Fixes: Out of array read
Fixes: global-buffer-overflow-AV1
Found-by: "Leonelli, Matteo"
Tested-by: "Wang, Fei W"
Reviewed-by: "Wang, Fei W"
Signed-off-by: Michael Niedermayer
---
libavcodec/av1dec.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavcodec/av1dec.c b/liba
On Tue, Mar 05, 2024 at 11:27:22AM +0100, Anton Khirnov wrote:
> Quoting Michael Niedermayer (2024-03-05 03:50:01)
> > The STF opertunity had a deadline.
> > Also we can already start discussing what shall be done when the next grant
> > opertunity comes.
>
> How about some actual transparency
Th
On Tue, Jul 09, 2024 at 09:19:54AM +, Anton Khirnov wrote:
> ffmpeg | branch: master | Anton Khirnov | Fri Jul 5
> 12:30:04 2024 +0200| [10185e2d4c1e9839bc58a1d6a63c861677b13fd0] | committer:
> Anton Khirnov
>
> fftools/ffmpeg_mux_init: default to input timebase for streamcopy
>
> Stop tr
Hi aybe
On Sat, Jan 13, 2024 at 02:28:52AM +, aybe aybe wrote:
> Here are the two STR files I have used when writing this patch:
> https://github.com/aybe/FFmpeg-PSX-STR-tests
ok, i can confirm the version patch fixes these, i will apply it
> Fanatics would probably say that 30 FPS for NTS
Hi
Should we use a Merge or Cherry picks for integrating Pauls work ?
Following are 2 plans, as we execute either we may run into issues
and of course adapt them as needed. (or even switch)
Option M:
This would be a merge of pauls last revission before files where
switched to GPL and the
Hi
On Thu, Aug 21, 2025 at 06:03:12PM +0200, Kacper Michajlow via ffmpeg-devel
wrote:
[...]
> Also on the topic of CI, I suspect we might add more jobs as needed.
> Probably depends on priorities, to not overload existing runners
> capacity.
>
> I was wondering about integrating CIFuzz. Which ba
Hi
On Thu, Aug 21, 2025 at 12:31:46AM +0200, Timo Rothenpieler via ffmpeg-devel
wrote:
> On 8/20/2025 9:25 PM, Michael Niedermayer via ffmpeg-devel wrote:
> > Hi
> >
> > On Wed, Aug 20, 2025 at 05:56:27PM +0200, Timo Rothenpieler via
> > ffmpeg-devel wrote:
> >
Hi Kieran
On Thu, Aug 21, 2025 at 06:56:14AM -1000, Kieran Kunhya via ffmpeg-devel wrote:
[...]
> For the record, Paul had a note saying changes are under GPL. As I
> understand you are ignoring legal advice saying this is a valid statement.
>
> Can you confirm the legal advice you were given and
On Tue, Aug 19, 2025 at 02:17:05PM +, Drew Dunne via ffmpeg-devel wrote:
[...]
> @@ -1000,6 +1005,11 @@ static const AVOption colorspace_options[] = {
> ENUM("vonkries", WP_ADAPT_VON_KRIES, "wpadapt"),
> ENUM("identity", WP_ADAPT_IDENTITY, "wpadapt"),
>
> +{ "clamptrc",
Traili
Hi Pierre
On Wed, Aug 20, 2025 at 09:28:26AM -0700, Pierre-Anthony Lemieux via
ffmpeg-devel wrote:
> On Wed, Aug 20, 2025 at 9:24 AM Niklas Haas via ffmpeg-devel
> wrote:
> >
> > On Tue, 12 Aug 2025 08:32:39 -0700 Pierre-Anthony Lemieux
> > wrote:
> > > Quick reminder that the deadline for sub
Hi Ayose
On Mon, Aug 18, 2025 at 07:22:56AM +0100, Ayose via ffmpeg-devel wrote:
> This is a proposal to add a new filter to FFmpeg: drawvg, to draw
> vector graphics on top of a video, using libcairo.
>
> This is my first contribution to FFmpeg, so I don't know if this is
> the right channel to
Hi
On Wed, Aug 20, 2025 at 10:18:20AM +0900, Lynne via ffmpeg-devel wrote:
> On 20/08/2025 06:13, Michael Niedermayer via ffmpeg-devel wrote:
> > Hi all
> >
> > On Fri, Aug 01, 2025 at 06:16:18PM -0500, Romain Beauxis wrote:
> > > Le mer. 23 juil. 2025 à 06:43, Mich
Hi
On Fri, Aug 22, 2025 at 05:22:54PM +0200, Timo Rothenpieler via ffmpeg-devel
wrote:
> On 22/08/2025 16:54, Michael Niedermayer via ffmpeg-devel wrote:
> > Hi Timo
> >
> > On Fri, Aug 22, 2025 at 02:13:14PM +0200, Timo Rothenpieler via
> > ffmpeg-devel wrote:
>
On Sat, Aug 23, 2025 at 10:09:14AM +0300, Rémi Denis-Courmont via ffmpeg-devel
wrote:
[...]
> As a member of the CC and the GA, I agree with Niklaas that any license change
> needs a GA vote. And obviously that preempts any discussion of how to merge
> the code.
There is no license change.
thx
Hi Ayose
On Sat, Aug 23, 2025 at 09:22:47AM +0100, Ayose via ffmpeg-devel wrote:
> On 2025-08-20 22:58:26 +0200, Michael Niedermayer wrote:
> >
> > On Mon, Aug 18, 2025 at 07:22:56AM +0100, Ayose via ffmpeg-devel wrote:
> > > This is a proposal to add a new filter to FFmpeg: drawvg, to draw
> > >
Hi
On Thu, Aug 21, 2025 at 01:32:02PM +0200, Michael Niedermayer via ffmpeg-devel
wrote:
> Hi
>
> Should we use a Merge or Cherry picks for integrating Pauls work ?
>
> Following are 2 plans, as we execute either we may run into issues
> and of course adapt them as needed. (o
Hi Kieran
On Sun, Aug 24, 2025 at 07:53:45AM +0100, Kieran Kunhya via ffmpeg-devel wrote:
> On Sat, 23 Aug 2025, 21:33 Michael Niedermayer via ffmpeg-devel, <
> ffmpeg-devel@ffmpeg.org> wrote:
>
> > Hi
> >
> > Here is the legal advice that i was given.
> &g
Hi Kieran
On Sat, Aug 23, 2025 at 11:39:37PM -0700, Kieran Kunhya via ffmpeg-devel wrote:
> >
> > The author for most of the changes of the new modules is Paul.
> > I certainly have alot of respect from Paul, he is a brilliant
> > developer and i feel a bit offended by what nonsense Kieran said.
>
Hi
On Thu, Aug 21, 2025 at 01:32:02PM +0200, Michael Niedermayer via ffmpeg-devel
wrote:
> Hi
>
> Should we use a Merge or Cherry picks for integrating Pauls work ?
>
> Following are 2 plans, as we execute either we may run into issues
> and of course adapt them as neede
Hi Kieran
On Sun, Aug 24, 2025 at 12:11:20PM +0100, Kieran Kunhya via ffmpeg-devel wrote:
> On Sun, 24 Aug 2025, 11:56 Michael Niedermayer via ffmpeg-devel, <
> ffmpeg-devel@ffmpeg.org> wrote:
>
> > Hi Kieran
> >
> > On Sun, Aug 24, 2025 at 07:53:45AM +010
Hi Pierre
On Wed, Aug 20, 2025 at 06:38:06PM -0700, Pierre-Anthony Lemieux via
ffmpeg-devel wrote:
[...]
> I recommend that the proposed SOWs be more specific, i.e. list those forks.
>
> [ed.: I would definitely avoid forks from folks that have not shown
> interest in working with ffmpeg, or at
Hi
Here is the legal advice that i was given.
The GA has the full text and that is much more detailed.
Iam posting the relevant parts so the whole community can see it.
"a claim that there is GPLv2 code in a file of
FFmpeg origin that has the LGPLv2.1 license would be a breach of the FFmpeg's
L
Hi Lynne, ffmpeg-devel
the following (testcase public, not cattegorized as a security issue)
https://issues.oss-fuzz.com/issues/416134551
hits
if (!ics->num_swb || !ics->swb_offset) {
ret_fail = AVERROR_BUG;
goto fail;
}
Assertion ret != (-
HI Kacper
On Wed, Aug 13, 2025 at 02:42:13AM +0200, Kacper Michajlow wrote:
> On Sat, 14 Jun 2025 at 22:47, Michael Niedermayer
> wrote:
> >
> > On Fri, Jun 13, 2025 at 04:06:31PM -0600, Pavel Koshevoy wrote:
> > > On Fri, Jun 13, 2025 at 2:46 PM Michael Niedermayer
> > >
> > > wrote:
> > >
> >
Hi Nicolas
On Tue, Aug 12, 2025 at 04:43:29PM +0200, Nicolas George wrote:
> Michael Niedermayer (HE12025-08-03):
> > well, you may have deep call stacks
> >
> > user_app->libavfilter->libavformat->libavcodec->decoder->jpeg_decoder->...
> >
> > and the user of the user_app needs to know what fil
Hi
The commit below affects:
~/tickets/5114/test_case.ivf
not sure its a "bug" as the file is not really having any content
but wanted to repost this as i saw this change
commit c0bf1382a757a4dd45b0c5f8ab70578e7126beca (HEAD)
Author: Lynne
AuthorDate: Thu Mar 27 04:54:54 2025 +
Commit:
Hi
On Wed, Aug 13, 2025 at 01:45:04PM +0200, Michael Niedermayer wrote:
> Hi all
>
> I intend to make 6.1.3 and 5.1.7 today or tomorrow
> we have had many security fixes so its high time to make releases of them
>
> the unfixed USAC bug should not affect it as USAC was added in 7.1
>
> So if yo
Hi
On Fri, Aug 01, 2025 at 03:17:48PM -0700, Jacob Lifshay wrote:
> On July 23, 2025 4:43:43 AM PDT, Michael Niedermayer
> wrote:
> > Hi everyone
> >
> > I intend to create the release/8.0 branch in the next 1-2 weeks
> > after that i intend to make teh 8.0 release in the following 1-2 weeks
>
Hi all
On Fri, Aug 01, 2025 at 06:16:18PM -0500, Romain Beauxis wrote:
> Le mer. 23 juil. 2025 à 06:43, Michael Niedermayer
> a écrit :
> >
> > Hi everyone
> >
> > I intend to create the release/8.0 branch in the next 1-2 weeks
> > after that i intend to make teh 8.0 release in the following 1-2
Hi all
what name should we give 8.0 ?
I already asked but it seems only a single reply suggested a name.
Just want to make sure everyone heared the call
thx
--
Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
Democracy is the form of government in which you can choose
Hi Andrew
On Fri, Jul 25, 2025 at 06:34:53PM +0300, Andrew Randrianasulu wrote:
> ср, 23 июл. 2025 г., 14:43 Michael Niedermayer :
>
> > Hi everyone
> >
>
> Hi.
>
> I still wish you put some time in making more accurate web changelog, with
> detailed (with git commit links) API changes, and new
Hi
We seem not to have basic x86-32 / 64 linux clients covering the releases
iam running clients for many obscure archs like sh4 and alpha
should i add x86-32 and 64 linux
See for example: https://fatebeta.ffmpeg.org/v5.1
theres my ming32 x86-32/64 but no linux
that said, the hidden reason for
Hi all
On Sun, Aug 24, 2025 at 12:59:29PM +0200, Michael Niedermayer via ffmpeg-devel
wrote:
[...]
> > Option M:
> > This would be a merge of pauls last revission before files where
> > switched to GPL and the command line tool to AGPL
[...]
> > Option C:
&g
See: https://fundingjson.org/
See: https://floss.fund/
Based on: https://www.python.org/funding.json and the example from
fundingjson.org
It is put in the web repository so its all on the plain ffmpeg.org domain
otherwise extra files are needed
---
htdocs/funding.json | 131 +++
Hi
It seems the forgejo CI takes about
13min to do fate on aarch64 and x86-64 and build on win64
Locally i run
fate + install on x86-64
build on x86-32, mingw64, arm32, mips, ppc, x86-64 + shared libs
testprogs alltools examples build on x86-64, x86-32 and arm32
in 2min 44sec
can
Hi
On Wed, Aug 20, 2025 at 05:56:27PM +0200, Timo Rothenpieler via ffmpeg-devel
wrote:
> On 8/20/2025 1:26 AM, Michael Niedermayer via ffmpeg-devel wrote:
> > Hi
> >
> > It seems the forgejo CI takes about
> > 13min to do fate on aarch64 and x86-64 and build on w
Hi Niklas
On Fri, Aug 22, 2025 at 02:29:56PM +0200, Niklas Haas via ffmpeg-devel wrote:
> On Thu, 21 Aug 2025 13:32:02 +0200 Michael Niedermayer via ffmpeg-devel
> wrote:
> > Hi
> >
> > Should we use a Merge or Cherry picks for integrating Pauls work ?
> >
&g
Hi Niklas
On Fri, Aug 22, 2025 at 02:29:56PM +0200, Niklas Haas via ffmpeg-devel wrote:
> On Thu, 21 Aug 2025 13:32:02 +0200 Michael Niedermayer via ffmpeg-devel
> wrote:
> > Hi
> >
> > Should we use a Merge or Cherry picks for integrating Pauls work ?
> >
&g
On Fri, Aug 22, 2025 at 02:13:14PM +0200, Timo Rothenpieler via ffmpeg-devel
wrote:
> On 22/08/2025 07:00, Kieran Kunhya via ffmpeg-devel wrote:
> > On Thu, 21 Aug 2025, 11:33 Michael Niedermayer via ffmpeg-devel, <
> > ffmpeg-devel@ffmpeg.org> wrote:
> >
> >
Hi Timo
On Fri, Aug 22, 2025 at 02:13:14PM +0200, Timo Rothenpieler via ffmpeg-devel
wrote:
[...]
> But then again, GitHub/MS gives us 20 parallel runners for free, and we can
> freely pick if they're running on x86_64 or aarch64, Linux, Windows or even
> OSX.
> As long as they do that, we only n
Hi Remi
On Sun, Aug 24, 2025 at 04:46:09PM +0300, Rémi Denis-Courmont via ffmpeg-devel
wrote:
> Le sunnuntai 24. elokuuta 2025, 13.47.49 Itä-Euroopan kesäaika Michael
> Niedermayer via ffmpeg-devel a écrit :
[...]
> > And you simply posted thilos street address in public.
>
Hi Derek
On Sun, Aug 24, 2025 at 03:33:32PM +0100, Derek Buitenhuis via ffmpeg-devel
wrote:
> On 8/24/2025 2:46 PM, Rémi Denis-Courmont via ffmpeg-devel wrote:
> > Le sunnuntai 24. elokuuta 2025, 13.47.49 Itä-Euroopan kesäaika Michael
> > Niedermayer via ffmpeg-devel a écrit :
On Tue, Aug 12, 2025 at 12:35:15PM +0200, Nicolas Gaullier wrote:
> v4 (Michael): first patch splitted: now 3 patches, code is unchanged.
> v3 (James): complete overhaul of the commit message of the first
> patch, code is unchanged. Second patch is fully unchanged ("should be ok").
> v2 (Baptiste):
Hi Derek
On Fri, Aug 29, 2025 at 01:48:07PM +0100, Derek Buitenhuis via ffmpeg-devel
wrote:
> On 8/29/2025 2:08 AM, Kieran Kunhya via ffmpeg-devel wrote:
> We'll see if this is pushed without consent like funding.json
> was to the main git repo, which has yet to be removed.
Implying that a fund
Hi Remi
On Fri, Aug 29, 2025 at 08:35:54PM +0300, Rémi Denis-Courmont via ffmpeg-devel
wrote:
[...]
> >+},{
> >+"guid": "ffmpeg-crypto",
> >+"type": "other",
> >+"address": "0x2f3900e7064eE63D30d749971265858612AA7139",
> >+"description": "US
See: https://fundingjson.org/
See: https://floss.fund/
Based on: https://www.python.org/funding.json and the example from
fundingjson.org
It is put in the web repository so its all on the plain ffmpeg.org domain
otherwise extra files are needed
---
htdocs/funding.json | 126 +++
Hi Remi
On Sun, Aug 31, 2025 at 11:53:01AM +0300, Rémi Denis-Courmont via ffmpeg-devel
wrote:
[...]
> > And the General Assembly can change the person(s) who control the wallet
> > For example the GA could simply choose any people it wants
> > these people then could make a transaction. for exam
On Fri, Aug 29, 2025 at 08:19:39PM +, Zsolt Vadász via ffmpeg-devel wrote:
>
> This patch series makes vf_minterpolate approximately 5% faster,
> according to my tests, which I performed on a Ryzen 7 PRO 4750U,
> compiling with GCC 15.2.1, using -O2.
>
> Zsolt Vadasz (2):
> libavfilter/vf_m
On Sat, Aug 30, 2025 at 04:27:25PM -0700, Spencer Alves via ffmpeg-devel wrote:
> The 'smpl' chunk is used for sampling music synthesizers, and includes
> things like the pitch of the sample and how to loop it. This exposes the
> loop points as "loop_start" and "loop_end" metadata, that the brstm,
Hi Patrick
On Fri, Aug 29, 2025 at 02:58:16AM +0800, Patrick Wang via ffmpeg-devel wrote:
> d119ae2fd82a494d9430ff4d4fc262961a68c598 removed the loop-breaking condition
> received_sigterm.
> Thus, signals no longer gracefully shutdown ffmpeg.
>
> Fixes: #10834
>
> Signed-off-by: Patrick Wang
>
On Wed, Aug 27, 2025 at 01:06:42PM +0200, Maryla Ustarroz via ffmpeg-devel
wrote:
> On Mon, Aug 11, 2025 at 2:01 PM Maryla Ustarroz wrote:
> >
> > On Mon, Aug 11, 2025 at 1:57 PM Maryla Ustarroz-Calonge
> > wrote:
> > >
> > > Signed-off-by: Maryla Ustarroz-Calonge
> > > ---
> > > tests/Makefil
On Tue, Sep 02, 2025 at 10:39:12AM -0300, James Almer via ffmpeg-devel wrote:
> On 9/2/2025 10:30 AM, Michael Niedermayer via ffmpeg-devel wrote:
> > On Wed, Aug 27, 2025 at 01:06:42PM +0200, Maryla Ustarroz via ffmpeg-devel
> > wrote:
> > > On Mon, Aug 11, 2025 at 2:01 P
Hi Derek
On Wed, Sep 03, 2025 at 02:19:28PM +0100, Derek Buitenhuis via ffmpeg-devel
wrote:
> On 9/3/2025 2:06 PM, Michael Niedermayer via ffmpeg-devel wrote:
> > Applied after discussion in the General Assembly.
> > There where no objections.
>
> There were multiple ob
Hi Derek
On Wed, Sep 03, 2025 at 02:19:28PM +0100, Derek Buitenhuis via ffmpeg-devel
wrote:
> On 9/3/2025 2:06 PM, Michael Niedermayer via ffmpeg-devel wrote:
> > Applied after discussion in the General Assembly.
> > There where no objections.
[...]
> Moving it to a priva
On Fri, Aug 29, 2025 at 05:21:00PM +0200, Michael Niedermayer via ffmpeg-devel
wrote:
> See: https://fundingjson.org/
> See: https://floss.fund/
>
> Based on: https://www.python.org/funding.json and the example from
> fundingjson.org
>
> It is put in the web repository so
Hi everyone
On Fri, Aug 29, 2025 at 05:21:00PM +0200, Michael Niedermayer via ffmpeg-devel
wrote:
> See: https://fundingjson.org/
> See: https://floss.fund/
>
> Based on: https://www.python.org/funding.json and the example from
> fundingjson.org
>
> It is put in the web
On Thu, Sep 04, 2025 at 07:43:36PM +0800, 岑湛权 via ffmpeg-devel wrote:
> From: zhanquan cen
>
> Fix two -Wenum-conversion warnings:
> - Implicit conversion from AVPacketSideDataType to AVFrameSideDataType
> - Implicit conversion from AVFrameSideDataType to AVPacketSideDataType
>
> The packet side
Hi Remi
On Tue, Sep 09, 2025 at 02:49:39PM +0300, Rémi Denis-Courmont via ffmpeg-devel
wrote:
> Hi,
>
> Le 9 septembre 2025 11:19:26 GMT+03:00, Michael Niedermayer via ffmpeg-devel
> a écrit :
> >Hi Everyone
> >
> >The subject of funding and sponsors came up
Hi Kieran
On Tue, Sep 09, 2025 at 10:02:22AM +0100, Kieran Kunhya via ffmpeg-devel wrote:
> On Tue, 9 Sept 2025, 09:19 Michael Niedermayer via ffmpeg-devel, <
[...]
> My suggestion would be:
> > - The FFmpeg project should actively seek sponsors and funding.
> > - The mo
59 matches
Mail list logo
