[FFmpeg-cvslog] avcodec/dirac_vlc: Fix invalid shift

ffmpeg | branch: master | Michael Niedermayer | Fri Jul 28 02:23:25 2017 +0200| [46e407554968e7258c874f4caf517172ffa285cf] | committer: Michael Niedermayer avcodec/dirac_vlc: Fix invalid shift Fixes: runtime error: shift exponent 65 is too large for 64-bit type 'residual' (aka 'unsigned long'

[FFmpeg-cvslog] avcodec/diracdec: Check weight_log2denom

ffmpeg | branch: master | Michael Niedermayer | Sat Jul 29 15:46:50 2017 +0200| [880f5c59139e1d85d3a0b3433103f3fea17ff2d3] | committer: Michael Niedermayer avcodec/diracdec: Check weight_log2denom Fixes: runtime error: shift exponent -1 is negative Fixes: 2742/clusterfuzz-testcase-minimized-57

[FFmpeg-cvslog] avcodec/diracdsp: fix integer overflow

ffmpeg | branch: master | Michael Niedermayer | Sat Jul 29 15:55:36 2017 +0200| [b2d9d7226943d6229a17e31714ce5162bdf88b33] | committer: Michael Niedermayer avcodec/diracdsp: fix integer overflow Fixes: runtime error: signed integer overflow: 11 * 225726413 cannot be represented in type 'int'

[FFmpeg-cvslog] avcodec/tiff: Update pointer only when the result is used

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 22 20:21:05 2017 +0200| [62b536690d2777b72eefd5af936e4773058f2fdb] | committer: Michael Niedermayer avcodec/tiff: Update pointer only when the result is used Fixes: runtime error: signed integer overflow: 538976288 * 32 cannot be re

[FFmpeg-cvslog] avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jun 25 00:13:53 2017 +0200| [62e942ab1c04d29c8c14257e46bf65f66e0ff792] | committer: Michael Niedermayer avcodec/wavpack: Fix integer overflow in wv_unpack_stereo() Fixes: runtime error: signed integer overflow: 2080374785 + 2080374784 ca

[FFmpeg-cvslog] avcodec/takdec: Fix integer overflow

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jun 22 21:21:56 2017 +0200| [10a085a21f2da353652d67f17292b24fbd9fd67a] | committer: Michael Niedermayer avcodec/takdec: Fix integer overflow Fixes: runtime error: signed integer overflow: 512 + 2147483146 cannot be represented in type '

[FFmpeg-cvslog] avcodec/wavpack: Fix integer overflow

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 23 01:58:48 2017 +0200| [b3cf49b6f9a2a3459250350fdb2b70ac164116e0] | committer: Michael Niedermayer avcodec/wavpack: Fix integer overflow Fixes: runtime error: signed integer overflow: 227511904 + 1964113935 cannot be represented in

[FFmpeg-cvslog] avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon Jun 26 15:05:08 2017 +0200| [634e9a696d85fd32456f61aa23ca5f90544788fe] | committer: Michael Niedermayer avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int() Fixes: runtime error: signed integer overflow: -163654656 * 256 canno

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix GMC with videos of dimension 1

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jun 24 13:45:35 2017 +0200| [f626a479f41245de5d5f666c76833797b94a8b57] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix GMC with videos of dimension 1 Fixes: runtime error: shift exponent -1 is negative Fixes: 2338/clusterfuzz

[FFmpeg-cvslog] avcodec/apedec: Fix integer overflow

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jul 16 14:57:20 2017 +0200| [750fec58e175b22ac23ff349c4b0a9b765ea4d0c] | committer: Michael Niedermayer avcodec/apedec: Fix integer overflow Fixes: out of array access Fixes: PoC.ape and others Found-by: Bingchang, Liu@VARAS of IIE Sign

[FFmpeg-cvslog] avcodec/hevc_ps: Fix integer overflow with beta/tc offsets

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jun 30 16:23:32 2017 +0200| [0837678cbd332489cd89700df22d0a8da0e3721c] | committer: Michael Niedermayer avcodec/hevc_ps: Fix integer overflow with beta/tc offsets Fixes: runtime error: signed integer overflow: 2113929216 * 2 cannot be r

[FFmpeg-cvslog] avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jul 2 03:30:54 2017 +0200| [215d6f897d3ef879dcfcf2a66881e3542881cec2] | committer: Michael Niedermayer avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise() Fixes: runtime error: signed integer overflow: -2049425300 + -1175

[FFmpeg-cvslog] avcodec/wavpack: Fix invalid shift

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jun 27 13:47:32 2017 +0200| [be1f146a0f1c1d30d6ec09b93c29615dae7caff6] | committer: Michael Niedermayer avcodec/wavpack: Fix invalid shift Fixes: runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes: 237

[FFmpeg-cvslog] avcodec/h264_slice: Fix signed integer overflow

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jul 5 00:05:11 2017 +0200| [965f15551fb07f1c0be37fd369b0ab4462da0965] | committer: Michael Niedermayer avcodec/h264_slice: Fix signed integer overflow Fixes: runtime error: signed integer overflow: 26 + 2147483644 cannot be represented

[FFmpeg-cvslog] avcodec/cfhd: Fix invalid left shift of negative value

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jun 28 20:47:59 2017 +0200| [d2452b9e20ec16f241274f9ea836803b0652678e] | committer: Michael Niedermayer avcodec/cfhd: Fix invalid left shift of negative value Fixes: runtime error: left shift of negative value -1 Fixes: 2395/clusterfuzz-

[FFmpeg-cvslog] avcodec/vb: Check vertical GMC component before multiply

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jun 28 20:29:02 2017 +0200| [73f42b7b58caea043578f6041be655b15c14fc70] | committer: Michael Niedermayer avcodec/vb: Check vertical GMC component before multiply Fixes: runtime error: signed integer overflow: 8224 * 663584 cannot be repr

[FFmpeg-cvslog] avcodec/aacps (fixed point): Fix multiple signed integer overflows

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jul 9 15:19:18 2017 +0200| [910878e4d90a0850872336d656b12b77daf15f21] | committer: Michael Niedermayer avcodec/aacps (fixed point): Fix multiple signed integer overflows Fixes: runtime error: signed integer overflow: 1421978265 - -18103

[FFmpeg-cvslog] avcodec/ylc: Fix vlc of 31 bits

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jul 8 22:51:57 2017 +0200| [51f0580c5f4315cae4788e0fbfb7c26fa191afd3] | committer: Michael Niedermayer avcodec/ylc: Fix vlc of 31 bits Fixes: runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes: 2515/c

[FFmpeg-cvslog] avcodec/mjpegdec: Clip DC also on the negative side.

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jul 12 16:24:18 2017 +0200| [506bbbc09929e1d2778259fb9549743c5bce5fdc] | committer: Michael Niedermayer avcodec/mjpegdec: Clip DC also on the negative side. Fixes: runtime error: signed integer overflow: -16711425 + -2130772346 cannot b

[FFmpeg-cvslog] avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jul 15 22:22:52 2017 +0200| [02bec657f37101b70978997f18d3f482dcea0295] | committer: Michael Niedermayer avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later Fixes: runtime error: shift expone

[FFmpeg-cvslog] avcodec/aacdec_template: Fix undefined integer overflow in apply_tns()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jul 14 00:45:29 2017 +0200| [a2c3c9bc6038b03af917c7d840ca56d062574ba2] | committer: Michael Niedermayer avcodec/aacdec_template: Fix undefined integer overflow in apply_tns() Fixes: runtime error: signed integer overflow: -2147483648 - 1

[FFmpeg-cvslog] avcodec/cfhd: Fix decoding regression due to height check

ffmpeg | branch: release/3.1 | Vodyannikov Aleksandr | Fri Jul 21 11:49:45 2017 +0200| [c6d9d0022093f2a8b5331b0d41e99429ccf3f02a] | committer: Michael Niedermayer avcodec/cfhd: Fix decoding regression due to height check Fixes: Ticket6546 Regression since: 54aaadf648073149f1ac34f56cbde4e6c5aa

[FFmpeg-cvslog] avcodec/magicyuv: Check that vlc len is not too large

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jul 12 17:25:16 2017 +0200| [94077cf6735afd1a166848d388c3a59764e7c71c] | committer: Michael Niedermayer avcodec/magicyuv: Check that vlc len is not too large Fixes: runtime error: shift exponent -95 is negative Fixes: 2568/clusterfuzz-te

[FFmpeg-cvslog] doc/filters: typo in frei0r

ffmpeg | branch: release/3.1 | Brice Waegeneire | Sat Jul 22 00:09:29 2017 +0200| [2453c66b0ff8a847c1882f60ca7b94177fc43c16] | committer: Michael Niedermayer doc/filters: typo in frei0r Signed-off-by: Brice Waegeneire Signed-off-by: Michael Niedermayer (cherry picked from commit 6a6eec485d23

[FFmpeg-cvslog] avcodec/aacdec_fixed: fix: left shift of negative value -1

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sun Jul 23 16:52:47 2017 +0200| [918d45ec82ea83c5463339d7e72fb4dcc9a167d4] | committer: Michael Niedermayer avcodec/aacdec_fixed: fix: left shift of negative value -1 Fixes: 2699/clusterfuzz-testcase-minimized-5631303862976512 Found-by: con

[FFmpeg-cvslog] avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jul 22 00:44:14 2017 +0200| [2755c73d55b2c92e73698aa03c580f311dc36d6f] | committer: Michael Niedermayer avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20() Fixes: avcodec/aacps.c:511:40: runtime error: signed integer overf

[FFmpeg-cvslog] avformat/oggparsecelt: Do not re-allocate os->private

ffmpeg | branch: release/3.1 | Michael Niedermayer | Tue Jul 25 03:19:07 2017 +0200| [65304d33a20f0d88bcc526ac01e5299c88cff566] | committer: Michael Niedermayer avformat/oggparsecelt: Do not re-allocate os->private Fixes: double free Fixes: clusterfuzz-testcase-minimized-5080550145785856 Foun

[FFmpeg-cvslog] avcodec/dnxhddec: Move mb height check out of non hr branch

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jul 26 03:26:59 2017 +0200| [956f2db21ffc1ca7f8dae7a3f44b09a145d9b9fa] | committer: Michael Niedermayer avcodec/dnxhddec: Move mb height check out of non hr branch Fixes: out of array access Fixes: poc.dnxhd Found-by: Bingchang, Liu@VAR

[FFmpeg-cvslog] avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Wed Jul 26 20:26:43 2017 +0200| [f4c8449238319d23e2e1bcd151c9af38e36c7eb3] | committer: Michael Niedermayer avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH() Fixes: runtime error: signed integer overflow: 107

[FFmpeg-cvslog] avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jul 28 13:41:59 2017 +0200| [54a6c1368cdbb13eb0015433edca0d0fc9ea5dfb] | committer: Michael Niedermayer avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2 Fixes: out of array accesses Fixes: crash-9238fa9e8d4fde3beda1f279626f5381

[FFmpeg-cvslog] avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2

ffmpeg | branch: release/3.1 | Michael Niedermayer | Mon Jul 24 15:48:37 2017 +0200| [7f3124e08c3084c27ffa1dbd71659844a2c23f32] | committer: Michael Niedermayer avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2 Fixes: runtime error: signed integer overflow: -2147483647

[FFmpeg-cvslog] avcodec/ylc: Fix shift overflow

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jul 22 02:57:12 2017 +0200| [a0edd7f583b8f63340a3c46c04d44f2ed5e0d4e7] | committer: Michael Niedermayer avcodec/ylc: Fix shift overflow Fixes: runtime error: shift exponent 32 is too large for 32-bit type 'unsigned int' Fixes: 2698/clus

[FFmpeg-cvslog] avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jul 28 03:22:40 2017 +0200| [acedc53186c4c9564d3b6442bb293ffc4d7b7f8b] | committer: Michael Niedermayer avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0() Fixes: runtime error: signed integer overflow: 9 * 335544320 c

[FFmpeg-cvslog] avcodec/diracdec: Fix integer overflow in divide3()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jul 27 23:49:27 2017 +0200| [6b1c71040d170c66b20d214a17aacefc215cd9c5] | committer: Michael Niedermayer avcodec/diracdec: Fix integer overflow in divide3() Fixes: runtime error: signed integer overflow: -1073746548 * 21845 cannot be rep

[FFmpeg-cvslog] avcodec/takdec: Fix integer overflow in decode_subframe()

ffmpeg | branch: release/3.1 | Michael Niedermayer | Thu Jul 27 23:49:26 2017 +0200| [6274709c1c110cbb714a2bd0292bb9e96d9d561f] | committer: Michael Niedermayer avcodec/takdec: Fix integer overflow in decode_subframe() Fixes: runtime error: signed integer overflow: -536870912 - 1972191120 cann

[FFmpeg-cvslog] avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2

ffmpeg | branch: release/3.1 | Michael Niedermayer | Fri Jul 28 14:37:26 2017 +0200| [06ce68d8a07d6365d67fdd8ed3c1e422f97a43fa] | committer: Michael Niedermayer avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2 Fixes: out of array accesses Found-by: JunDong Xie of Ant-financia

[FFmpeg-cvslog] avcodec/diracdec: Check weight_log2denom

ffmpeg | branch: release/3.1 | Michael Niedermayer | Sat Jul 29 15:46:50 2017 +0200| [6d849e2706d04588d16ee65dacea21f24f30d9d4] | committer: Michael Niedermayer avcodec/diracdec: Check weight_log2denom Fixes: runtime error: shift exponent -1 is negative Fixes: 2742/clusterfuzz-testcase-minimiz

[FFmpeg-cvslog] lavc/tests: add htmlsubtitles

ffmpeg | branch: master | Clément Bœsch | Sat Jul 29 20:56:55 2017 +0200| [55949e3e51890de36574d8b5c27889b44108a839] | committer: Clément Bœsch lavc/tests: add htmlsubtitles > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=55949e3e51890de36574d8b5c27889b44108a839 --- libavcodec/Ma

[FFmpeg-cvslog] lavc/htmlsubtitles: improve line breaks handling

ffmpeg | branch: master | Clément Bœsch | Sat Jul 29 21:09:54 2017 +0200| [e80037186327f97fffad75161e7d71cd9f5685f6] | committer: Clément Bœsch lavc/htmlsubtitles: improve line breaks handling > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e80037186327f97fffad75161e7d71cd9f5685f6

[FFmpeg-cvslog] lavc/htmlsubtitles: improve handling broken garbage

ffmpeg | branch: master | Clément Bœsch | Sat Jul 29 20:56:25 2017 +0200| [f0f8da545d80665ae54d51df61e8f6903c85390a] | committer: Clément Bœsch lavc/htmlsubtitles: improve handling broken garbage This commit switches off forced correct nesting of tags and only keeps it for font tags. See long

[FFmpeg-cvslog] lavc/htmlsubtitles: reindent after previous commits

ffmpeg | branch: master | Clément Bœsch | Sat Jul 29 21:24:34 2017 +0200| [1193301758b8af2ccd05e0dba5c4320e1e0702ac] | committer: Clément Bœsch lavc/htmlsubtitles: reindent after previous commits > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1193301758b8af2ccd05e0dba5c4320e1e0702

[FFmpeg-cvslog] lavc/htmlsubtitles: handle colors starting with many '#'

ffmpeg | branch: master | Clément Bœsch | Sat Jul 29 21:22:17 2017 +0200| [479ab8c3f842145fcdd87a574b3fd7b4022034a3] | committer: Clément Bœsch lavc/htmlsubtitles: handle colors starting with many '#' > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=479ab8c3f842145fcdd87a574b3fd7b40