summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* avcodec/cbs_mpeg2: Treat slices without data as invalidAndreas Rheinhardt2020-02-09
| | | | | | | They are spec-incompliant. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/dpcm: Fix integer overflow in AV_CODEC_ID_GREMLIN_DPCMMichael Niedermayer2020-02-09
| | | | | | | | Fixes: signed integer overflow: -2147479324 + -32568 cannot be represented in type 'int' Fixes: 20103/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_GREMLIN_DPCM_fuzzer-5667667579240448 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/wmalosslessdec: Fix integer overflow with sliding in padding bitsMichael Niedermayer2020-02-09
| | | | | | | | Fixes: signed integer overflow: -53716100 * 256 cannot be represented in type 'int' Fixes: 20143/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-5716604000403456 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/wmalosslessdec: Fix loop in revert_acfilter()Michael Niedermayer2020-02-09
| | | | | | | | | | Fixes: out of array read Fixes: 20059/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-5691776237305856 No testcase except the fuzzed one. Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mvha: Check remaining bits in VLC decode loopMichael Niedermayer2020-02-09
| | | | | | | | Fixes: timeout (252sec -> 170msec) Fixes: 20023/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVHA_fuzzer-5681192565473280 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/agm: YUV420 without DCT needs even dimensionsMichael Niedermayer2020-02-09
| | | | | | | | Fixes: out of array access Fixes: 19892/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AGM_fuzzer-5707525924323328 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* libswscale/utils.c: Fix bug #8255Gautam Ramakrishnan2020-02-09
| | | | | | | | | | Bug #8255 points out a double free error in libwscale/utils.c file. The double free is because the pointer to cascaded_context of an sw_context is not set to NULL after freeing it. When the sw_context is later freed, sws_freeContext is called on the cascaded_context, causing a double free. Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/agm: Test remaining data in decode_raw_intra_rgb()Michael Niedermayer2020-02-09
| | | | | | | | | Fixes: Timeout (270sec -> 25ms) Fixes: 20485/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AGM_fuzzer-5636954207289344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avformat/tty: Fix division by 0 in probeMichael Niedermayer2020-02-09
| | | | | | | | | | Fixes: division by zero Fixes: 20436/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5763229752229888 Fixes: 20503/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-4841641154445312 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* libavcodec/mvha: Check height before applying median predictorMichael Niedermayer2020-02-09
| | | | | | | | | Fixes: out of array read Fixes: 20495/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVHA_fuzzer-5711179129552896 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/midivid: Check vector indexMichael Niedermayer2020-02-09
| | | | | | | | | Fixes: out of array read Fixes: 20494/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVDV_fuzzer-5681452423577600 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/cbs: Fix potential double-free when adding unit failsAndreas Rheinhardt2020-02-09
| | | | | | | | | | | | | | | | | | | | | | ff_cbs_insert_unit_data() has two modes of operation: It can insert a unit with a newly created reference to an already existing AVBuffer; or it can take a buffer and create an AVBuffer for it. Said buffer will then become owned by the unit lateron. A potential memleak/double-free exists in the second case, because if creating the AVBuffer fails, the function immediately returns, but when it fails lateron, the supplied buffer will be freed. The caller has no way to distinguish between these two outcomes. The only such caller (cbs_jpeg_split_fragment() in cbs_jpeg.c) opted for a potential double-free. This commit changes this by explicitly stating that a non-refcounted buffer will be freed on error. The aforementioned caller has been brought in line with this. Fixes CID 1452623. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
* avfilter/vf_fade: fix color fading for planar rgbPaul B Mahol2020-02-09
|
* avfilter/vf_fade: add >8 bit support for black and alpha fadePaul B Mahol2020-02-09
|
* doc/ffmpeg: Document device selection for VulkanMark Thompson2020-02-09
|
* lavfi/vf_*_vaapi: Fix error caseMark Thompson2020-02-09
| | | | Fixes CID 1452400, 1452416, 1452550, 1452590, 1452760.
* lavfi/vf_deshake_opencl: Avoid propagating uninitialised dataMark Thompson2020-02-09
| | | | Fixes CID 1452753.
* lavc/vp9_raw_reorder_bsf: Fix operator orderingMark Thompson2020-02-09
| | | | Fixes CID 1413024.
* lavc/vaapi_encode: Fix leak in error caseMark Thompson2020-02-09
| | | | Fixes CID 1442564.
* lavc/h265_metadata_bsf: Fix parameter orderingMark Thompson2020-02-09
| | | | Fixes CID 1452433.
* lavc/cbs_h2645: Add missing newlines in log messagesMark Thompson2020-02-09
|
* avutil/log: add support for multibyte console log for win32Marton Balint2020-02-09
| | | | | | Fixes ticket #5398. Signed-off-by: Marton Balint <cus@passwd.hu>
* avutil/log: add support for forced ANSI colors on win32Marton Balint2020-02-09
| | | | | | | To make behavior the same as non-win32 code when the standard error is redirected. Also restructure the code a bit. Signed-off-by: Marton Balint <cus@passwd.hu>
* avutil/log: fix detecting console mode on Win32Marton Balint2020-02-09
| | | | | | A redirected stderr can still have a valid handle. Signed-off-by: Marton Balint <cus@passwd.hu>
* avutil/log: factorize ansi_fputsMarton Balint2020-02-09
| | | | Signed-off-by: Marton Balint <cus@passwd.hu>
* avutil/log: drop support for NO_COLOR environment variableMarton Balint2020-02-09
| | | | | | Deprecated for more than 9 years now. Signed-off-by: Marton Balint <cus@passwd.hu>
* libavcodec/amfenc_hevc.c: Fix Maximum Reference Frames option on AMF HEVC.Sitan Liu2020-02-09
|
* libavcodec/amfenc_hevc.c: Fix Profile level option on AMF HEVC.Sitan Liu2020-02-09
|
* avfilter/af_afftfilt: fix memory leaks on errorPaul B Mahol2020-02-09
|
* avfilter/af_afffilt: fix crash on errorPaul B Mahol2020-02-09
|
* avfilter/vf_xfade: add diagonal smooth transitionsPaul B Mahol2020-02-09
|
* avfilter/af_asoftclip: add support for commandsPaul B Mahol2020-02-09
|
* avfilter/af_asoftclip: add slice threading supportPaul B Mahol2020-02-09
|
* doc/APIchanges: fix vulkan hwcontext dateLynne2020-02-08
|
* lavu/tx: mention FFT output is not normalizedLynne2020-02-08
| | | | | | | Not even FFTW's output is normalized. This should prevent at least some users from complaining that doing a forward transform followed by an inverse transform has a mismatching output to the original input.
* checkasm: sbrdsp: Fix a spurious test failure by calculating a better ↵Martin Storsjö2020-02-08
| | | | | | epsilon for sum_square Signed-off-by: Martin Storsjö <martin@martin.st>
* avfilter/vf_alphamerge: add AVClass to private contextPaul B Mahol2020-02-08
|
* avfilter/vf_paletteuse: Fix potential double-free of AVFrameAndreas Rheinhardt2020-02-08
| | | | | | | | | | | | | | | | | | apply_palette() would free an AVFrame given to it only via an AVFrame * (and not via AVFrame **) in three of its four exists (namely in the normal path and in two error paths). So upon error the caller has no way to know whether the frame has already been freed or not; load_apply_palette(), the only caller, opted to free the frame in this scenario. This commit changes this by making apply_palette not freeing the frame at all, which is left to load_apply_palette(). Fixes Coverity issue #1452434. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/mlpdec: use get_bits_long for huff lsbsJai Luthra2020-02-08
| | | | | | | lsb bits may go beyond 25 bits, so to be safe use get_bits_long Signed-off-by: Jai Luthra <me@jailuthra.in> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avfilter/vf_alphamerge: add timeline supportPaul B Mahol2020-02-08
|
* avfilter/vf_fade: improve type option descriptionPaul B Mahol2020-02-08
|
* avfilter/vf_fade: add missing .flags for type optionPaul B Mahol2020-02-08
|
* avfilter/vf_maskedclamp: make C version consistent with ASM onePaul B Mahol2020-02-08
| | | | In case of undefined behaviour.
* fate/adpcm: add adpcm_ima_ssi testsZane van Iperen2020-02-08
| | | | | Signed-off-by: Zane van Iperen <zane@zanevaniperen.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* aviflter/vf_xfade: add pixelize transitionPaul B Mahol2020-02-07
|
* avfilter/vf_xfade: add dissolve transitionPaul B Mahol2020-02-07
|
* avfilter/af_crystalizer: add slice threading supportPaul B Mahol2020-02-07
|
* ac3enc: drop a global variableAnton Khirnov2020-02-07
| | | | | | | | Log the warning message once per encoder instance instead. Reviewed-by: Kieran Kunhya <kierank@obe.tv> Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: James Almer <jamrial@gmail.com>
* configure: fix order of linking for libglslangPaul B Mahol2020-02-07
|
* avfilter: add afirsrc filterPaul B Mahol2020-02-07
|