimized-ffmpeg_A

[FFmpeg-cvslog] avcodec/diracdec: Change frame_number to 64bit as its a 32bit from the bitstream and we also have a -1 special case

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 22 20:45:39 2018 +0200| [1c05c6bd91f1ba08f9955213fea6c7c9f1b4aac5] | committer: Michael Niedermayer avcodec/diracdec: Change frame_number to 64bit as its a 32bit from the bitstream and we also have a -1 special case Fixes: signed in

[FFmpeg-cvslog] avutil/pixfmt: Document chroma plane size for odd resolutions

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Jul 18 22:22:35 2018 +0200| [56b188941fd34d1d139f77c330d36baf66c9bc09] | committer: Michael Niedermayer avutil/pixfmt: Document chroma plane size for odd resolutions Signed-off-by: Michael Niedermayer (cherry picked from commit be0b77e6

[FFmpeg-cvslog] swresample/swresample: Fix input channel count in resample_first computation

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jul 24 22:44:12 2018 +0200| [83ffda78ddb1f8f44fe964551bc27355b4a3a695] | committer: Michael Niedermayer swresample/swresample: Fix input channel count in resample_first computation Found-by: Marcin Gorzel Reviewed-by: Marcin Gorzel Sig

[FFmpeg-cvslog] avcodec/diracdec: Prevent integer overflow in intermediate in global_mv()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 22 18:58:34 2018 +0200| [00c3f178a8e52c353091013e09378cd37b3e4aa1] | committer: Michael Niedermayer avcodec/diracdec: Prevent integer overflow in intermediate in global_mv() Fixes: signed integer overflow: -393471 * 5460 cannot be re