[FFmpeg-cvslog] avformat/mov: Fix integer overflow in mov_read_packet().

2024-04-14 Thread Dale Curtis
ffmpeg | branch: release/5.1 | Dale Curtis | Wed Nov 22 22:17:37 2023 +| [8f209d2c90e84cd250f1a4667d1d83ec196f51dc] | committer: Michael Niedermayer avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow

[FFmpeg-cvslog] avformat/mov: Fix integer overflow in mov_read_packet().

2024-04-14 Thread Dale Curtis
ffmpeg | branch: release/6.0 | Dale Curtis | Wed Nov 22 22:17:37 2023 +| [90571795e208a7061eb358e7f0f073c17a7ecbcc] | committer: Michael Niedermayer avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow

[FFmpeg-cvslog] Don't throw an error when attached picture isn't recognized.

2024-03-28 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Mon Apr 10 10:52:08 2023 -0700| [bba6df9ac7bd8386d92e1a7f5c737ca4e575fccf] | committer: Michael Niedermayer Don't throw an error when attached picture isn't recognized. The MIME type field is required per the FLAC standard, but it's not an error just

[FFmpeg-cvslog] Avoid OOM for invalid STCO / CO64 constructions.

2024-02-21 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Fri Feb 2 20:49:44 2024 +| [6ef32ea5748e9dcc2c8d1c076607b8d15650a5fe] | committer: Michael Niedermayer Avoid OOM for invalid STCO / CO64 constructions. The `entries` value is read directly from the stream and used to allocate memory. This change

[FFmpeg-cvslog] avformat/mov: Fix integer overflow in mov_read_packet().

2023-12-29 Thread Dale Curtis
ffmpeg | branch: release/6.1 | Dale Curtis | Wed Nov 22 22:17:37 2023 +| [ca5ebfb066b1298c6b1f84b03185fb8463bc7884] | committer: Michael Niedermayer avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow

[FFmpeg-cvslog] avformat/mov: Fix integer overflow in mov_read_packet().

2023-12-21 Thread Dale Curtis
ffmpeg | branch: release/4.4 | Dale Curtis | Wed Nov 22 22:17:37 2023 +| [207e003758d80ffa595e21543007021659c0e535] | committer: Michael Niedermayer avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow

[FFmpeg-cvslog] avformat/mov: Fix integer overflow in mov_read_packet().

2023-12-01 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Wed Nov 22 22:17:37 2023 +| [2182173a6933c02b0853751034bd5e0bf829b5f7] | committer: Michael Niedermayer avformat/mov: Fix integer overflow in mov_read_packet(). Fixes https://crbug.com/1499669: runtime error: signed integer overflow

[FFmpeg-cvslog] avformat/mov: See if mfra makes up the difference for an incomplete sidx.

2020-08-28 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu Aug 13 15:02:02 2020 -0700| [2ff3c466eca66bb8eb32bb41a4ce70fe285e3ea0] | committer: Derek Buitenhuis avformat/mov: See if mfra makes up the difference for an incomplete sidx. A few popular sites have started generating MP4 files which have a sidx

[FFmpeg-cvslog] avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().

2020-07-07 Thread Dale Curtis
ffmpeg | branch: release/4.2 | Dale Curtis | Thu May 14 14:38:07 2020 -0700| [361416218a2d3b4d83209b4ca5e36419cfd5eeb0] | committer: Michael Niedermayer avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample(). Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer

[FFmpeg-cvslog] avformat/mov: Don't allow negative sample sizes.

2020-07-05 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis | Thu May 14 15:31:55 2020 -0700| [832ae51f9b4ce1003c2e817900b0332d1df457f7] | committer: Michael Niedermayer avformat/mov: Don't allow negative sample sizes. Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer (cherry picked from commit

[FFmpeg-cvslog] avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().

2020-06-14 Thread Dale Curtis
ffmpeg | branch: release/4.3 | Dale Curtis | Thu May 14 14:38:07 2020 -0700| [8dee726b1a5c82c5e6578a606b299c6fdc74c142] | committer: Michael Niedermayer avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample(). Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer

[FFmpeg-cvslog] avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample().

2020-06-12 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 14:38:07 2020 -0700| [bf446711bc8b7f316771870b8d4dc4dd65f5d94b] | committer: Michael Niedermayer avformat/mov: Check if DTS is AV_NOPTS_VALUE in mov_find_next_sample(). Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer > h

[FFmpeg-cvslog] avutil/mathematics: Fix overflow with NaN in av_add_stable()

2020-06-05 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 14:47:49 2020 -0700| [d9aa1ef2c2dfbadcfe3783cee97e9c59dbfe7fb1] | committer: Michael Niedermayer avutil/mathematics: Fix overflow with NaN in av_add_stable() Signed-off-by: Michael Niedermayer > http://git.videolan.org/gitweb.cgi/ffmpeg.

[FFmpeg-cvslog] avformat: Fix overflow in compute_pkt_fields().

2020-06-05 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 14:47:49 2020 -0700| [63ce7c71bc1b1b6c141df5daae0f8fed52194b72] | committer: Michael Niedermayer avformat: Fix overflow in compute_pkt_fields(). Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer > http://git.videolan.

[FFmpeg-cvslog] avformat/oggparsetheora: Don't update start time when lastpts is AV_NOPTS_VALUE.

2020-05-30 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Fri May 15 12:37:02 2020 -0700| [57564a2cfc9c424d137e8279955ac9e892c8d794] | committer: Michael Niedermayer avformat/oggparsetheora: Don't update start time when lastpts is AV_NOPTS_VALUE. Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer

[FFmpeg-cvslog] Use av_sat_sub64() when updating pts by duration.

2020-05-29 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 14:33:55 2020 -0700| [fc54db32652bc830fba002da19c2ba9ba4508ca5] | committer: Michael Niedermayer Use av_sat_sub64() when updating pts by duration. Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer > http://git.videolan.

[FFmpeg-cvslog] avformat/utils: Use av_sat_add64() when updating start_time by skip_samples.

2020-05-29 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 14:29:15 2020 -0700| [f3068be15b361698429ac205ebc728398b4a3cbb] | committer: Michael Niedermayer avformat/utils: Use av_sat_add64() when updating start_time by skip_samples. Avoids overflow from fuzzed skip_samples values. Signed-off

[FFmpeg-cvslog] Use gcc/clang builtins for av_sat_(add|sub)_64_c if available.

2020-05-27 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Fri May 1 10:20:43 2020 -0700| [fda1c74539d7b0680f34ca765c2c0055d8f2bb3e] | committer: Michael Niedermayer Use gcc/clang builtins for av_sat_(add|sub)_64_c if available. Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer > h

[FFmpeg-cvslog] lavf/mp3dec: don't adjust start time; packets are not adjusted.

2020-05-27 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu Apr 23 16:18:18 2020 -0700| [460132c9980f8a1f501a1f69477bca49e1641233] | committer: Anton Khirnov lavf/mp3dec: don't adjust start time; packets are not adjusted. 7546ac2fee4 made it so that the start_time for mp3 files is adjusted for skip_samples

[FFmpeg-cvslog] avformat/mov: Free temp buffer upon negative sample_size error.

2020-05-20 Thread Dale Curtis
ffmpeg | branch: release/4.2 | Dale Curtis | Mon May 18 15:35:35 2020 -0700| [7c01f2770131f3e80d1e365f334c26b908178ad4] | committer: Michael Niedermayer avformat/mov: Free temp buffer upon negative sample_size error. 2d8d554f15a7a27cfeca81467cc9341a86f784e2 added a new error condition

[FFmpeg-cvslog] avformat/mov: Free temp buffer upon negative sample_size error.

2020-05-20 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Mon May 18 15:35:35 2020 -0700| [cd0771c38c06ef397466123c6c85521835f98bfd] | committer: Michael Niedermayer avformat/mov: Free temp buffer upon negative sample_size error. 2d8d554f15a7a27cfeca81467cc9341a86f784e2 added a new error condition

[FFmpeg-cvslog] avutil/common: Add saturated add/sub operations for int64_t.

2020-05-15 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu Apr 30 15:16:31 2020 -0700| [a7e1af3cb10b7c914622deff3435bc20eb65] | committer: Michael Niedermayer avutil/common: Add saturated add/sub operations for int64_t. Many places are using their own custom code for handling overflow around timestamps

[FFmpeg-cvslog] avformat/mov: Don't allow negative sample sizes.

2020-05-15 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu May 14 15:31:55 2020 -0700| [2d8d554f15a7a27cfeca81467cc9341a86f784e2] | committer: Michael Niedermayer avformat/mov: Don't allow negative sample sizes. Signed-off-by: Dale Curtis Signed-off-by: Michael Niedermayer > http://git.videolan.

[FFmpeg-cvslog] avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index()

2020-04-23 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis | Tue Jan 28 16:49:14 2020 -0800| [efaa2a05c0c68dc2404e7d977dc17a86e042701d] | committer: Michael Niedermayer avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index() When e2_pts == INT64_MIN and e1_pts >= 0 the calculat

[FFmpeg-cvslog] avformat/utils: Don't trigger errors for multiple id3 tags.

2020-02-22 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Fri Feb 21 12:53:30 2020 -0800| [a0faf0db4f9f85ce2b8e00660c4fd884a347ca19] | committer: Michael Niedermayer avformat/utils: Don't trigger errors for multiple id3 tags. Such errors may make sense for specific formats, but general parsing logic shouldn't

[FFmpeg-cvslog] avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index()

2020-02-11 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Tue Jan 28 16:49:14 2020 -0800| [f15007afa90a3eb3639848d9702c1cc3ac3e896b] | committer: Michael Niedermayer avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index() When e2_pts == INT64_MIN and e1_pts >= 0 the calculation of e2_

[FFmpeg-cvslog] avformat/mov: Error on too large stsd entry counts.

2018-11-17 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis | Thu Aug 30 15:18:25 2018 -0700| [a72d42b80ff4a9220cb20b2231d55ada0d6b0b3b] | committer: Michael Niedermayer avformat/mov: Error on too large stsd entry counts. Entries are always at least 8 bytes per the parsing code, so if we see an impossible

[FFmpeg-cvslog] avformat/mov: Error on too large stsd entry counts.

2018-10-31 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis | Thu Aug 30 15:18:25 2018 -0700| [1acec9bbf55b9d53c20e8d2f147458262abdc28f] | committer: Michael Niedermayer avformat/mov: Error on too large stsd entry counts. Entries are always at least 8 bytes per the parsing code, so if we see an impossible

[FFmpeg-cvslog] avformat/mov: Error on too large stsd entry counts.

2018-10-27 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis | Thu Aug 30 15:18:25 2018 -0700| [eab5f6e419ec8b195d0247d5a4acce9cfc9e0f7a] | committer: Michael Niedermayer avformat/mov: Error on too large stsd entry counts. Entries are always at least 8 bytes per the parsing code, so if we see an impossible

[FFmpeg-cvslog] avformat/mov: Error on too large stsd entry counts.

2018-10-07 Thread Dale Curtis
ffmpeg | branch: release/4.0 | Dale Curtis | Thu Aug 30 15:18:25 2018 -0700| [968ffb93af0449deea8617319aa0b9b5083da996] | committer: Michael Niedermayer avformat/mov: Error on too large stsd entry counts. Entries are always at least 8 bytes per the parsing code, so if we see an impossible

[FFmpeg-cvslog] avformat/utils: Don't calculate duration using AV_NOPTS_VALUE for start_time.

2018-09-09 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Fri Sep 7 15:37:09 2018 -0700| [8ef7fb86d62c9d44697c8eef0ddc424be4a3612b] | committer: Michael Niedermayer avformat/utils: Don't calculate duration using AV_NOPTS_VALUE for start_time. Found by ClusterFuzz, https://crbug.com/879852 Signed-off

[FFmpeg-cvslog] avformat/mov: Error on too large stsd entry counts.

2018-09-01 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Thu Aug 30 15:18:25 2018 -0700| [320b631a99a9f759fd1d5460fd4e285d184b8186] | committer: Michael Niedermayer avformat/mov: Error on too large stsd entry counts. Entries are always at least 8 bytes per the parsing code, so if we see an impossible entry

[FFmpeg-cvslog] avformat/mov: Correct opus-in-mp4 pre-skip to be uint16_t versus int16_t.

2018-08-23 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis | Tue Aug 21 15:42:31 2018 -0700| [e7080d1fe29b0fc2ef3ac99234e037e6a49f5c97] | committer: Michael Niedermayer avformat/mov: Correct opus-in-mp4 pre-skip to be uint16_t versus int16_t. This field is a uint16_t, see docs: http://opus-codec.org/docs

[FFmpeg-cvslog] Parse and drop gain control data, so that SSR packets decode.

2018-02-21 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Thu Feb 15 16:22:55 2018 -0800| [a246701e9abe8ef7cb9b0dd9fb5fa877e78334ef] | committer: Alex Converse Parse and drop gain control data, so that SSR packets decode. This will result in poor quality audio for SSR s

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [2543475730b9c6fcbfe9b0575f959d9c3015a50c] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not

[FFmpeg-cvslog] avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Thu Nov 30 12:20:36 2017 -0800| [9166e6abd6c69a0a7e15b8797d7e3edc418b7fd6] | committer: Michael Niedermayer avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u. Didn't notice this one when 9648

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [1bc4e743f5618315b11478448058d8757d8c7576] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by:

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [8bea0c307dee3890c8d64c802ff34087ed0caf89] | committer: Michael Niedermayer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [78782ca62d6915441ea7db61cd1e2ba30bd61dda] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2018-01-31 Thread Dale Curtis
ffmpeg | branch: release/2.8 | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [ee13d847a49cbad1f799aa5d9f9917961a1fd7c8] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory

[FFmpeg-cvslog] avcodec/mpegaudio_parser: Skip APE tags when parsing mp3 packets.

2018-01-29 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jan 29 15:10:26 2018 -0800| [42323c3e3a600288e4bf1cefe952486ffc29d280] | committer: Michael Niedermayer avcodec/mpegaudio_parser: Skip APE tags when parsing mp3 packets. Otherwise the decoder will throw "Mis

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [32d16571924e442fca651902430e87c6e3bb06b3] | committer: Michael Niedermayer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by

[FFmpeg-cvslog] Use ff_thread_once for fixed, float table init.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:51:09 2017 -0800| [380515e5b9581fa9852f2c8fac091ec67c03c358] | committer: Michael Niedermayer Use ff_thread_once for fixed, float table init. These tables are static so they should only be initialize

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [fc3e4c9ab300caa0bf8d95ae6c3fed8a22d488b0] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not

[FFmpeg-cvslog] avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Thu Nov 30 12:20:36 2017 -0800| [91c7cc9726d242218778426d541a0e88dbe39b83] | committer: Michael Niedermayer avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u. Didn't notice this one when 9648

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [e1a854da2d5477d0bc7338e7708831e1475e06f2] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by:

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [02d11e616af3ca2dce654e106ddc065ceb94de4e] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2018-01-08 Thread Dale Curtis
ffmpeg | branch: release/3.2 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [13763f71926057e57ddd75b7c8ff93e6ab23f8ab] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [272a9687a73c44e5c27b969dd454b3e04cc32279] | committer: Michael Niedermayer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by

[FFmpeg-cvslog] avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Thu Nov 30 12:20:36 2017 -0800| [39db2f95145f6b13f77acd05bd684a7f81ccad1b] | committer: Michael Niedermayer avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u. Didn't notice this one when 9648

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [85ea121684a7b128c39373845506e6016daa60cc] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [9bc2f44c27a315e783a10ca59396c93f568982c0] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by:

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [2de4eb6fec18808f08f0ea8a5f8940eb842662c1] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [11a940adbcabd2dbbd78bd95023e8853985aa525] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value

[FFmpeg-cvslog] Use ff_thread_once for fixed, float table init.

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:51:09 2017 -0800| [edd0cd21f41e6b0b8b39b5a53891d4a2c61fafff] | committer: Michael Niedermayer Use ff_thread_once for fixed, float table init. These tables are static so they should only be initialize

[FFmpeg-cvslog] Fix leak of frame_duration_buffer in mov_fix_index().

2017-12-30 Thread Dale Curtis
ffmpeg | branch: release/3.3 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:53:25 2017 -0800| [362967fec6a4c4772e56b50efba49dab06f49de6] | committer: Michael Niedermayer Fix leak of frame_duration_buffer in mov_fix_index(). Should be unconditionally freed at the end of mov_fix

[FFmpeg-cvslog] avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Thu Nov 30 12:20:36 2017 -0800| [c147aefc3ecd30a9ee9dff126251179d93d064fd] | committer: Michael Niedermayer avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u. Didn't notice this one when 9648

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [23319f77645d7041fde3e33d981886bff52d2e47] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by:

[FFmpeg-cvslog] Fix leak of frame_duration_buffer in mov_fix_index().

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:53:25 2017 -0800| [9a00ce0ff8643111711b932443255f365a26ee98] | committer: Michael Niedermayer Fix leak of frame_duration_buffer in mov_fix_index(). Should be unconditionally freed at the end of mov_fix

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [36db62ca984b0b77b9fe119f47f0a4ca6e75] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not

[FFmpeg-cvslog] Use ff_thread_once for fixed, float table init.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:51:09 2017 -0800| [50c93ce5ef71e39c5e49c8ae3873431d9d1753e1] | committer: Michael Niedermayer Use ff_thread_once for fixed, float table init. These tables are static so they should only be initialize

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [35c7a1df8ae57b7c913f656f594a87bc9e7fab0c] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2017-12-08 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [f8fcb6bbf0e64b9453ad85978dc4357e7afdd499] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value

[FFmpeg-cvslog] avformat/oggdec: Respect AVERROR codes returned by ogg parsers.

2017-12-02 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 13:40:20 2017 -0800| [09494d098405738a5972e0052110af65b3ff7e72] | committer: Michael Niedermayer avformat/oggdec: Respect AVERROR codes returned by ogg parsers. Fixes ticket #6804. All of the ogg header and

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [c09d587ac54d0ecb8190618fb867e9fd907e1359] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [e6c6bb218e0b4ae4b6963268d6488cf6104656d0] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by:

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [50b22648100e2fa77c798ac770967982d841d04d] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory

[FFmpeg-cvslog] Use ff_thread_once for fixed, float table init.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:51:09 2017 -0800| [712814fb17b62557d17d0bcff5b57e2a9d8e613c] | committer: Michael Niedermayer Use ff_thread_once for fixed, float table init. These tables are static so they should only be initialize

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [532f0d1278c049a9f55d0de3f7b56b958c598440] | committer: Michael Niedermayer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by

[FFmpeg-cvslog] avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Thu Nov 30 12:20:36 2017 -0800| [06a6f73ad83b53a7b3da4cb7b97cb1c878ec837b] | committer: Michael Niedermayer avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u. Didn't notice this one when 9648

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2017-12-01 Thread Dale Curtis
ffmpeg | branch: release/3.0 | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [b01020a0501aefc6decce15901437d4e03c4bbbf] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2017-11-30 Thread Dale Curtis
ffmpeg | branch: release/3.4 | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [ceed79323cb0a3e37a044821d70ab7a3439e1880] | committer: James Almer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by: Dale

[FFmpeg-cvslog] Don't manipulate duration when it's AV_NOPTS_VALUE.

2017-11-28 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 14:26:55 2017 -0800| [c5fd57f483d2ad8e34551b78509f1e14136f73c0] | committer: James Almer Don't manipulate duration when it's AV_NOPTS_VALUE. This leads to signed integer overflow. Signed-off-by: Dale Curtis &l

[FFmpeg-cvslog] avformat/oggparseopus: Free opus extradata before reallocating.

2017-11-28 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 28 13:44:49 2017 -0800| [a3a0b5bd0aaae314619d5b41fb918aacd908a5ae] | committer: Michael Niedermayer avformat/oggparseopus: Free opus extradata before reallocating. Otherwise ff_alloc_extradata() just leaks any ex

[FFmpeg-cvslog] Free extradata before reallocating.

2017-11-28 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 21 15:10:08 2017 -0800| [96e340760824e537e2d034abf9a3b8be3e2b312c] | committer: Michael Niedermayer Free extradata before reallocating. Otherwise ff_alloc_extradata() just leaks any existing allocated memory. Sign

[FFmpeg-cvslog] avformat/utils: Prevent undefined shift with wrap_bits > 64.

2017-11-24 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 13:35:56 2017 -0800| [03fbc0daa7e37af024f8b017a28105c32bbe25ca] | committer: Michael Niedermayer avformat/utils: Prevent undefined shift with wrap_bits > 64. 2LL << (wrap_bits=64 - 1) does not fit in

[FFmpeg-cvslog] avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead.

2017-11-24 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Wed Nov 22 10:58:39 2017 -0800| [9648cc6d7fdbb0a260bed1e3e23300569cff9579] | committer: Michael Niedermayer avcodec/vorbis: 1 << 31 > int32_t::max(), so use 1u << 31 instead. Signed-off-by: Dale Curtis <

[FFmpeg-cvslog] avformat/mov: Increment stsd_count while processing stsd data; avoids leaks.

2017-11-22 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Nov 21 15:40:22 2017 -0800| [6db511a7838830f856b4664958add937a4a0d49b] | committer: Michael Niedermayer avformat/mov: Increment stsd_count while processing stsd data; avoids leaks. In the event of ff_mov_read_stsd_e

[FFmpeg-cvslog] Close ogg stream upon error when using AV_EF_EXPLODE.

2017-11-20 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Nov 20 12:07:57 2017 -0800| [bce8fc0754c4b31f574a4372c6d7996ed29f7c2a] | committer: Michael Niedermayer Close ogg stream upon error when using AV_EF_EXPLODE. Without this there can be multiple memory leaks for unreco

[FFmpeg-cvslog] Fix undefined shift on assumed 8-bit input.

2017-11-20 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 16:05:30 2017 -0800| [7010dd98b575d2e39fca947e609b85be7490b269] | committer: Michael Niedermayer Fix undefined shift on assumed 8-bit input. decode_user_data() attempts to create an integer |build| value with

[FFmpeg-cvslog] Use ff_thread_once for fixed, float table init.

2017-11-18 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:51:09 2017 -0800| [5eaaffaf64d1854493f0fe9ec822eed1b3cd9fe1] | committer: Michael Niedermayer Use ff_thread_once for fixed, float table init. These tables are static so they should only be initialized once i

[FFmpeg-cvslog] Fix leak of frame_duration_buffer in mov_fix_index().

2017-11-18 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 17 14:53:25 2017 -0800| [d073be2291e40129d107ca4573097d6d6d2dbf68] | committer: Michael Niedermayer Fix leak of frame_duration_buffer in mov_fix_index(). Should be unconditionally freed at the end of mov_fix

[FFmpeg-cvslog] Avoid corrupting diagnostic state with _Pragma changes.

2017-11-14 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Fri Nov 3 17:10:55 2017 -0700| [01763144dcc1bc47fa4967d91d3fedb25e3ef556] | committer: Michael Niedermayer Avoid corrupting diagnostic state with _Pragma changes. The macros for ICC and MSVC correctly push a

[FFmpeg-cvslog] Don't use _tzcnt instrinics with clang for windows w/o BMI.

2017-10-25 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Tue Oct 24 13:03:59 2017 -0700| [50e30d9bb71e1dff27be16c264fac90e362b9896] | committer: Michael Niedermayer Don't use _tzcnt instrinics with clang for windows w/o BMI. Technically _tzcnt* intrinsics are only availabl

[FFmpeg-cvslog] avformat/mov: Set start_pad correctly in mov_fix_index()

2017-10-20 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Oct 16 14:17:35 2017 -0700| [a5fd8aa45b11c10613e6e576033a6b5a16b9cbb9] | committer: Michael Niedermayer avformat/mov: Set start_pad correctly in mov_fix_index() Sets the correct start padding value when an edi

[FFmpeg-cvslog] avformat/mov: Bail when invalid sample data is present.

2017-08-31 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jul 31 13:44:22 2017 -0700| [f1e47f87131dd7c3718496b83911e17586e26e80] | committer: Michael Niedermayer avformat/mov: Bail when invalid sample data is present. ctts data in ffmpeg relies on the index entries array to

[FFmpeg-cvslog] avformat/mov: Fix trampling of ctts during seeks when sidx support is enabled.

2017-08-24 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis <dalecur...@chromium.org> | Mon Jul 17 17:38:09 2017 -0700| [37e8edc9f51545ad91cbdf7dbe796af93f011abe] | committer: Michael Niedermayer avformat/mov: Fix trampling of ctts during seeks when sidx support is enabled. When sidx box support is e

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-03-13 Thread Dale Curtis
ffmpeg | branch: release/1.1 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [b41bc711438abed7b67499ea4865127f97df6745] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-02-04 Thread Dale Curtis
ffmpeg | branch: release/1.2 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [07f634f9487615b0587cd4a1bef8f537b833384d] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Fix negative size calculation in mov_read_default().

2015-02-04 Thread Dale Curtis
ffmpeg | branch: release/1.2 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:34:17 2015 -0800| [54a9f64d429605b954ac8ad50a1a089e8e6c965d] | committer: Michael Niedermayer mov: Fix negative size calculation in mov_read_default(). The previous code assumed if an atom was marked with a 64

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-01-19 Thread Dale Curtis
ffmpeg | branch: release/2.2 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [57710c3646d4e0edb9e66ecf059d29df172a4187] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Fix negative size calculation in mov_read_default().

2015-01-19 Thread Dale Curtis
ffmpeg | branch: release/2.2 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:34:17 2015 -0800| [7c270a5e3b605b92419b2d6d8aa1c5fec63a2fc4] | committer: Michael Niedermayer mov: Fix negative size calculation in mov_read_default(). The previous code assumed if an atom was marked with a 64

[FFmpeg-cvslog] mov: Fix negative size calculation in mov_read_default().

2015-01-13 Thread Dale Curtis
ffmpeg | branch: release/2.4 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:34:17 2015 -0800| [54b76eb5951502d24618c335d0bb275f70d31f3c] | committer: Michael Niedermayer mov: Fix negative size calculation in mov_read_default(). The previous code assumed if an atom was marked with a 64

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-01-13 Thread Dale Curtis
ffmpeg | branch: release/2.4 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [134ff88c6a80672a108c607d8df459f401560d3c] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Fix negative size calculation in mov_read_default().

2015-01-09 Thread Dale Curtis
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:34:17 2015 -0800| [0ce35b8ce8b9e06a4dedc62b4fe10261db67f0a3] | committer: Michael Niedermayer mov: Fix negative size calculation in mov_read_default(). The previous code assumed if an atom was marked with a 64

[FFmpeg-cvslog] mov: Fix overflow and error handling in read_tfra().

2015-01-09 Thread Dale Curtis
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Tue Jan 6 04:00:43 2015 +0100| [9143ab0e5a75519c899cae2996d07b3f69bcfb24] | committer: Michael Niedermayer mov: Fix overflow and error handling in read_tfra(). Under abnormal conditions the item_count may exceed the max

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-01-09 Thread Dale Curtis
ffmpeg | branch: release/2.5 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [022bfd3dd47c3a2b59ce3eb1142aecc199f320ed] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Fix negative size calculation in mov_read_default().

2015-01-06 Thread Dale Curtis
ffmpeg | branch: release/2.3 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:34:17 2015 -0800| [27a910a8575879d08edaae9d8956ab6d1821044a] | committer: Michael Niedermayer mov: Fix negative size calculation in mov_read_default(). The previous code assumed if an atom was marked with a 64

[FFmpeg-cvslog] mov: Avoid overflow with mov_metadata_raw()

2015-01-06 Thread Dale Curtis
ffmpeg | branch: release/2.3 | Dale Curtis dalecur...@chromium.org | Mon Jan 5 16:19:09 2015 -0800| [22558d6f6e8652d362add0c5c195964c5e65cfd2] | committer: Michael Niedermayer mov: Avoid overflow with mov_metadata_raw() The code previously added 1 to len without checking its size, resulting

[FFmpeg-cvslog] mov: Fix overflow and error handling in read_tfra().

2015-01-05 Thread Dale Curtis
ffmpeg | branch: master | Dale Curtis dalecur...@chromium.org | Tue Jan 6 04:00:43 2015 +0100| [db42d93a61be26873be6115c57f5921b4dfdec14] | committer: Michael Niedermayer mov: Fix overflow and error handling in read_tfra(). Under abnormal conditions the item_count may exceed the max

  1   2   >