[FFmpeg-cvslog] avformat/webmdashenc: Check id in adaption_sets

2019-02-17 Thread Michael Niedermayer
ffmpeg | branch: master | Michael Niedermayer | Wed Feb 13 10:15:04 2019 +0100| [b687b549aa0fb115861b1343208de8c2630803bf] | committer: Michael Niedermayer avformat/webmdashenc: Check id in adaption_sets Fixes: out of array access Found-by: Wenxiang Qian Signed-off-by: Michael Niedermayer >

[FFmpeg-cvslog] avformat/ftp: Fix Out-of-Bounds Access and Information Leak in ftp.c:393

2019-02-17 Thread Wenxiang Qian
ffmpeg | branch: master | Wenxiang Qian | Wed Feb 13 08:47:20 2019 +0100| [a142ffdcaec06fcbf7d4b00dbb0e5ddfb9e3344d] | committer: Michael Niedermayer avformat/ftp: Fix Out-of-Bounds Access and Information Leak in ftp.c:393 Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.c

[FFmpeg-cvslog] avformat/http: Fix Out-of-Bounds access in process_line()

2019-02-17 Thread Wenxiang Qian
ffmpeg | branch: master | Wenxiang Qian | Wed Feb 13 08:54:08 2019 +0100| [85f91ed760a517c0d5fcf692d40a5a9d7efa9476] | committer: Michael Niedermayer avformat/http: Fix Out-of-Bounds access in process_line() Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?

[FFmpeg-cvslog] avcodec/htmlsubtitles: Fixes denial of service due to use of sscanf in inner loop for tag scaning

2019-02-17 Thread Kevin Backhouse via RT
ffmpeg | branch: master | Kevin Backhouse via RT | Wed Feb 6 11:29:22 2019 +| [1f00c97bc3475c477f3c468cf2d924d5761d0982] | committer: Michael Niedermayer avcodec/htmlsubtitles: Fixes denial of service due to use of sscanf in inner loop for tag scaning Fixes: [Semmle Security Reports #194

[FFmpeg-cvslog] avformat/matroskadec: Check parents remaining length

2019-02-17 Thread Steve Lhomme
ffmpeg | branch: master | Steve Lhomme | Wed Feb 13 13:20:45 2019 +0100| [9326117bf63b04a466d9e787224e56ba8cdbb215] | committer: Michael Niedermayer avformat/matroskadec: Check parents remaining length This was found through the Hacker One program on VLC but is not a security issue in libavfo

[FFmpeg-cvslog] avcodec/mpegvideo_enc: Use av_assert1() instead of assert()

2019-02-17 Thread Michael Niedermayer
ffmpeg | branch: master | Michael Niedermayer | Fri Feb 1 22:53:53 2019 +0100| [7246bf365a1f2f12f1e7f1162aef8930924866dc] | committer: Michael Niedermayer avcodec/mpegvideo_enc: Use av_assert1() instead of assert() Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmp

[FFmpeg-cvslog] avcodec/htmlsubtitles: Fixes denial of service due to use of sscanf in inner loop for handling braces

2019-02-17 Thread Kevin Backhouse via RT
ffmpeg | branch: master | Kevin Backhouse via RT | Wed Feb 6 12:56:01 2019 +| [894995c41e0795c7a44f81adc4838dedc3932e65] | committer: Michael Niedermayer avcodec/htmlsubtitles: Fixes denial of service due to use of sscanf in inner loop for handling braces Fixes: [Semmle Security Reports

[FFmpeg-cvslog] avformat/matroskadec: Do not leak queued packets on sync errors

2019-02-17 Thread Michael Niedermayer
ffmpeg | branch: master | Michael Niedermayer | Wed Feb 6 15:29:38 2019 +0100| [d1afa7284c3feba4debfebf1b9cf8ad67640e34a] | committer: Michael Niedermayer avformat/matroskadec: Do not leak queued packets on sync errors Fixes: memleak Fixes: clusterfuzz-testcase-minimized-audio_decoder_fuzzer-