[FFmpeg-cvslog] avformat/mov: Fix trampling of ctts during seeks when sidx support is enabled.

ffmpeg | branch: master | Dale Curtis | Mon Jul 17 17:38:09 2017 -0700| [37e8edc9f51545ad91cbdf7dbe796af93f011abe] | committer: Michael Niedermayer avformat/mov: Fix trampling of ctts during seeks when sidx support is enabled. When sidx box support is enabled, the code will skip reading all tr

[FFmpeg-cvslog] avformat/rtpdec_h264: Fix heap-buffer-overflow

ffmpeg | branch: master | Michael Niedermayer | Wed Aug 23 21:30:37 2017 +0200| [c42a1388a6d1bfd8001bf6a4241d8ca27e49326d] | committer: Michael Niedermayer avformat/rtpdec_h264: Fix heap-buffer-overflow Fixes: rtp_sdp/poc.sdp Found-by: Bingchang Signed-off-by: Michael Niedermayer > http://

[FFmpeg-cvslog] avcodec/hevc_ps: Check delta_pocs in ff_hevc_decode_short_term_rps()

ffmpeg | branch: master | Michael Niedermayer | Mon Aug 21 00:18:48 2017 +0200| [2b44dcbc44e99daf9515753e9fd4c2e1ea53a2fa] | committer: Michael Niedermayer avcodec/hevc_ps: Check delta_pocs in ff_hevc_decode_short_term_rps() Fixes: integer overflow Fixes: 2893/clusterfuzz-testcase-minimized-58

[FFmpeg-cvslog] ffprobe: Fix NULL pointer handling in color parameter printing

ffmpeg | branch: master | Michael Niedermayer | Tue Aug 22 17:27:17 2017 +0200| [351e28f9a799d933dd10c964dca7219fa13b] | committer: Michael Niedermayer ffprobe: Fix NULL pointer handling in color parameter printing Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/f

[FFmpeg-cvslog] ffprobe: Fix null pointer dereference with color primaries

ffmpeg | branch: master | Michael Niedermayer | Tue Aug 22 11:02:38 2017 +0200| [837cb4325b712ff1aab531bf41668933f61d75d2] | committer: Michael Niedermayer ffprobe: Fix null pointer dereference with color primaries Found-by: AD-lab of venustech Signed-off-by: Michael Niedermayer > http://git

[FFmpeg-cvslog] lsws/rgb2rgb: Add unscaled 48bit to 64bit rgb conversion.

ffmpeg | branch: master | Carl Eugen Hoyos | Wed Aug 23 14:19:14 2017 +0200| [cb1a3eecac2d3395bf1e26289643082b4305f86a] | committer: Carl Eugen Hoyos lsws/rgb2rgb: Add unscaled 48bit to 64bit rgb conversion. Based on b4befca2 and 6b7849e6 by Paul B Mahol. Fixes ticket #6608. > http://git.vid

[FFmpeg-cvslog] lavf/g726: Demuxer for raw G.726 streams, both left- and right-justified.

ffmpeg | branch: master | Carl Eugen Hoyos | Mon Aug 21 16:17:17 2017 +0200| [f61e2dcfc399113e1b0408e58a085fca329d0da4] | committer: Carl Eugen Hoyos lavf/g726: Demuxer for raw G.726 streams, both left- and right-justified. Compatible with the binary encoder attached to ticket #6596 (right-ali

[FFmpeg-cvslog] avcodec/pafvideo: Fix assertion failure

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 6 16:21:37 2017 +0200| [e3d4321739afcc25569bd462fdb518669b33f32b] | committer: Michael Niedermayer avcodec/pafvideo: Fix assertion failure Fixes: 2100/clusterfuzz-testcase-minimized-4522961547558912 Found-by: continuous fuzzing pro

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 6 16:28:57 2017 +0200| [e9c8fdbbcbb4c6d9490ba5231982724ce1c7472a] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int' Fixes: 2106/clu

[FFmpeg-cvslog] avcodec/takdec: Fix multiple runtime error: signed integer overflow: 637072 * 4096 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 6 16:01:16 2017 +0200| [8dc06a1cb151f6162fec554ac5113147eeadd7a5] | committer: Michael Niedermayer avcodec/takdec: Fix multiple runtime error: signed integer overflow: 637072 * 4096 cannot be represented in type 'int' Fixes: 2079/c

[FFmpeg-cvslog] avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 8 13:44:32 2017 +0200| [bcdd5463f35d7d4de07a18cb5f919979465bdeb6] | committer: Michael Niedermayer avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int' Fixes:

[FFmpeg-cvslog] avcodec/indeo4: Check remaining data in Pic hdr extension parsing code

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 8 13:58:47 2017 +0200| [f4dae487906aee87897938d79e998060b5a6583d] | committer: Michael Niedermayer avcodec/indeo4: Check remaining data in Pic hdr extension parsing code Fixes: Timeout Fixes: 2115/clusterfuzz-testcase-minimized-6594

[FFmpeg-cvslog] avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 00:45:20 2017 +0200| [e3a75af7080c25f64ce0bda30fe4bc0a39968917] | committer: Michael Niedermayer avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int' Fixes: 2175/clusterfu

[FFmpeg-cvslog] avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 14:32:35 2017 +0200| [295b24643ecfcdac7ce20d99a50d74d554c73d36] | committer: Michael Niedermayer avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616 Fixes: 2195/clusterfuzz-testcase-minimized-47367215330

[FFmpeg-cvslog] avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jun 10 19:43:25 2017 +0200| [5dc0393d9663596d8b8670c2ee3605f55fc6b1a0] | committer: Michael Niedermayer avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int' Fixes: 2174/cluster

[FFmpeg-cvslog] avcodec/tiff: Fix leak of geotags[].val

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 01:05:26 2017 +0200| [f0f9fa21846023d3c9522d6e32e70ea7ecf879d6] | committer: Michael Niedermayer avcodec/tiff: Fix leak of geotags[].val Fixes: 2176/clusterfuzz-testcase-minimized-5908197216878592 Found-by: continuous fuzzing pro

[FFmpeg-cvslog] avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 20:28:46 2017 +0200| [bc8fe5c4bdb49218c5a0ecbccbea665ac7af3bbb] | committer: Michael Niedermayer avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123 Fixes: 2208/clusterfuzz-testcase-minimized-5976593765761024

[FFmpeg-cvslog] avcodec/mpeg4videodec: Check sprite delta upshift against overflowing.

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Jun 14 23:55:17 2017 +0200| [7bca492cfcc7e17e7d9ea5697c318283bee45984] | committer: Michael Niedermayer avcodec/mpeg4videodec: Check sprite delta upshift against overflowing. Fixes: runtime error: signed integer overflow: -268386304 * 16

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Jun 14 23:49:23 2017 +0200| [296b444a5caf3e708dde2d92853e11846ae9e60a] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case Fixes: runtime error: signed integer overflow: 131072

[FFmpeg-cvslog] avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int'

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 20:19:59 2017 +0200| [0dfda74afc8da0cdaa134f0a48b43698714948f0] | committer: Michael Niedermayer avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int' Fixes: 2181/

[FFmpeg-cvslog] avcodec/snowdec: Fix runtime error: left shift of negative value -1

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 11 14:34:54 2017 +0200| [d182bb21add5466df01dedb274a708d90802cd19] | committer: Michael Niedermayer avcodec/snowdec: Fix runtime error: left shift of negative value -1 Fixes: 2197/clusterfuzz-testcase-minimized-6010716676947968 Foun

[FFmpeg-cvslog] avcodec/hevcdec: Check nb_sps

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 15 01:28:28 2017 +0200| [c8733c73763ff280cca91be740d11cf3853a9439] | committer: Michael Niedermayer avcodec/hevcdec: Check nb_sps Signed-off-by: Michael Niedermayer (cherry picked from commit bc406744620710911de9157eafa3e61d0246566f

[FFmpeg-cvslog] avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 13 16:25:59 2017 +0200| [fd0da0eef0076732a65d173186081c125e28068f] | committer: Michael Niedermayer avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble() Fixes: runtime error: shift exponent -10 is negative Found-by: continuous fuz

[FFmpeg-cvslog] avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 13 13:28:23 2017 +0200| [0ac41463891cf0899b72f862c2c7998b67316c8a] | committer: Michael Niedermayer avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible Fixes: 1775/clusterfuzz-testcase-minimi

[FFmpeg-cvslog] avcodec/hevc_refs: Check nb_refs in add_candidate_ref()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 15 01:26:01 2017 +0200| [c2562f5a8e0cfb80a3050f557bb8f5de830bf358] | committer: Michael Niedermayer avcodec/hevc_refs: Check nb_refs in add_candidate_ref() Fixes: runtime error: index 16 out of bounds for type 'int [16]' Fixes: 2209/

[FFmpeg-cvslog] avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 15 23:26:18 2017 +0200| [92c5ff0763b80156dcf6d3e0386d2c942c675398] | committer: Michael Niedermayer avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2() Fixes: runtime error: negation of -2147483648 cannot be represe

[FFmpeg-cvslog] avcodec/hevcpred_template: Fix left shift of negative value

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jun 17 14:54:19 2017 +0200| [ba23d53710ec67c1a5499578a180a2ceb68c8ced] | committer: Michael Niedermayer avcodec/hevcpred_template: Fix left shift of negative value Fixes: runtime error: left shift of negative value -1 Fixes: 2250/cluster

[FFmpeg-cvslog] avcodec/jpeg2000dec: Check nonzerobits more completely

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jun 16 19:57:08 2017 +0200| [c436af15596a4c3c4d43a9928f32837c913b25bc] | committer: Michael Niedermayer avcodec/jpeg2000dec: Check nonzerobits more completely Fixes: runtime error: shift exponent 36 is too large for 32-bit type 'int' Fix

[FFmpeg-cvslog] avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jun 17 00:34:08 2017 +0200| [1ce850f96da266df58a5c5235c0ff1a5e32814dc] | committer: Michael Niedermayer avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps() Fixes: runtime error: signed integer overflow: 2147483647 + 6 cannot

[FFmpeg-cvslog] avcodec/shorten: Sanity check maxnlpc

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jun 9 02:16:54 2017 +0200| [eb38f232b4ed613bafa088fa60b6bd6018303aac] | committer: Michael Niedermayer avcodec/shorten: Sanity check maxnlpc Fixes OOM Fixes: 2131/clusterfuzz-testcase-minimized-4718045157130240 Found-by: continuous fuz

[FFmpeg-cvslog] avcodec/h264_cabac: Fix CABAC+8x8dct in 4:4:4

ffmpeg | branch: release/2.8 | Anton Mitrofanov | Wed May 31 02:37:41 2017 +0300| [365ab04b16ecb106eadf88651e51739f6ef4770f] | committer: Michael Niedermayer avcodec/h264_cabac: Fix CABAC+8x8dct in 4:4:4 Use the correct ctxIdxInc calculation for coded_block_flag. Keep old behavior for old vers

[FFmpeg-cvslog] avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 18 14:37:19 2017 +0200| [5aa7d228cbad009939f8d4d6739bb456472a0297] | committer: Michael Niedermayer avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output Fixes: runtime error: signed integer overflow: 2147483543 + 128 c

[FFmpeg-cvslog] avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jun 17 15:06:21 2017 +0200| [0aa14c7f67b2483b76a685a5ed16ea44ec921f37] | committer: Michael Niedermayer avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows Fixes: runtime error: signed integer overflow: 580

[FFmpeg-cvslog] avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264

ffmpeg | branch: release/2.8 | Anton Mitrofanov | Tue Jun 13 23:37:29 2017 +0300| [a85f8fd4a6258bcedca9fed8079d7453283e96a8] | committer: Michael Niedermayer avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264 Signed-off-by: Ronald S. Bultje (cherry picked from commit 06dda70f1e7

[FFmpeg-cvslog] avcodec/wavpack: Fix undefined integer negation

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Jun 19 14:08:58 2017 +0200| [4afd24805954502d771e39107df245620c7e84af] | committer: Michael Niedermayer avcodec/wavpack: Fix undefined integer negation Fixes: runtime error: negation of -2147483648 cannot be represented in type 'int'; c

[FFmpeg-cvslog] avcodec/aacdec_fixed: Check s for being too small

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Jun 19 14:04:32 2017 +0200| [cbc4f40d137279eac5cea66f21fc99d1d87ccc37] | committer: Michael Niedermayer avcodec/aacdec_fixed: Check s for being too small Fixes: runtime error: shift exponent -8 is negative Fixes: 2286/clusterfuzz-testcas

[FFmpeg-cvslog] avcodec/h264: Fix mix of lossless and lossy MBs decoding

ffmpeg | branch: release/2.8 | Anton Mitrofanov | Wed Jun 14 03:01:56 2017 +0300| [ea73c4813d833409dc45257ec83cdb6829184374] | committer: Michael Niedermayer avcodec/h264: Fix mix of lossless and lossy MBs decoding Signed-off-by: Ronald S. Bultje (cherry picked from commit cf231b68da1150c1001

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix overflow in virtual_ref computation

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 20 13:52:06 2017 +0200| [b66e30ca7658b9965843be344ef377802d1d] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix overflow in virtual_ref computation Fixes: runtime error: signed integer overflow: 262144 * -16120 cannot

[FFmpeg-cvslog] avcodec/hevc_filter: Fix invalid shift

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 20 14:38:34 2017 +0200| [5c818b62867dee280e92021cae06450eb1625e51] | committer: Michael Niedermayer avcodec/hevc_filter: Fix invalid shift Fixes: runtime error: left shift of negative value -1 Fixes: 2299/clusterfuzz-testcase-minimi

[FFmpeg-cvslog] avcodec/wavpack: Fix integer overflow

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jun 23 01:58:48 2017 +0200| [fe74c2364ee3ac0478abf5c579d3ac27e02fc30c] | committer: Michael Niedermayer avcodec/wavpack: Fix integer overflow Fixes: runtime error: signed integer overflow: 227511904 + 1964113935 cannot be represented in

[FFmpeg-cvslog] avcodec/takdec: Fix integer overflow

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 22 21:21:56 2017 +0200| [7fadd9625f71fa05d9885e0cee6bbc579c4753db] | committer: Michael Niedermayer avcodec/takdec: Fix integer overflow Fixes: runtime error: signed integer overflow: 512 + 2147483146 cannot be represented in type '

[FFmpeg-cvslog] avcodec/tiff: Update pointer only when the result is used

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jun 22 20:21:05 2017 +0200| [be92b27024482579e42c767b2f5af319f932d0ec] | committer: Michael Niedermayer avcodec/tiff: Update pointer only when the result is used Fixes: runtime error: signed integer overflow: 538976288 * 32 cannot be re

[FFmpeg-cvslog] avcodec/mpeg4videodec: Fix GMC with videos of dimension 1

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jun 24 13:45:35 2017 +0200| [7ee48d9de118a26e51ef1e2b8b570022ace46145] | committer: Michael Niedermayer avcodec/mpeg4videodec: Fix GMC with videos of dimension 1 Fixes: runtime error: shift exponent -1 is negative Fixes: 2338/clusterfuzz

[FFmpeg-cvslog] avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jun 25 00:13:53 2017 +0200| [bd33b15fe6a6e6f366e8bf59d3c73024c56b9e3d] | committer: Michael Niedermayer avcodec/wavpack: Fix integer overflow in wv_unpack_stereo() Fixes: runtime error: signed integer overflow: 2080374785 + 2080374784 ca

[FFmpeg-cvslog] avcodec/apedec: Fix integer overflow

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 16 14:57:20 2017 +0200| [bbcb59b948264317a6fea016f9659a317355e4db] | committer: Michael Niedermayer avcodec/apedec: Fix integer overflow Fixes: out of array access Fixes: PoC.ape and others Found-by: Bingchang, Liu@VARAS of IIE Sign

[FFmpeg-cvslog] avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Jun 26 15:05:08 2017 +0200| [a6e90e5998ab15de7505b8ac7f7e094244581b51] | committer: Michael Niedermayer avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int() Fixes: runtime error: signed integer overflow: -163654656 * 256 canno

[FFmpeg-cvslog] avcodec/hevc_ps: Fix integer overflow with beta/tc offsets

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jun 30 16:23:32 2017 +0200| [a5e969dd28c2f6f5b2c322cb1856338f6e206ca1] | committer: Michael Niedermayer avcodec/hevc_ps: Fix integer overflow with beta/tc offsets Fixes: runtime error: signed integer overflow: 2113929216 * 2 cannot be r

[FFmpeg-cvslog] avcodec/wavpack: Fix invalid shift

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jun 27 13:47:32 2017 +0200| [610bd595228b41384c1910178a7efe40f3127cbd] | committer: Michael Niedermayer avcodec/wavpack: Fix invalid shift Fixes: runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Fixes: 237

[FFmpeg-cvslog] avcodec/vb: Check vertical GMC component before multiply

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Jun 28 20:29:02 2017 +0200| [f6954a1482f3c9d6ce4c0db82c9f9863b3b09d8f] | committer: Michael Niedermayer avcodec/vb: Check vertical GMC component before multiply Fixes: runtime error: signed integer overflow: 8224 * 663584 cannot be repr

[FFmpeg-cvslog] avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jul 15 22:22:52 2017 +0200| [1b1abf077d642fe38c2fd133cf18c99d4d7141b4] | committer: Michael Niedermayer avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later Fixes: runtime error: shift expone

[FFmpeg-cvslog] avcodec/mjpegdec: Clip DC also on the negative side.

ffmpeg | branch: release/2.8 | Michael Niedermayer | Wed Jul 12 16:24:18 2017 +0200| [a84ed3d01137ecfb31d3283f1a8bc9673468f188] | committer: Michael Niedermayer avcodec/mjpegdec: Clip DC also on the negative side. Fixes: runtime error: signed integer overflow: -16711425 + -2130772346 cannot b

[FFmpeg-cvslog] avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 2 03:30:54 2017 +0200| [82ba7646c2496a1d011ae6c3acfcd7825cffbf49] | committer: Michael Niedermayer avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise() Fixes: runtime error: signed integer overflow: -2049425300 + -1175

[FFmpeg-cvslog] avcodec/aacps (fixed point): Fix multiple signed integer overflows

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 9 15:19:18 2017 +0200| [080d6de9dfc12107e3f2feb15925b6b3710d2ee6] | committer: Michael Niedermayer avcodec/aacps (fixed point): Fix multiple signed integer overflows Fixes: runtime error: signed integer overflow: 1421978265 - -18103

[FFmpeg-cvslog] avcodec/aacdec_fixed: fix: left shift of negative value -1

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Jul 23 16:52:47 2017 +0200| [56e2ec0e9fea1f7673e97def41c0d4793a9489d6] | committer: Michael Niedermayer avcodec/aacdec_fixed: fix: left shift of negative value -1 Fixes: 2699/clusterfuzz-testcase-minimized-5631303862976512 Found-by: con

[FFmpeg-cvslog] doc/filters: typo in frei0r

ffmpeg | branch: release/2.8 | Brice Waegeneire | Sat Jul 22 00:09:29 2017 +0200| [061be75481ed7ef6596aff0b952011bc25e3b8b3] | committer: Michael Niedermayer doc/filters: typo in frei0r Signed-off-by: Brice Waegeneire Signed-off-by: Michael Niedermayer (cherry picked from commit 6a6eec485d23

[FFmpeg-cvslog] avformat/oggparsecelt: Do not re-allocate os->private

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Jul 25 03:19:07 2017 +0200| [490b6599bbf4949b26b30c6ccd186585ff3a1510] | committer: Michael Niedermayer avformat/oggparsecelt: Do not re-allocate os->private Fixes: double free Fixes: clusterfuzz-testcase-minimized-5080550145785856 Foun

[FFmpeg-cvslog] avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Jul 22 00:44:14 2017 +0200| [91442fdc1c6e5276095d04e0a59f690b11af4029] | committer: Michael Niedermayer avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20() Fixes: avcodec/aacps.c:511:40: runtime error: signed integer overf

[FFmpeg-cvslog] avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Jul 24 15:48:37 2017 +0200| [58ce199abac4f990d6c80b2be7192965e0d20ef6] | committer: Michael Niedermayer avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2 Fixes: runtime error: signed integer overflow: -2147483647

[FFmpeg-cvslog] avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jul 28 13:41:59 2017 +0200| [b566ab49ca84d7e83a40638e066b33cb5a1ef1ac] | committer: Michael Niedermayer avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2 Fixes: out of array accesses Fixes: crash-9238fa9e8d4fde3beda1f279626f5381

[FFmpeg-cvslog] avcodec/takdec: Fix integer overflow in decode_subframe()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jul 27 23:49:26 2017 +0200| [406d9fdd135789fc97a40e1f316a6f9d7079a452] | committer: Michael Niedermayer avcodec/takdec: Fix integer overflow in decode_subframe() Fixes: runtime error: signed integer overflow: -536870912 - 1972191120 cann

[FFmpeg-cvslog] avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jul 28 14:37:26 2017 +0200| [8f9cbb3b7e844f80e07caac40ac14a64aa938c99] | committer: Michael Niedermayer avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2 Fixes: out of array accesses Found-by: JunDong Xie of Ant-financia

[FFmpeg-cvslog] avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Jul 28 03:22:40 2017 +0200| [9d0eb81cb85cb061955153f0698fc12f0d89cafc] | committer: Michael Niedermayer avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0() Fixes: runtime error: signed integer overflow: 9 * 335544320 c

[FFmpeg-cvslog] avcodec/dirac_dwt: Fixes integer overflows in COMPOSE_DAUB97*

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 6 05:01:45 2017 +0200| [30a2c1a1b83f1931fe728c28fb03b203b1aebec8] | committer: Michael Niedermayer avcodec/dirac_dwt: Fixes integer overflows in COMPOSE_DAUB97* Fix multiple: runtime error: signed integer overflow: 6497 * 3409630 ca

[FFmpeg-cvslog] avcodec/diracdec: Fix integer overflow in divide3()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Jul 27 23:49:27 2017 +0200| [95d14e44ef4c1a1589d1c1dc39245dc72a39] | committer: Michael Niedermayer avcodec/diracdec: Fix integer overflow in divide3() Fixes: runtime error: signed integer overflow: -1073746548 * 21845 cannot be rep

[FFmpeg-cvslog] avcodec/mpeg4videodec: Clear mcsel before decoding an image

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sun Aug 6 13:32:54 2017 +0200| [96cf249751bb764199aa9a9c50bbd7f4724889cb] | committer: Michael Niedermayer avcodec/mpeg4videodec: Clear mcsel before decoding an image Fixes: runtime error: signed integer overflow: 2146467840 + 1032192 canno

[FFmpeg-cvslog] avcodec/h264_slice: Fix overflow in slice offset

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Aug 4 02:41:05 2017 +0200| [f236601e29b986a547d68aa3248e06ffbeee1e39] | committer: Michael Niedermayer avcodec/h264_slice: Fix overflow in slice offset Fixes: runtime error: signed integer overflow: 1610612736 * 2 cannot be represented

[FFmpeg-cvslog] avcodec/snowdec: Fix off by 1 error

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Aug 17 20:32:03 2017 +0200| [7829a712bb5af978289df8287160ea27d1e056ce] | committer: Michael Niedermayer avcodec/snowdec: Fix off by 1 error Fixes: runtime error: index 4 out of bounds for type 'int8_t [4]' Fixes: 3023/clusterfuzz-testcas

[FFmpeg-cvslog] avformat/utils: fix memory leak in avformat_free_context

ffmpeg | branch: release/2.8 | Steven Siloti | Tue Jul 18 11:26:39 2017 -0700| [f0f45d84045307eeca5d0ec950ddcea702c68997] | committer: Michael Niedermayer avformat/utils: fix memory leak in avformat_free_context The pointer to the packet queue is stored in the internal structure so the queue n

[FFmpeg-cvslog] avcodec/diracdec: Check perspective_exp and zrs_exp.

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Aug 15 03:32:43 2017 +0200| [b463a0347636fce1a55a6fcaeb4d8827d2929f2c] | committer: Michael Niedermayer avcodec/diracdec: Check perspective_exp and zrs_exp. Fixes: undefined shift Fixes: runtime error: shift exponent 264 is too large for

[FFmpeg-cvslog] avcodec/aacdec_fixed: fix invalid shift in predict()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Fri Aug 4 03:26:30 2017 +0200| [5f44aa14ddb2e09a43db7edb019bd98562c49816] | committer: Michael Niedermayer avcodec/aacdec_fixed: fix invalid shift in predict() Fixes: runtime error: shift exponent -2 is negative Fixes: 2818/clusterfuzz-test

[FFmpeg-cvslog] avcodec/me_cmp: Fix crashes on ARM due to misalignment

ffmpeg | branch: release/2.8 | Michael Niedermayer | Sat Aug 19 23:38:58 2017 +0200| [079849f40c52de33941c2776e8c971954b298b48] | committer: Michael Niedermayer avcodec/me_cmp: Fix crashes on ARM due to misalignment Adds a diff_pixels_unaligned() Fixes: https://bugs.debian.org/cgi-bin/bugrepo

[FFmpeg-cvslog] avcodec/fic: Fixes signed integer overflow

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Aug 17 18:24:37 2017 +0200| [0b37ae2ae475ba9f368f06d3302c5032897978ee] | committer: Michael Niedermayer avcodec/fic: Fixes signed integer overflow Fixes: runtime error: signed integer overflow: 1037142357 + 1227025305 cannot be represen

[FFmpeg-cvslog] avformat/mov: Fix signed integer overflows with total_size

ffmpeg | branch: release/2.8 | Vitaly Buka | Sun Aug 20 11:56:47 2017 -0700| [05fc22f9f69e56a76a52d5287d966d6d66b55ab2] | committer: Michael Niedermayer avformat/mov: Fix signed integer overflows with total_size Signed integer overflow is undefined behavior. Detected with clang and -fsanitize=

[FFmpeg-cvslog] avcodec/aacdec_template: Fix running cleanup in decode_ics_info()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Aug 21 02:15:49 2017 +0200| [cab75cde01709c56877948552eeaac5e71d55b14] | committer: Michael Niedermayer avcodec/aacdec_template: Fix running cleanup in decode_ics_info() Fixes: out of array read Fixes: 2873/clusterfuzz-testcase-minimized

[FFmpeg-cvslog] avcodec/hevc_ps: Check delta_pocs in ff_hevc_decode_short_term_rps()

ffmpeg | branch: release/2.8 | Michael Niedermayer | Mon Aug 21 00:18:48 2017 +0200| [ae37bbef4368f78ce3f4771100d12a2c26a69420] | committer: Michael Niedermayer avcodec/hevc_ps: Check delta_pocs in ff_hevc_decode_short_term_rps() Fixes: integer overflow Fixes: 2893/clusterfuzz-testcase-minimiz

[FFmpeg-cvslog] avformat/aviobuf: Fix signed integer overflow in avio_seek()

ffmpeg | branch: release/2.8 | Vitaly Buka | Sun Aug 20 11:56:47 2017 -0700| [eaf231544f2f93b96379af3adb71eb0e5f7c2664] | committer: Michael Niedermayer avformat/aviobuf: Fix signed integer overflow in avio_seek() Signed integer overflow is undefined behavior. Detected with clang and -fsanitiz

[FFmpeg-cvslog] ffprobe: Fix NULL pointer handling in color parameter printing

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Aug 22 17:27:17 2017 +0200| [49839ae0139c99944d191993cec50a968baea01d] | committer: Michael Niedermayer ffprobe: Fix NULL pointer handling in color parameter printing Signed-off-by: Michael Niedermayer (cherry picked from commit 351e28f

[FFmpeg-cvslog] ffprobe: Fix null pointer dereference with color primaries

ffmpeg | branch: release/2.8 | Michael Niedermayer | Tue Aug 22 11:02:38 2017 +0200| [c1a9f5675b956acc2080cab1953d83d501c3d5d9] | committer: Michael Niedermayer ffprobe: Fix null pointer dereference with color primaries Found-by: AD-lab of venustech Signed-off-by: Michael Niedermayer (cherry

[FFmpeg-cvslog] Update for FFmpeg 2.8.13

ffmpeg | branch: release/2.8 | Michael Niedermayer | Thu Aug 24 14:40:09 2017 +0200| [bc57c799704ae3a38deca9f522c1561f73efcf85] | committer: Michael Niedermayer Update for FFmpeg 2.8.13 Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bc57c799704

[FFmpeg-cvslog] avfilter/vf_blend: rename addition128 and difference128 to grainmerge and grainextract

ffmpeg | branch: master | Paul B Mahol | Thu Aug 24 14:43:00 2017 +0200| [f8d0689d3ff56bdeda708a14fad322cef8a219af] | committer: Paul B Mahol avfilter/vf_blend: rename addition128 and difference128 to grainmerge and grainextract > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f8d06

[FFmpeg-cvslog] avfilter/af_sidechaincompress: switch to activate

ffmpeg | branch: master | Paul B Mahol | Thu Aug 24 20:34:35 2017 +0200| [f0f48884b02354173747c31d5016eaefe3db6a00] | committer: Paul B Mahol avfilter/af_sidechaincompress: switch to activate > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f0f48884b02354173747c31d5016eaefe3db6a00 --

[FFmpeg-cvslog] fate: add test vector aac-al04sf_48

ffmpeg | branch: master | Alex Converse | Fri Aug 18 14:07:29 2017 -0700| [cb96e9bea41839407e8e0bef722ac0b9d23812ae] | committer: Alex Converse fate: add test vector aac-al04sf_48 > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cb96e9bea41839407e8e0bef722ac0b9d23812ae --- tests/f

[FFmpeg-cvslog] avcodec/aac: Add floating point 960/120 MDCT window

ffmpeg | branch: master | Paul B Mahol | Tue Jul 4 16:59:13 2017 +0200| [dbc9a8f21f92d0613142ea23bb836356fc41de38] | committer: Alex Converse avcodec/aac: Add floating point 960/120 MDCT window Co-Authored-By: Alex Converse Co-Authored-By: Rostislav Pehlivanov > http://git.videolan.org/git

[FFmpeg-cvslog] checkasm/vf_blend: rename addition128 and difference128 to grainmerge and grainextract

ffmpeg | branch: master | James Almer | Thu Aug 24 23:39:05 2017 -0300| [e51073fe00d2f7ae1c455d441b305e2b5c8251bc] | committer: James Almer checkasm/vf_blend: rename addition128 and difference128 to grainmerge and grainextract This was missing from f8d0689d3f. Fixes checkasm. > http://git.vid

[FFmpeg-cvslog] avfilter/af_firequalizer: reindent after previous commit

ffmpeg | branch: master | Muhammad Faiz | Fri Aug 25 10:39:16 2017 +0700| [e0e991f8a131c0b4417cf28a566a4b05f6372271] | committer: Muhammad Faiz avfilter/af_firequalizer: reindent after previous commit Signed-off-by: Muhammad Faiz > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e0

[FFmpeg-cvslog] avfilter/af_firequalizer: add min_phase option

ffmpeg | branch: master | Muhammad Faiz | Wed Aug 23 01:35:35 2017 +0700| [ae1ce0db91b8c29c94bcb2ab398d6102346344ef] | committer: Muhammad Faiz avfilter/af_firequalizer: add min_phase option Signed-off-by: Muhammad Faiz > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ae1ce0db91b8