ffmpeg | branch: release/5.1 | Dale Curtis | Wed Nov
22 22:17:37 2023 +| [8f209d2c90e84cd250f1a4667d1d83ec196f51dc] | committer:
Michael Niedermayer
avformat/mov: Fix integer overflow in mov_read_packet().
Fixes https://crbug.com/1499669:
runtime error: signed integer overflow
ffmpeg | branch: release/6.0 | Dale Curtis | Wed Nov
22 22:17:37 2023 +| [90571795e208a7061eb358e7f0f073c17a7ecbcc] | committer:
Michael Niedermayer
avformat/mov: Fix integer overflow in mov_read_packet().
Fixes https://crbug.com/1499669:
runtime error: signed integer overflow
ffmpeg | branch: master | Dale Curtis | Mon Apr 10
10:52:08 2023 -0700| [bba6df9ac7bd8386d92e1a7f5c737ca4e575fccf] | committer:
Michael Niedermayer
Don't throw an error when attached picture isn't recognized.
The MIME type field is required per the FLAC standard, but it's
not an error just
ffmpeg | branch: master | Dale Curtis | Fri Feb 2
20:49:44 2024 +| [6ef32ea5748e9dcc2c8d1c076607b8d15650a5fe] | committer:
Michael Niedermayer
Avoid OOM for invalid STCO / CO64 constructions.
The `entries` value is read directly from the stream and used to
allocate memory. This change
ffmpeg | branch: release/6.1 | Dale Curtis | Wed Nov
22 22:17:37 2023 +| [ca5ebfb066b1298c6b1f84b03185fb8463bc7884] | committer:
Michael Niedermayer
avformat/mov: Fix integer overflow in mov_read_packet().
Fixes https://crbug.com/1499669:
runtime error: signed integer overflow
ffmpeg | branch: release/4.4 | Dale Curtis | Wed Nov
22 22:17:37 2023 +| [207e003758d80ffa595e21543007021659c0e535] | committer:
Michael Niedermayer
avformat/mov: Fix integer overflow in mov_read_packet().
Fixes https://crbug.com/1499669:
runtime error: signed integer overflow
ffmpeg | branch: master | Dale Curtis | Wed Nov 22
22:17:37 2023 +| [2182173a6933c02b0853751034bd5e0bf829b5f7] | committer:
Michael Niedermayer
avformat/mov: Fix integer overflow in mov_read_packet().
Fixes https://crbug.com/1499669:
runtime error: signed integer overflow
ffmpeg | branch: master | Dale Curtis | Thu Aug 13
15:02:02 2020 -0700| [2ff3c466eca66bb8eb32bb41a4ce70fe285e3ea0] | committer:
Derek Buitenhuis
avformat/mov: See if mfra makes up the difference for an incomplete sidx.
A few popular sites have started generating MP4 files which have a
sidx
ffmpeg | branch: release/4.2 | Dale Curtis | Thu May
14 14:38:07 2020 -0700| [361416218a2d3b4d83209b4ca5e36419cfd5eeb0] | committer:
Michael Niedermayer
avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
ffmpeg | branch: release/2.8 | Dale Curtis | Thu May
14 15:31:55 2020 -0700| [832ae51f9b4ce1003c2e817900b0332d1df457f7] | committer:
Michael Niedermayer
avformat/mov: Don't allow negative sample sizes.
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
(cherry picked from commit
ffmpeg | branch: release/4.3 | Dale Curtis | Thu May
14 14:38:07 2020 -0700| [8dee726b1a5c82c5e6578a606b299c6fdc74c142] | committer:
Michael Niedermayer
avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
ffmpeg | branch: master | Dale Curtis | Thu May 14
14:38:07 2020 -0700| [bf446711bc8b7f316771870b8d4dc4dd65f5d94b] | committer:
Michael Niedermayer
avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
> h
ffmpeg | branch: master | Dale Curtis | Thu May 14
14:47:49 2020 -0700| [d9aa1ef2c2dfbadcfe3783cee97e9c59dbfe7fb1] | committer:
Michael Niedermayer
avutil/mathematics: Fix overflow with NaN in av_add_stable()
Signed-off-by: Michael Niedermayer
> http://git.videolan.org/gitweb.cgi/ffmpeg.
ffmpeg | branch: master | Dale Curtis | Thu May 14
14:47:49 2020 -0700| [63ce7c71bc1b1b6c141df5daae0f8fed52194b72] | committer:
Michael Niedermayer
avformat: Fix overflow in compute_pkt_fields().
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
> http://git.videolan.
ffmpeg | branch: master | Dale Curtis | Fri May 15
12:37:02 2020 -0700| [57564a2cfc9c424d137e8279955ac9e892c8d794] | committer:
Michael Niedermayer
avformat/oggparsetheora: Don't update start time when lastpts is AV_NOPTS_VALUE.
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
ffmpeg | branch: master | Dale Curtis | Thu May 14
14:33:55 2020 -0700| [fc54db32652bc830fba002da19c2ba9ba4508ca5] | committer:
Michael Niedermayer
Use av_sat_sub64() when updating pts by duration.
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
> http://git.videolan.
ffmpeg | branch: master | Dale Curtis | Thu May 14
14:29:15 2020 -0700| [f3068be15b361698429ac205ebc728398b4a3cbb] | committer:
Michael Niedermayer
avformat/utils: Use av_sat_add64() when updating start_time by skip_samples.
Avoids overflow from fuzzed skip_samples values.
Signed-off
ffmpeg | branch: master | Dale Curtis | Fri May 1
10:20:43 2020 -0700| [fda1c74539d7b0680f34ca765c2c0055d8f2bb3e] | committer:
Michael Niedermayer
Use gcc/clang builtins for av_sat_(add|sub)_64_c if available.
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
> h
ffmpeg | branch: master | Dale Curtis | Thu Apr 23
16:18:18 2020 -0700| [460132c9980f8a1f501a1f69477bca49e1641233] | committer:
Anton Khirnov
lavf/mp3dec: don't adjust start time; packets are not adjusted.
7546ac2fee4 made it so that the start_time for mp3 files is
adjusted for skip_samples
ffmpeg | branch: release/4.2 | Dale Curtis | Mon May
18 15:35:35 2020 -0700| [7c01f2770131f3e80d1e365f334c26b908178ad4] | committer:
Michael Niedermayer
avformat/mov: Free temp buffer upon negative sample_size error.
2d8d554f15a7a27cfeca81467cc9341a86f784e2 added a new error condition
ffmpeg | branch: master | Dale Curtis | Mon May 18
15:35:35 2020 -0700| [cd0771c38c06ef397466123c6c85521835f98bfd] | committer:
Michael Niedermayer
avformat/mov: Free temp buffer upon negative sample_size error.
2d8d554f15a7a27cfeca81467cc9341a86f784e2 added a new error condition
ffmpeg | branch: master | Dale Curtis | Thu Apr 30
15:16:31 2020 -0700| [a7e1af3cb10b7c914622deff3435bc20eb65] | committer:
Michael Niedermayer
avutil/common: Add saturated add/sub operations for int64_t.
Many places are using their own custom code for handling overflow
around timestamps
ffmpeg | branch: master | Dale Curtis | Thu May 14
15:31:55 2020 -0700| [2d8d554f15a7a27cfeca81467cc9341a86f784e2] | committer:
Michael Niedermayer
avformat/mov: Don't allow negative sample sizes.
Signed-off-by: Dale Curtis
Signed-off-by: Michael Niedermayer
> http://git.videolan.
ffmpeg | branch: release/2.8 | Dale Curtis | Tue Jan
28 16:49:14 2020 -0800| [efaa2a05c0c68dc2404e7d977dc17a86e042701d] | committer:
Michael Niedermayer
avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index()
When e2_pts == INT64_MIN and e1_pts >= 0 the calculat
ffmpeg | branch: master | Dale Curtis | Fri Feb 21
12:53:30 2020 -0800| [a0faf0db4f9f85ce2b8e00660c4fd884a347ca19] | committer:
Michael Niedermayer
avformat/utils: Don't trigger errors for multiple id3 tags.
Such errors may make sense for specific formats, but general parsing
logic shouldn't
ffmpeg | branch: master | Dale Curtis | Tue Jan 28
16:49:14 2020 -0800| [f15007afa90a3eb3639848d9702c1cc3ac3e896b] | committer:
Michael Niedermayer
avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index()
When e2_pts == INT64_MIN and e1_pts >= 0 the calculation of
e2_
ffmpeg | branch: release/3.2 | Dale Curtis | Thu Aug
30 15:18:25 2018 -0700| [a72d42b80ff4a9220cb20b2231d55ada0d6b0b3b] | committer:
Michael Niedermayer
avformat/mov: Error on too large stsd entry counts.
Entries are always at least 8 bytes per the parsing code, so if we
see an impossible
ffmpeg | branch: release/3.3 | Dale Curtis | Thu Aug
30 15:18:25 2018 -0700| [1acec9bbf55b9d53c20e8d2f147458262abdc28f] | committer:
Michael Niedermayer
avformat/mov: Error on too large stsd entry counts.
Entries are always at least 8 bytes per the parsing code, so if we
see an impossible
ffmpeg | branch: release/3.4 | Dale Curtis | Thu Aug
30 15:18:25 2018 -0700| [eab5f6e419ec8b195d0247d5a4acce9cfc9e0f7a] | committer:
Michael Niedermayer
avformat/mov: Error on too large stsd entry counts.
Entries are always at least 8 bytes per the parsing code, so if we
see an impossible
ffmpeg | branch: release/4.0 | Dale Curtis | Thu Aug
30 15:18:25 2018 -0700| [968ffb93af0449deea8617319aa0b9b5083da996] | committer:
Michael Niedermayer
avformat/mov: Error on too large stsd entry counts.
Entries are always at least 8 bytes per the parsing code, so if we
see an impossible
ffmpeg | branch: master | Dale Curtis | Fri Sep 7
15:37:09 2018 -0700| [8ef7fb86d62c9d44697c8eef0ddc424be4a3612b] | committer:
Michael Niedermayer
avformat/utils: Don't calculate duration using AV_NOPTS_VALUE for start_time.
Found by ClusterFuzz, https://crbug.com/879852
Signed-off
ffmpeg | branch: master | Dale Curtis | Thu Aug 30
15:18:25 2018 -0700| [320b631a99a9f759fd1d5460fd4e285d184b8186] | committer:
Michael Niedermayer
avformat/mov: Error on too large stsd entry counts.
Entries are always at least 8 bytes per the parsing code, so if we
see an impossible entry
ffmpeg | branch: master | Dale Curtis | Tue Aug 21
15:42:31 2018 -0700| [e7080d1fe29b0fc2ef3ac99234e037e6a49f5c97] | committer:
Michael Niedermayer
avformat/mov: Correct opus-in-mp4 pre-skip to be uint16_t versus int16_t.
This field is a uint16_t, see docs:
http://opus-codec.org/docs
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Thu Feb 15
16:22:55 2018 -0800| [a246701e9abe8ef7cb9b0dd9fb5fa877e78334ef] | committer:
Alex Converse
Parse and drop gain control data, so that SSR packets decode.
This will result in poor quality audio for SSR s
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 13:35:56 2017 -0800| [2543475730b9c6fcbfe9b0575f959d9c3015a50c] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Thu Nov
30 12:20:36 2017 -0800| [9166e6abd6c69a0a7e15b8797d7e3edc418b7fd6] | committer:
Michael Niedermayer
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
Didn't notice this one when 9648
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Wed Nov
22 10:58:39 2017 -0800| [1bc4e743f5618315b11478448058d8757d8c7576] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by:
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Tue Nov
28 14:26:55 2017 -0800| [8bea0c307dee3890c8d64c802ff34087ed0caf89] | committer:
Michael Niedermayer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 16:05:30 2017 -0800| [78782ca62d6915441ea7db61cd1e2ba30bd61dda] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Mon Nov
20 12:07:57 2017 -0800| [ee13d847a49cbad1f799aa5d9f9917961a1fd7c8] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jan 29
15:10:26 2018 -0800| [42323c3e3a600288e4bf1cefe952486ffc29d280] | committer:
Michael Niedermayer
avcodec/mpegaudio_parser: Skip APE tags when parsing mp3 packets.
Otherwise the decoder will throw "Mis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Tue Nov
28 14:26:55 2017 -0800| [32d16571924e442fca651902430e87c6e3bb06b3] | committer:
Michael Niedermayer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:51:09 2017 -0800| [380515e5b9581fa9852f2c8fac091ec67c03c358] | committer:
Michael Niedermayer
Use ff_thread_once for fixed, float table init.
These tables are static so they should only be initialize
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 13:35:56 2017 -0800| [fc3e4c9ab300caa0bf8d95ae6c3fed8a22d488b0] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Thu Nov
30 12:20:36 2017 -0800| [91c7cc9726d242218778426d541a0e88dbe39b83] | committer:
Michael Niedermayer
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
Didn't notice this one when 9648
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Wed Nov
22 10:58:39 2017 -0800| [e1a854da2d5477d0bc7338e7708831e1475e06f2] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by:
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Mon Nov
20 12:07:57 2017 -0800| [02d11e616af3ca2dce654e106ddc065ceb94de4e] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 16:05:30 2017 -0800| [13763f71926057e57ddd75b7c8ff93e6ab23f8ab] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Tue Nov
28 14:26:55 2017 -0800| [272a9687a73c44e5c27b969dd454b3e04cc32279] | committer:
Michael Niedermayer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Thu Nov
30 12:20:36 2017 -0800| [39db2f95145f6b13f77acd05bd684a7f81ccad1b] | committer:
Michael Niedermayer
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
Didn't notice this one when 9648
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 13:35:56 2017 -0800| [85ea121684a7b128c39373845506e6016daa60cc] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Wed Nov
22 10:58:39 2017 -0800| [9bc2f44c27a315e783a10ca59396c93f568982c0] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by:
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Mon Nov
20 12:07:57 2017 -0800| [2de4eb6fec18808f08f0ea8a5f8940eb842662c1] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 16:05:30 2017 -0800| [11a940adbcabd2dbbd78bd95023e8853985aa525] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:51:09 2017 -0800| [edd0cd21f41e6b0b8b39b5a53891d4a2c61fafff] | committer:
Michael Niedermayer
Use ff_thread_once for fixed, float table init.
These tables are static so they should only be initialize
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:53:25 2017 -0800| [362967fec6a4c4772e56b50efba49dab06f49de6] | committer:
Michael Niedermayer
Fix leak of frame_duration_buffer in mov_fix_index().
Should be unconditionally freed at the end of mov_fix
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Thu Nov
30 12:20:36 2017 -0800| [c147aefc3ecd30a9ee9dff126251179d93d064fd] | committer:
Michael Niedermayer
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
Didn't notice this one when 9648
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Wed Nov
22 10:58:39 2017 -0800| [23319f77645d7041fde3e33d981886bff52d2e47] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by:
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:53:25 2017 -0800| [9a00ce0ff8643111711b932443255f365a26ee98] | committer:
Michael Niedermayer
Fix leak of frame_duration_buffer in mov_fix_index().
Should be unconditionally freed at the end of mov_fix
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 13:35:56 2017 -0800| [36db62ca984b0b77b9fe119f47f0a4ca6e75] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:51:09 2017 -0800| [50c93ce5ef71e39c5e49c8ae3873431d9d1753e1] | committer:
Michael Niedermayer
Use ff_thread_once for fixed, float table init.
These tables are static so they should only be initialize
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Mon Nov
20 12:07:57 2017 -0800| [35c7a1df8ae57b7c913f656f594a87bc9e7fab0c] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 16:05:30 2017 -0800| [f8fcb6bbf0e64b9453ad85978dc4357e7afdd499] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28
13:40:20 2017 -0800| [09494d098405738a5972e0052110af65b3ff7e72] | committer:
Michael Niedermayer
avformat/oggdec: Respect AVERROR codes returned by ogg parsers.
Fixes ticket #6804. All of the ogg header and
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 16:05:30 2017 -0800| [c09d587ac54d0ecb8190618fb867e9fd907e1359] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Wed Nov
22 10:58:39 2017 -0800| [e6c6bb218e0b4ae4b6963268d6488cf6104656d0] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by:
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Mon Nov
20 12:07:57 2017 -0800| [50b22648100e2fa77c798ac770967982d841d04d] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 14:51:09 2017 -0800| [712814fb17b62557d17d0bcff5b57e2a9d8e613c] | committer:
Michael Niedermayer
Use ff_thread_once for fixed, float table init.
These tables are static so they should only be initialize
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Tue Nov
28 14:26:55 2017 -0800| [532f0d1278c049a9f55d0de3f7b56b958c598440] | committer:
Michael Niedermayer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Thu Nov
30 12:20:36 2017 -0800| [06a6f73ad83b53a7b3da4cb7b97cb1c878ec837b] | committer:
Michael Niedermayer
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
Didn't notice this one when 9648
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov
17 13:35:56 2017 -0800| [b01020a0501aefc6decce15901437d4e03c4bbbf] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Tue Nov
28 14:26:55 2017 -0800| [ceed79323cb0a3e37a044821d70ab7a3439e1880] | committer:
James Almer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by: Dale
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28
14:26:55 2017 -0800| [c5fd57f483d2ad8e34551b78509f1e14136f73c0] | committer:
James Almer
Don't manipulate duration when it's AV_NOPTS_VALUE.
This leads to signed integer overflow.
Signed-off-by: Dale Curtis &l
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28
13:44:49 2017 -0800| [a3a0b5bd0aaae314619d5b41fb918aacd908a5ae] | committer:
Michael Niedermayer
avformat/oggparseopus: Free opus extradata before reallocating.
Otherwise ff_alloc_extradata() just leaks any ex
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 21
15:10:08 2017 -0800| [96e340760824e537e2d034abf9a3b8be3e2b312c] | committer:
Michael Niedermayer
Free extradata before reallocating.
Otherwise ff_alloc_extradata() just leaks any existing allocated
memory.
Sign
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17
13:35:56 2017 -0800| [03fbc0daa7e37af024f8b017a28105c32bbe25ca] | committer:
Michael Niedermayer
avformat/utils: Prevent undefined shift with wrap_bits > 64.
2LL << (wrap_bits=64 - 1) does not fit in
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22
10:58:39 2017 -0800| [9648cc6d7fdbb0a260bed1e3e23300569cff9579] | committer:
Michael Niedermayer
avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.
Signed-off-by: Dale Curtis <
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 21
15:40:22 2017 -0800| [6db511a7838830f856b4664958add937a4a0d49b] | committer:
Michael Niedermayer
avformat/mov: Increment stsd_count while processing stsd data; avoids leaks.
In the event of ff_mov_read_stsd_e
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20
12:07:57 2017 -0800| [bce8fc0754c4b31f574a4372c6d7996ed29f7c2a] | committer:
Michael Niedermayer
Close ogg stream upon error when using AV_EF_EXPLODE.
Without this there can be multiple memory leaks for unreco
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17
16:05:30 2017 -0800| [7010dd98b575d2e39fca947e609b85be7490b269] | committer:
Michael Niedermayer
Fix undefined shift on assumed 8-bit input.
decode_user_data() attempts to create an integer |build|
value with
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17
14:51:09 2017 -0800| [5eaaffaf64d1854493f0fe9ec822eed1b3cd9fe1] | committer:
Michael Niedermayer
Use ff_thread_once for fixed, float table init.
These tables are static so they should only be initialized once
i
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17
14:53:25 2017 -0800| [d073be2291e40129d107ca4573097d6d6d2dbf68] | committer:
Michael Niedermayer
Fix leak of frame_duration_buffer in mov_fix_index().
Should be unconditionally freed at the end of mov_fix
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 3
17:10:55 2017 -0700| [01763144dcc1bc47fa4967d91d3fedb25e3ef556] | committer:
Michael Niedermayer
Avoid corrupting diagnostic state with _Pragma changes.
The macros for ICC and MSVC correctly push a
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Oct 24
13:03:59 2017 -0700| [50e30d9bb71e1dff27be16c264fac90e362b9896] | committer:
Michael Niedermayer
Don't use _tzcnt instrinics with clang for windows w/o BMI.
Technically _tzcnt* intrinsics are only availabl
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Oct 16
14:17:35 2017 -0700| [a5fd8aa45b11c10613e6e576033a6b5a16b9cbb9] | committer:
Michael Niedermayer
avformat/mov: Set start_pad correctly in mov_fix_index()
Sets the correct start padding value when an edi
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jul 31
13:44:22 2017 -0700| [f1e47f87131dd7c3718496b83911e17586e26e80] | committer:
Michael Niedermayer
avformat/mov: Bail when invalid sample data is present.
ctts data in ffmpeg relies on the index entries array to
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jul 17
17:38:09 2017 -0700| [37e8edc9f51545ad91cbdf7dbe796af93f011abe] | committer:
Michael Niedermayer
avformat/mov: Fix trampling of ctts during seeks when sidx support is enabled.
When sidx box support is e
ffmpeg | branch: release/1.1 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [b41bc711438abed7b67499ea4865127f97df6745] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: release/1.2 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [07f634f9487615b0587cd4a1bef8f537b833384d] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: release/1.2 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:34:17 2015 -0800| [54a9f64d429605b954ac8ad50a1a089e8e6c965d] | committer:
Michael Niedermayer
mov: Fix negative size calculation in mov_read_default().
The previous code assumed if an atom was marked with a 64
ffmpeg | branch: release/2.2 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [57710c3646d4e0edb9e66ecf059d29df172a4187] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: release/2.2 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:34:17 2015 -0800| [7c270a5e3b605b92419b2d6d8aa1c5fec63a2fc4] | committer:
Michael Niedermayer
mov: Fix negative size calculation in mov_read_default().
The previous code assumed if an atom was marked with a 64
ffmpeg | branch: release/2.4 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:34:17 2015 -0800| [54b76eb5951502d24618c335d0bb275f70d31f3c] | committer:
Michael Niedermayer
mov: Fix negative size calculation in mov_read_default().
The previous code assumed if an atom was marked with a 64
ffmpeg | branch: release/2.4 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [134ff88c6a80672a108c607d8df459f401560d3c] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:34:17 2015 -0800| [0ce35b8ce8b9e06a4dedc62b4fe10261db67f0a3] | committer:
Michael Niedermayer
mov: Fix negative size calculation in mov_read_default().
The previous code assumed if an atom was marked with a 64
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Tue Jan
6 04:00:43 2015 +0100| [9143ab0e5a75519c899cae2996d07b3f69bcfb24] | committer:
Michael Niedermayer
mov: Fix overflow and error handling in read_tfra().
Under abnormal conditions the item_count may exceed the max
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [022bfd3dd47c3a2b59ce3eb1142aecc199f320ed] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: release/2.3 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:34:17 2015 -0800| [27a910a8575879d08edaae9d8956ab6d1821044a] | committer:
Michael Niedermayer
mov: Fix negative size calculation in mov_read_default().
The previous code assumed if an atom was marked with a 64
ffmpeg | branch: release/2.3 | Dale Curtis dalecur...@chromium.org | Mon Jan
5 16:19:09 2015 -0800| [22558d6f6e8652d362add0c5c195964c5e65cfd2] | committer:
Michael Niedermayer
mov: Avoid overflow with mov_metadata_raw()
The code previously added 1 to len without checking its size,
resulting
ffmpeg | branch: master | Dale Curtis dalecur...@chromium.org | Tue Jan 6
04:00:43 2015 +0100| [db42d93a61be26873be6115c57f5921b4dfdec14] | committer:
Michael Niedermayer
mov: Fix overflow and error handling in read_tfra().
Under abnormal conditions the item_count may exceed the max
1 - 100 of 105 matches
Mail list logo