[FFmpeg-cvslog] Update for FFmpeg 4.3.4

ffmpeg | branch: release/4.3 | Michael Niedermayer | Wed Apr 6 20:40:59 2022 +0200| [e681f720f8394b66469f500a0a2aedadc1b01374] | committer: Michael Niedermayer Update for FFmpeg 4.3.4 Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e681f720f839

[FFmpeg-cvslog] avcodec/diracdec: avoid signed integer overflow in global mv

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Mar 21 20:51:47 2022 +0100| [a671e181286785d8fdd69f8ec17c5814727d32f7] | committer: Michael Niedermayer avcodec/diracdec: avoid signed integer overflow in global mv Fixes: signed integer overflow: -128275513086 * -76056576 cannot be repr

[FFmpeg-cvslog] avcodec/takdsp: Fix integer overflow in decorrelate_sf()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Mar 28 00:26:06 2022 +0200| [5359c1ceda217b1bcb5b8579873a1107f211528f] | committer: Michael Niedermayer avcodec/takdsp: Fix integer overflow in decorrelate_sf() Fixes: signed integer overflow: -101 * 71041254 cannot be represented in typ

[FFmpeg-cvslog] avcodec/apedec: fix a integer overflow in long_filter_high_3800()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Mar 28 00:12:17 2022 +0200| [d909850308eb08f7ade9b1585ef30d997091f740] | committer: Michael Niedermayer avcodec/apedec: fix a integer overflow in long_filter_high_3800() Fixes: signed integer overflow: -2146549696 - 3923884 cannot be rep

[FFmpeg-cvslog] avfilter/vf_subtitles: pass storage size to libass

ffmpeg | branch: release/4.3 | Oneric | Wed Mar 23 20:43:54 2022 +0100| [f160c24f77353f8049b66ce76f235afc08922f3a] | committer: Michael Niedermayer avfilter/vf_subtitles: pass storage size to libass Due to a quirk of the ASS format some tags depend on the exact storage resolution of the video,

[FFmpeg-cvslog] avformat/aqtitledec: Skip unrepresentable durations

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Mar 20 00:07:50 2022 +0100| [e1a5738b73b7136fcc118c4528409d34c54e7e4f] | committer: Michael Niedermayer avformat/aqtitledec: Skip unrepresentable durations Fixes: signed integer overflow: -5 - 9223372036854775807 cannot be represented i

[FFmpeg-cvslog] avformat/cafdec: Do not store empty keys in read_info_chunk()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Mar 19 23:36:22 2022 +0100| [4d1674cccf3bf855e7e3970efcff5d8c4bc55904] | committer: Michael Niedermayer avformat/cafdec: Do not store empty keys in read_info_chunk() Fixes: Timeout Fixes: 45543/clusterfuzz-testcase-minimized-ffmpeg_dem_

[FFmpeg-cvslog] avformat/mxfdec: Do not clear array in mxf_read_strong_ref_array() before writing

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Mar 13 00:37:35 2022 +0100| [a9045143da8c75f051acab71a2f0046b9c473e9e] | committer: Michael Niedermayer avformat/mxfdec: Do not clear array in mxf_read_strong_ref_array() before writing Signed-off-by: Michael Niedermayer (cherry picked

[FFmpeg-cvslog] avformat/mxfdec: Check for avio_read() failure in mxf_read_strong_ref_array()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Mar 13 00:36:55 2022 +0100| [565bb5fe7be9fbf58b98654684cfed08e43f1fdf] | committer: Michael Niedermayer avformat/mxfdec: Check for avio_read() failure in mxf_read_strong_ref_array() Fixes: 42827/clusterfuzz-testcase-minimized-ffmpeg_dem

[FFmpeg-cvslog] avformat/mxfdec: Check count in mxf_read_strong_ref_array()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Mar 13 00:34:52 2022 +0100| [b88abd3ac2e824ac216c8d607dd46dc1a5ee4161] | committer: Michael Niedermayer avformat/mxfdec: Check count in mxf_read_strong_ref_array() Reviewed-by: Tomas Härdin Signed-off-by: Michael Niedermayer (cherry pi

[FFmpeg-cvslog] avformat/hls: Check target_duration

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Mar 20 22:54:31 2022 +0100| [023b7e79792020af978c1743d565ae4326395dc6] | committer: Michael Niedermayer avformat/hls: Check target_duration Fixes: signed integer overflow: 77 * 100 cannot be represented in type 'long lon

[FFmpeg-cvslog] avcodec/sonic: Use unsigned for predictor_k to avoid undefined behavior

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Feb 8 00:43:56 2022 +0100| [2be7eea6486c843767002a56272538650481c059] | committer: Michael Niedermayer avcodec/sonic: Use unsigned for predictor_k to avoid undefined behavior Fixes: signed integer overflow: -1094995529 * 24 cannot be re

[FFmpeg-cvslog] avcodec/pixlet: Avoid signed integer overflow in scaling in filterfn()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Oct 26 21:30:19 2020 +0100| [a1baef131a11bd582196139cdee8892d667481a8] | committer: Michael Niedermayer avcodec/pixlet: Avoid signed integer overflow in scaling in filterfn() Fixes: signed integer overflow: 11494 * 107374182400 canno

[FFmpeg-cvslog] avcodec/mjpegbdec: Set buf_size

ffmpeg | branch: release/4.3 | Michael Niedermayer | Fri Mar 11 20:25:48 2022 +0100| [b19cc796eab6020c54bda92157fa5c2e84525a57] | committer: Michael Niedermayer avcodec/mjpegbdec: Set buf_size Fixes: Timeout Fixes: 45170/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MJPEGB_fuzzer-58748204

[FFmpeg-cvslog] avformat/matroskadec: Check pre_ns

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Feb 13 15:20:02 2022 +0100| [90ef9b5139b65dd6b4814f48f7af770fd49ec01f] | committer: Michael Niedermayer avformat/matroskadec: Check pre_ns Fixes: division by 0 Fixes: 44615/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fu

[FFmpeg-cvslog] avformat/matroskadec: Use rounded down duration in get_cue_desc() check

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Mar 10 23:24:49 2022 +0100| [5032883c3473b9d972bc5db57323e5633a6407e6] | committer: Michael Niedermayer avformat/matroskadec: Use rounded down duration in get_cue_desc() check Floating point is evil, it would be better if duration was no

[FFmpeg-cvslog] avcodec/g729_parser: Check channels

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Feb 27 14:43:04 2022 +0100| [fa2e4afe8d0a23fac37392ef6506cfc9841f8d3d] | committer: Michael Niedermayer avcodec/g729_parser: Check channels Fixes: signed integer overflow: 10 * 808464428 cannot be represented in type 'int' Fixes: assert

[FFmpeg-cvslog] avformat/avidec: Check height

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Feb 27 21:44:29 2022 +0100| [0225b8947b8f0c06441e6e82437968a5e4e7378e] | committer: Michael Niedermayer avformat/avidec: Check height Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate

[FFmpeg-cvslog] avformat/rmdec: Better duplicate tags check

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Feb 24 00:26:08 2022 +0100| [7251a22f97f223ac16b9bd1567b9544d1910e63b] | committer: Michael Niedermayer avformat/rmdec: Better duplicate tags check Fixes: memleaks Fixes: 44810/clusterfuzz-testcase-minimized-ffmpeg_dem_IVR_fuzzer-561949

[FFmpeg-cvslog] avformat/mov: Disallow empty sidx

ffmpeg | branch: release/4.3 | Michael Niedermayer | Wed Mar 2 13:01:53 2022 +0100| [54a0324ad96e74e82c33e72af7c6b360a7415863] | committer: Michael Niedermayer avformat/mov: Disallow empty sidx It appears this is not allowed "Each Segment Index box documents how a (sub)segment is divided int

[FFmpeg-cvslog] avformat/matroskadec: Check duration

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Feb 14 20:01:35 2022 +0100| [69691dbb3aee0202ea3224f68c7f410db6c23da1] | committer: Michael Niedermayer avformat/matroskadec: Check duration Fixes: -nan is outside the range of representable values of type 'long' Fixes: 44614/clusterfuz

[FFmpeg-cvslog] avformat/mov: Corner case encryption error cleanup in mov_read_senc()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Wed Feb 9 22:01:03 2022 +0100| [56c8235332298d548b519cd88e813a7bfec58291] | committer: Michael Niedermayer avformat/mov: Corner case encryption error cleanup in mov_read_senc() Fixes: memleak Fixes: 42341/clusterfuzz-testcase-minimized-ffm

[FFmpeg-cvslog] avcodec/jpeglsdec: Fix if( code style

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Feb 15 21:01:06 2022 +0100| [2dcc5ef71097a263c0c088dbdce07391b1946809] | committer: Michael Niedermayer avcodec/jpeglsdec: Fix if( code style Signed-off-by: Michael Niedermayer (cherry picked from commit f306b8e80ab04cfd8f6cd577a4484cb7

[FFmpeg-cvslog] avcodec/jpeglsdec: Check get_ur_golomb_jpegls() for error

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Feb 12 22:02:13 2022 +0100| [d06715c5c2f02b161ea4663a998d9666a78e2c38] | committer: Michael Niedermayer avcodec/jpeglsdec: Check get_ur_golomb_jpegls() for error Fixes: Timeout Fixes: Invalid shift Fixes: 44548/clusterfuzz-testcase-mini

[FFmpeg-cvslog] avcodec/motion_est: fix indention of ff_get_best_fcode()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Wed Feb 9 10:31:34 2022 +0100| [ca7ee1cd2687d170c1400d26847b15a39a6bd8b7] | committer: Michael Niedermayer avcodec/motion_est: fix indention of ff_get_best_fcode() Signed-off-by: Michael Niedermayer (cherry picked from commit ce43e1c581b4e

[FFmpeg-cvslog] avcodec/motion_est: Fix xy indexing on range violation in ff_get_best_fcode()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Feb 8 21:38:50 2022 +0100| [9a7effc78d803276494cb1d455392d50a442339e] | committer: Michael Niedermayer avcodec/motion_est: Fix xy indexing on range violation in ff_get_best_fcode() This codepath seems untested, no testcases change Foun

[FFmpeg-cvslog] avcodec/jpeglsdec: Increase range for N in ls_get_code_runterm() by using unsigned

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Feb 5 20:41:08 2022 +0100| [228d0067903f34054c797907458206d943faf0ab] | committer: Michael Niedermayer avcodec/jpeglsdec: Increase range for N in ls_get_code_runterm() by using unsigned Fixes: left shift of 32768 by 16 places cannot be

[FFmpeg-cvslog] avformat/matroskadec: Fix infinite loop with bz decompression

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Feb 3 22:46:55 2022 +0100| [2564ac2764eaf2f7dbf3725b31cadf4f24479a8f] | committer: Michael Niedermayer avformat/matroskadec: Fix infinite loop with bz decompression The same check is added to zlib too, it seems not needed there though

[FFmpeg-cvslog] avformat/matroskadec: Check desc_bytes

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Feb 5 20:37:22 2022 +0100| [f20e08ed58362011e4906989d292fd01b2e028f2] | committer: Michael Niedermayer avformat/matroskadec: Check desc_bytes Fixes: Division by 0 Fixes: 44035/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFES

[FFmpeg-cvslog] avformat/mov: Check size before subtraction

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Jan 17 14:26:05 2022 +0100| [3a718e3bbb73f3cfb7d8eb5d00795e0c615e1226] | committer: Michael Niedermayer avformat/mov: Check size before subtraction Fixes: signed integer overflow: -9223372036854775808 - 8 cannot be represented in type '

[FFmpeg-cvslog] avcodec/apedec: Fix integer overflows in predictor_update_3930()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Jan 3 19:15:18 2022 +0100| [671850fe550b309f6199e1811c59cc548bd21e8a] | committer: Michael Niedermayer avcodec/apedec: Fix integer overflows in predictor_update_3930() Fixes: signed integer overflow: 1074134419 - -1075212485 cannot be r

[FFmpeg-cvslog] avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Fri Feb 4 00:44:32 2022 +0100| [a2932f6e9893c1d4e927eed6eb161133845bcf66] | committer: Michael Niedermayer avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value() Fixes: pointer index expression with base 0x o

[FFmpeg-cvslog] avcodec/apedec: fix integer overflow in 8bit samples

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Dec 23 20:39:14 2021 +0100| [429eaaf16ee3bbb8d10e8c6e204d03b537adba80] | committer: Michael Niedermayer avcodec/apedec: fix integer overflow in 8bit samples Fixes: signed integer overflow: 2147483542 + 128 cannot be represented in type

[FFmpeg-cvslog] avformat/flvdec: timestamps cannot use the full int64 range

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Dec 23 20:36:16 2021 +0100| [c45013d6c5f1007a9e5de0a008bba05b91575886] | committer: Michael Niedermayer avformat/flvdec: timestamps cannot use the full int64 range We do not support this as we multiply by 1000 Fixes: signed integer overf

[FFmpeg-cvslog] avcodec/vqavideo: reset accounting on error

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Dec 19 22:26:00 2021 +0100| [ddc21f54c361ac388055cdfba54918f64f560058] | committer: Michael Niedermayer avcodec/vqavideo: reset accounting on error Fixes: Timeout (same growing chunk is decoded to failure repeatedly) Fixes: 42582/cluste

[FFmpeg-cvslog] avcodec/alacdsp: fix integer overflow in decorrelate_stereo()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Jul 23 23:34:15 2020 +0200| [80940eedf217aba6fe771bb1f05ab1765b9c541c] | committer: Michael Niedermayer avcodec/alacdsp: fix integer overflow in decorrelate_stereo() Fixes: signed integer overflow: -16777216 * 131 cannot be represented i

[FFmpeg-cvslog] avformat/4xm: Check for duplicate track ids

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Dec 7 09:14:09 2021 +0100| [4a45cd806ed976dfac0a6a9294461497f007ae61] | committer: Michael Niedermayer avformat/4xm: Check for duplicate track ids Signed-off-by: Michael Niedermayer (cherry picked from commit dd949124793c722ed55dead9da

[FFmpeg-cvslog] avformat/4xm: Consider max_streams on reallocating tracks array

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Dec 7 09:14:08 2021 +0100| [75befad4c0d71a0df6b61356db1bc0fc81f8c079] | committer: Michael Niedermayer avformat/4xm: Consider max_streams on reallocating tracks array Fixes: OOM Fixes: 41595/clusterfuzz-testcase-minimized-ffmpeg_dem_FO

[FFmpeg-cvslog] avformat/mov: Check next offset in mov_read_dref()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Dec 4 20:48:54 2021 +0100| [5a2a340d64d1e4eb6c2eb12d8bc297b55bd579be] | committer: Michael Niedermayer avformat/mov: Check next offset in mov_read_dref() Fixes: signed integer overflow: 9223372036200463215 + 1109914409 cannot be repres

[FFmpeg-cvslog] avformat/vivo: Favor setting fps from explicit fractions

ffmpeg | branch: release/4.3 | Michael Niedermayer | Mon Dec 6 11:38:39 2021 +0100| [480f1a198cbfe72fb8f59a5e664c2af796f4a45c] | committer: Michael Niedermayer avformat/vivo: Favor setting fps from explicit fractions Signed-off-by: Michael Niedermayer (cherry picked from commit bf1e93bdc9aaa

[FFmpeg-cvslog] avformat/vivo: Do not use the general expression evaluator for parsing a floating point value

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Dec 5 18:40:03 2021 +0100| [deba3d03723de72c386bdcc2db5ac733bd05adc7] | committer: Michael Niedermayer avformat/vivo: Do not use the general expression evaluator for parsing a floating point value Fixes: Timeout Fixes: 41564/clusterfu

[FFmpeg-cvslog] avformat/mxfdec: Check for duplicate mxf_read_index_entry_array()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Dec 5 22:19:05 2021 +0100| [d80dbe65054cc70c8573a3d62c4492ef5d3962a2] | committer: Michael Niedermayer avformat/mxfdec: Check for duplicate mxf_read_index_entry_array() Fixes: memleak Fixes: 41596/clusterfuzz-testcase-minimized-ffmpeg_

[FFmpeg-cvslog] avcodec/apedec: Change avg to uint32_t

ffmpeg | branch: release/4.3 | Michael Niedermayer | Fri Dec 3 17:58:50 2021 +0100| [aea824467cf6051c9a316b4c620c723483da38ea] | committer: Michael Niedermayer avcodec/apedec: Change avg to uint32_t Fixes: Integer overflow Fixes: 40973/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fu

[FFmpeg-cvslog] avcodec/vp3: Check version in all cases when VP4 code is not built

ffmpeg | branch: release/4.3 | Michael Niedermayer | Tue Nov 30 19:46:17 2021 +0100| [a452eddfadd0b98e05a97d5572b3c6b71aa908d2] | committer: Michael Niedermayer avcodec/vp3: Check version in all cases when VP4 code is not built Fixes: out of array read Fixes: 40284/clusterfuzz-testcase-minimi

[FFmpeg-cvslog] avformat/mov: Disallow duplicate smdm

ffmpeg | branch: release/4.3 | Michael Niedermayer | Fri Dec 3 17:42:22 2021 +0100| [58368cc528cd82020be530694c2d8747b73b13f6] | committer: Michael Niedermayer avformat/mov: Disallow duplicate smdm Fixes: memleak Fixes: 39879/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5327819907923

[FFmpeg-cvslog] avformat/mov: Check channels for mov_parse_stsd_audio()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Nov 7 13:48:24 2021 +0100| [867b978dc90a8bf3dce2a76620f28d8dc7cb139a] | committer: Michael Niedermayer avformat/mov: Check channels for mov_parse_stsd_audio() Fixes: signed integer overflow: -776522110086937600 * 16 cannot be represente

[FFmpeg-cvslog] avformat/mov: Check for EOF in mov_read_glbl()

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sat Dec 4 20:11:35 2021 +0100| [784303ca013d4d8de9808472b8e28205ec5f7f7b] | committer: Michael Niedermayer avformat/mov: Check for EOF in mov_read_glbl() Fixes: Infinite loop Fixes: 41351/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzze

[FFmpeg-cvslog] avformat/avidec: Check read_odml_index() for failure

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Nov 14 18:23:24 2021 +0100| [0b0d4f141b13b6184b3d8fd727a05c0432bfb04e] | committer: Michael Niedermayer avformat/avidec: Check read_odml_index() for failure Fixes: Timeout Fixes: 40950/clusterfuzz-testcase-minimized-ffmpeg_dem_AVI_fuzze

[FFmpeg-cvslog] avformat/aiffdec: Use av_rescale() for bitrate

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Oct 31 00:11:23 2021 +0200| [00530ff352bf09d5ce64d7af153241fc43e94478] | committer: Michael Niedermayer avformat/aiffdec: Use av_rescale() for bitrate Fixes: integer overflow Fixes: 40313/clusterfuzz-testcase-minimized-ffmpeg_dem_AIFF_f

[FFmpeg-cvslog] avcodec/flac_parser: Consider AV_INPUT_BUFFER_PADDING_SIZE

ffmpeg | branch: release/4.3 | Michael Niedermayer | Thu Oct 21 13:25:59 2021 +0200| [e8a3e30a8522a3db73fcdc6ea9279ffefc8708e9] | committer: Michael Niedermayer avcodec/flac_parser: Consider AV_INPUT_BUFFER_PADDING_SIZE Fixes: out if array read Fixes: 40109/clusterfuzz-testcase-minimized-ffmp

[FFmpeg-cvslog] avformat/aiffdec: sanity check block_align

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Oct 31 00:10:39 2021 +0200| [b52cad186c40f2713cf88d062c61d77bfec9c990] | committer: Michael Niedermayer avformat/aiffdec: sanity check block_align Reviewed-by: Paul B Mahol Signed-off-by: Michael Niedermayer (cherry picked from commit

[FFmpeg-cvslog] avformat/aiffdec: Check sample_rate

ffmpeg | branch: release/4.3 | Michael Niedermayer | Sun Oct 31 00:02:04 2021 +0200| [e3a69dd7a00aa8d377236ec59610052fc7501f7e] | committer: Michael Niedermayer avformat/aiffdec: Check sample_rate Reviewed-by: Paul B Mahol Signed-off-by: Michael Niedermayer (cherry picked from commit 1b04836

[FFmpeg-cvslog] Update for FFmpeg 4.4.2

ffmpeg | branch: release/4.4 | Michael Niedermayer | Wed Apr 6 20:29:51 2022 +0200| [dcb2ad91253e4f913acc02b7db2192335e227f70] | committer: Michael Niedermayer Update for FFmpeg 4.4.2 Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dcb2ad91253e

[FFmpeg-cvslog] avcodec/exr: Avoid signed overflow in displayWindow

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Mar 21 21:03:13 2022 +0100| [15006f48cd75fb7c93c06dde50b76ea1309cce00] | committer: Michael Niedermayer avcodec/exr: Avoid signed overflow in displayWindow The inputs are unused except for this computation so wraparound does not give an

[FFmpeg-cvslog] avcodec/diracdec: avoid signed integer overflow in global mv

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Mar 21 20:51:47 2022 +0100| [977cfb719745dab296d748b6304f349b01ce6a08] | committer: Michael Niedermayer avcodec/diracdec: avoid signed integer overflow in global mv Fixes: signed integer overflow: -128275513086 * -76056576 cannot be repr

[FFmpeg-cvslog] avcodec/takdsp: Fix integer overflow in decorrelate_sf()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Mar 28 00:26:06 2022 +0200| [30194a348ec6ed70f4676c405957cd1eead94186] | committer: Michael Niedermayer avcodec/takdsp: Fix integer overflow in decorrelate_sf() Fixes: signed integer overflow: -101 * 71041254 cannot be represented in typ

[FFmpeg-cvslog] avcodec/apedec: fix a integer overflow in long_filter_high_3800()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Mar 28 00:12:17 2022 +0200| [27a609a8b900a2a7a2c99764c572fb0331c0485a] | committer: Michael Niedermayer avcodec/apedec: fix a integer overflow in long_filter_high_3800() Fixes: signed integer overflow: -2146549696 - 3923884 cannot be rep

[FFmpeg-cvslog] avformat/cafdec: Do not store empty keys in read_info_chunk()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Mar 19 23:36:22 2022 +0100| [fde82db1692a78faee893fda7fb2f844d65b104c] | committer: Michael Niedermayer avformat/cafdec: Do not store empty keys in read_info_chunk() Fixes: Timeout Fixes: 45543/clusterfuzz-testcase-minimized-ffmpeg_dem_

[FFmpeg-cvslog] avfilter/vf_subtitles: pass storage size to libass

ffmpeg | branch: release/4.4 | Oneric | Wed Mar 23 20:43:54 2022 +0100| [7ccd77a8ffbad3d56a86043d17b730a46074f0e9] | committer: Michael Niedermayer avfilter/vf_subtitles: pass storage size to libass Due to a quirk of the ASS format some tags depend on the exact storage resolution of the video,

[FFmpeg-cvslog] avformat/mxfdec: Do not clear array in mxf_read_strong_ref_array() before writing

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Mar 13 00:37:35 2022 +0100| [45a021aba12e32300e50002155d0cafb1ec154ab] | committer: Michael Niedermayer avformat/mxfdec: Do not clear array in mxf_read_strong_ref_array() before writing Signed-off-by: Michael Niedermayer (cherry picked

[FFmpeg-cvslog] avformat/aqtitledec: Skip unrepresentable durations

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Mar 20 00:07:50 2022 +0100| [b90c01a501382dce57b5579687e860d428b324dc] | committer: Michael Niedermayer avformat/aqtitledec: Skip unrepresentable durations Fixes: signed integer overflow: -5 - 9223372036854775807 cannot be represented i

[FFmpeg-cvslog] avformat/mxfdec: Check for avio_read() failure in mxf_read_strong_ref_array()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Mar 13 00:36:55 2022 +0100| [2ad47d59afaa1684801f0938adcb4a91e7983a67] | committer: Michael Niedermayer avformat/mxfdec: Check for avio_read() failure in mxf_read_strong_ref_array() Fixes: 42827/clusterfuzz-testcase-minimized-ffmpeg_dem

[FFmpeg-cvslog] avformat/mxfdec: Check count in mxf_read_strong_ref_array()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Mar 13 00:34:52 2022 +0100| [2a549b2e7d9f3edd4744afe288fcb012daee4a1e] | committer: Michael Niedermayer avformat/mxfdec: Check count in mxf_read_strong_ref_array() Reviewed-by: Tomas Härdin Signed-off-by: Michael Niedermayer (cherry pi

[FFmpeg-cvslog] avformat/hls: Check target_duration

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Mar 20 22:54:31 2022 +0100| [79ad18ddbd2f7feee33e24bff02afe4c10928b75] | committer: Michael Niedermayer avformat/hls: Check target_duration Fixes: signed integer overflow: 77 * 100 cannot be represented in type 'long lon

[FFmpeg-cvslog] avcodec/pixlet: Avoid signed integer overflow in scaling in filterfn()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Oct 26 21:30:19 2020 +0100| [b27833f06689eb0e44e2f044d8d4db8b831affed] | committer: Michael Niedermayer avcodec/pixlet: Avoid signed integer overflow in scaling in filterfn() Fixes: signed integer overflow: 11494 * 107374182400 canno

[FFmpeg-cvslog] avformat/matroskadec: Check pre_ns

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Feb 13 15:20:02 2022 +0100| [78eed60822f44205fae364855fec3dbd55b59432] | committer: Michael Niedermayer avformat/matroskadec: Check pre_ns Fixes: division by 0 Fixes: 44615/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFEST_fu

[FFmpeg-cvslog] avcodec/sonic: Use unsigned for predictor_k to avoid undefined behavior

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Feb 8 00:43:56 2022 +0100| [cd310f05024de48d69c9ebf5581b42e9307b6c40] | committer: Michael Niedermayer avcodec/sonic: Use unsigned for predictor_k to avoid undefined behavior Fixes: signed integer overflow: -1094995529 * 24 cannot be re

[FFmpeg-cvslog] avcodec/libuavs3d: Check ff_set_dimensions() for failure

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Feb 10 00:06:12 2022 +0100| [cc53ce7e5b009921ee80a5974cb978ef112f1148] | committer: Michael Niedermayer avcodec/libuavs3d: Check ff_set_dimensions() for failure Untested, no testcase Signed-off-by: Michael Niedermayer (cherry picked fr

[FFmpeg-cvslog] avcodec/mjpegbdec: Set buf_size

ffmpeg | branch: release/4.4 | Michael Niedermayer | Fri Mar 11 20:25:48 2022 +0100| [1064cf413aa68e2d365c910716fb1698f3374968] | committer: Michael Niedermayer avcodec/mjpegbdec: Set buf_size Fixes: Timeout Fixes: 45170/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MJPEGB_fuzzer-58748204

[FFmpeg-cvslog] avformat/matroskadec: Use rounded down duration in get_cue_desc() check

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Mar 10 23:24:49 2022 +0100| [326dafe40afabe604a1ca00fc56eb6e1db897ddd] | committer: Michael Niedermayer avformat/matroskadec: Use rounded down duration in get_cue_desc() check Floating point is evil, it would be better if duration was no

[FFmpeg-cvslog] avcodec/argo: Check packet size

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Feb 27 00:59:25 2022 +0100| [310a060e77980d92e5fc2c0983d6aa7c3b84a0a7] | committer: Michael Niedermayer avcodec/argo: Check packet size Fixes: Timeout Fixes: 45052/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ARGO_fuzzer-6033489206

[FFmpeg-cvslog] avcodec/g729_parser: Check channels

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Feb 27 14:43:04 2022 +0100| [e9e2ddbc6c78cc18b76093617f82c920e58a8d1f] | committer: Michael Niedermayer avcodec/g729_parser: Check channels Fixes: signed integer overflow: 10 * 808464428 cannot be represented in type 'int' Fixes: assert

[FFmpeg-cvslog] avformat/avidec: Check height

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Feb 27 21:44:29 2022 +0100| [061f8b941e954c3a6313b9084d020550ed609263] | committer: Michael Niedermayer avformat/avidec: Check height Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate

[FFmpeg-cvslog] avformat/rmdec: Better duplicate tags check

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Feb 24 00:26:08 2022 +0100| [261557160ff360b4924729c142c45a7a1f86fc13] | committer: Michael Niedermayer avformat/rmdec: Better duplicate tags check Fixes: memleaks Fixes: 44810/clusterfuzz-testcase-minimized-ffmpeg_dem_IVR_fuzzer-561949

[FFmpeg-cvslog] avformat/mov: Disallow empty sidx

ffmpeg | branch: release/4.4 | Michael Niedermayer | Wed Mar 2 13:01:53 2022 +0100| [338444c0161e044f1608b4f2780c619f1297512a] | committer: Michael Niedermayer avformat/mov: Disallow empty sidx It appears this is not allowed "Each Segment Index box documents how a (sub)segment is divided int

[FFmpeg-cvslog] avformat/mov: Corner case encryption error cleanup in mov_read_senc()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Wed Feb 9 22:01:03 2022 +0100| [166ee5fa684855ea0a44995c997cc09120c442a5] | committer: Michael Niedermayer avformat/mov: Corner case encryption error cleanup in mov_read_senc() Fixes: memleak Fixes: 42341/clusterfuzz-testcase-minimized-ffm

[FFmpeg-cvslog] avformat/argo_asf: Fix order of operations in error check in argo_asf_write_trailer()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Feb 14 20:24:07 2022 +0100| [811047f7c26f88118ccd2c10c940b7b66b1ebf5d] | committer: Michael Niedermayer avformat/argo_asf: Fix order of operations in error check in argo_asf_write_trailer() Signed-off-by: Michael Niedermayer (cherry pi

[FFmpeg-cvslog] avformat/matroskadec: Check duration

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Feb 14 20:01:35 2022 +0100| [5cdceec2f2a822c683b6c028574fd4c0905fd4b3] | committer: Michael Niedermayer avformat/matroskadec: Check duration Fixes: -nan is outside the range of representable values of type 'long' Fixes: 44614/clusterfuz

[FFmpeg-cvslog] avcodec/jpeglsdec: Fix if( code style

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Feb 15 21:01:06 2022 +0100| [badf284b529520e51452f62cb16be7cb0c5582bf] | committer: Michael Niedermayer avcodec/jpeglsdec: Fix if( code style Signed-off-by: Michael Niedermayer (cherry picked from commit f306b8e80ab04cfd8f6cd577a4484cb7

[FFmpeg-cvslog] avcodec/jpeglsdec: Check get_ur_golomb_jpegls() for error

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Feb 12 22:02:13 2022 +0100| [1caf4f91fb6caa834b9b89055ddfcadca37eb2b1] | committer: Michael Niedermayer avcodec/jpeglsdec: Check get_ur_golomb_jpegls() for error Fixes: Timeout Fixes: Invalid shift Fixes: 44548/clusterfuzz-testcase-mini

[FFmpeg-cvslog] avcodec/motion_est: fix indention of ff_get_best_fcode()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Wed Feb 9 10:31:34 2022 +0100| [1d8caf2e1ffa11c885ebb06ae4967ffa3494346d] | committer: Michael Niedermayer avcodec/motion_est: fix indention of ff_get_best_fcode() Signed-off-by: Michael Niedermayer (cherry picked from commit ce43e1c581b4e

[FFmpeg-cvslog] avcodec/motion_est: Fix xy indexing on range violation in ff_get_best_fcode()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Feb 8 21:38:50 2022 +0100| [f73e9b73ceb644451852176d3dc5566616cc62bc] | committer: Michael Niedermayer avcodec/motion_est: Fix xy indexing on range violation in ff_get_best_fcode() This codepath seems untested, no testcases change Foun

[FFmpeg-cvslog] avformat/hls: Use unsigned for iv computation

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Feb 8 00:30:59 2022 +0100| [faf66d99c04d0f6eb97ce4b3883e2f55f6d562fd] | committer: Michael Niedermayer avformat/hls: Use unsigned for iv computation Fixes: signed integer overflow: 9223372036854775748 + 60 cannot be represented in type

[FFmpeg-cvslog] avcodec/jpeglsdec: Increase range for N in ls_get_code_runterm() by using unsigned

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Feb 5 20:41:08 2022 +0100| [b356dcb2fe7145148015fb929e2fb4b35752] | committer: Michael Niedermayer avcodec/jpeglsdec: Increase range for N in ls_get_code_runterm() by using unsigned Fixes: left shift of 32768 by 16 places cannot be

[FFmpeg-cvslog] avformat/matroskadec: Check desc_bytes

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Feb 5 20:37:22 2022 +0100| [cc4707601d74945fb0115c1ce5bc2d4831a4e41a] | committer: Michael Niedermayer avformat/matroskadec: Check desc_bytes Fixes: Division by 0 Fixes: 44035/clusterfuzz-testcase-minimized-ffmpeg_dem_WEBM_DASH_MANIFES

[FFmpeg-cvslog] avformat/matroskadec: Fix infinite loop with bz decompression

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Feb 3 22:46:55 2022 +0100| [d3456a374d4eff67d3bebc0fcb52c6843a05a816] | committer: Michael Niedermayer avformat/matroskadec: Fix infinite loop with bz decompression The same check is added to zlib too, it seems not needed there though

[FFmpeg-cvslog] avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Fri Feb 4 00:44:32 2022 +0100| [032672a8f1907c518213406ca65c678d9a00ae65] | committer: Michael Niedermayer avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value() Fixes: pointer index expression with base 0x o

[FFmpeg-cvslog] avformat/mov: Check size before subtraction

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Jan 17 14:26:05 2022 +0100| [673f8d3641ced5c25862815ec458a4c9820c5162] | committer: Michael Niedermayer avformat/mov: Check size before subtraction Fixes: signed integer overflow: -9223372036854775808 - 8 cannot be represented in type '

[FFmpeg-cvslog] avcodec/cfhd: Avoid signed integer overflow in coeff

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Jan 17 14:16:39 2022 +0100| [447b9a0f030653cc6687905cc642453fa2063284] | committer: Michael Niedermayer avcodec/cfhd: Avoid signed integer overflow in coeff Fixes: signed integer overflow: 15244032 * 256 cannot be represented in type 'i

[FFmpeg-cvslog] avcodec/apedec: Fix integer overflows in predictor_update_3930()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Mon Jan 3 19:15:18 2022 +0100| [65d8418e11a710806e61452b41713ef1e076b102] | committer: Michael Niedermayer avcodec/apedec: Fix integer overflows in predictor_update_3930() Fixes: signed integer overflow: 1074134419 - -1075212485 cannot be r

[FFmpeg-cvslog] avcodec/apedec: fix integer overflow in 8bit samples

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Dec 23 20:39:14 2021 +0100| [6c5e26821e075e55fa398cf8a52f833cc1316148] | committer: Michael Niedermayer avcodec/apedec: fix integer overflow in 8bit samples Fixes: signed integer overflow: 2147483542 + 128 cannot be represented in type

[FFmpeg-cvslog] avcodec/tiff: Remove messing with jpeg context

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Dec 25 20:14:48 2021 +0100| [3fe61f91b3b27f7a91f2a2f8ae6d7719fcaadafc] | committer: Michael Niedermayer avcodec/tiff: Remove messing with jpeg context The whole concept is just not correct, also as it seems not to be needed at all, all d

[FFmpeg-cvslog] avformat/flvdec: timestamps cannot use the full int64 range

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Dec 23 20:36:16 2021 +0100| [be0109b881e688616ccac6551762e1a692befe11] | committer: Michael Niedermayer avformat/flvdec: timestamps cannot use the full int64 range We do not support this as we multiply by 1000 Fixes: signed integer overf

[FFmpeg-cvslog] avcodec/tiff: Use ff_set_dimensions() for setting up mjpeg context dimensions

ffmpeg | branch: release/4.4 | Michael Niedermayer | Fri Dec 17 20:52:32 2021 +0100| [14249d8a0376ce7d4d40eba0ee81c5973eb4441a] | committer: Michael Niedermayer avcodec/tiff: Use ff_set_dimensions() for setting up mjpeg context dimensions sets coded_width / coded_height too to keep them consis

[FFmpeg-cvslog] avcodec/tiff: Pass max_pixels to mjpeg context

ffmpeg | branch: release/4.4 | Michael Niedermayer | Fri Dec 17 20:43:15 2021 +0100| [24da8685f00fd8f0da646dd48d3e3103072e8f26] | committer: Michael Niedermayer avcodec/tiff: Pass max_pixels to mjpeg context Signed-off-by: Michael Niedermayer (cherry picked from commit d6c16f42ccebca917bb9861

[FFmpeg-cvslog] avcodec/vqavideo: reset accounting on error

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sun Dec 19 22:26:00 2021 +0100| [e2ae9adbe1c223232fded0e236c103bf26f289e7] | committer: Michael Niedermayer avcodec/vqavideo: reset accounting on error Fixes: Timeout (same growing chunk is decoded to failure repeatedly) Fixes: 42582/cluste

[FFmpeg-cvslog] avformat/4xm: Check for duplicate track ids

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Dec 7 09:14:09 2021 +0100| [59287d3880966cc70d6080a28649c66025987bc8] | committer: Michael Niedermayer avformat/4xm: Check for duplicate track ids Signed-off-by: Michael Niedermayer (cherry picked from commit dd949124793c722ed55dead9da

[FFmpeg-cvslog] avcodec/alacdsp: fix integer overflow in decorrelate_stereo()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Thu Jul 23 23:34:15 2020 +0200| [02b0143522936b4ee53aa132b5dec35c27bd46ea] | committer: Michael Niedermayer avcodec/alacdsp: fix integer overflow in decorrelate_stereo() Fixes: signed integer overflow: -16777216 * 131 cannot be represented i

[FFmpeg-cvslog] avformat/4xm: Consider max_streams on reallocating tracks array

ffmpeg | branch: release/4.4 | Michael Niedermayer | Tue Dec 7 09:14:08 2021 +0100| [8f83d2a94a8113ca61633b3cf7bf04cdeb0466dd] | committer: Michael Niedermayer avformat/4xm: Consider max_streams on reallocating tracks array Fixes: OOM Fixes: 41595/clusterfuzz-testcase-minimized-ffmpeg_dem_FO

[FFmpeg-cvslog] avformat/mov: Check next offset in mov_read_dref()

ffmpeg | branch: release/4.4 | Michael Niedermayer | Sat Dec 4 20:48:54 2021 +0100| [223b5abcb14dd4158890914603dc5619baa198f4] | committer: Michael Niedermayer avformat/mov: Check next offset in mov_read_dref() Fixes: signed integer overflow: 9223372036200463215 + 1109914409 cannot be repres

  1   2   >