summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* wma: don't return 0 on invalid packets.Ronald S. Bultje2012-02-18
| | | | | | | | Return 0 means "please return the same data again", i.e. it causes an infinite loop. Instead, return an error. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* asf: prevent packet_size_left from going negative if hdrlen > pktlen.Ronald S. Bultje2012-02-18
| | | | | | | | This prevents failed assertions further down in the packet processing where we require non-negative values for packet_size_left. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* mjpegb: don't return 0 at the end of frame decoding.Ronald S. Bultje2012-02-18
| | | | | | | | | Return 0 indicates "please return the same data again", i.e. it causes an infinite loop. Instead, return that we consumed the buffer if we finished decoding succesfully, or return an error if an error occurred. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* rtpdec: Identify incorrectly signalled H263Martin Storsjö2012-02-18
| | | | | | | | | | | | | H263 in RTP can be packetized in two formats (RFC 2190, RFC 2429/4629). The former normally uses the static payload type 34, while the latter normally uses dynamic payload types with the SDP format names H263-1998 or H263-2000. Look for packets that don't look like proper RFC 2190 packets and switch to depacketizing them according to the new format if they match some heuristic criteria. Signed-off-by: Martin Storsjö <martin@martin.st>
* vp8dsp: split long line.Ronald S. Bultje2012-02-18
| | | | Signed-off-by: Martin Storsjö <martin@martin.st>
* aiff: don't skip block_align==0 check on COMM-after-SSND files.Ronald S. Bultje2012-02-17
| | | | | | | This prevents SIGFPEs when using block_align for divisions. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* dpcm: ignore extra unpaired bytes in stereo streams.Alex Converse2012-02-17
| | | | | | Fixes: CVE-2011-3951 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
* mp3on4: require a minimum framesize.Ronald S. Bultje2012-02-17
| | | | | | | | | If bufsize < headersize, init_get_bits() will be called with a negative number, causing it to fail and any subsequent call to get_bits() will crash because it reads from a NULL pointer. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* mpc7: assign an error level + context to av_log() msg.Ronald S. Bultje2012-02-17
|
* huffyuv: error out on bit overrun.Ronald S. Bultje2012-02-17
| | | | | | | | On EOF, get_bits() will continuously return 0, causing an infinite loop. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* dct-test: Add the missing ff_ prefix to the altivec functionsMartin Storsjö2012-02-18
| | | | Signed-off-by: Martin Storsjö <martin@martin.st>
* dct-test: Remove a stray declaration of a nonexistent functionMartin Storsjö2012-02-18
| | | | Signed-off-by: Martin Storsjö <martin@martin.st>
* movenc: Write the unknown duration as 64 bit fields in ismvMartin Storsjö2012-02-18
| | | | | | | This is required for the files to play back properly in windows media player. Signed-off-by: Martin Storsjö <martin@martin.st>
* movenc: Write track durations with all bits set if duration is unknownMartin Storsjö2012-02-18
| | | | | | | | According to 14496-12, the duration should be all 1s if the duration is unknown. This is the case if writing a moov atom without any samples described in it (e.g. as in ismv files). Signed-off-by: Martin Storsjö <martin@martin.st>
* als: prevent infinite loop in zero_remaining().Ronald S. Bultje2012-02-17
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* cook: prevent div-by-zero if channels is zero.Ronald S. Bultje2012-02-17
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* pamenc: switch to encode2().Anton Khirnov2012-02-17
|
* svq1enc: switch to encode2().Anton Khirnov2012-02-17
|
* dvenc: switch to encode2().Anton Khirnov2012-02-17
|
* dpxenc: switch to encode2().Anton Khirnov2012-02-17
|
* pngenc: switch to encode2().Anton Khirnov2012-02-17
|
* v210enc: switch to encode2().Anton Khirnov2012-02-17
|
* xwdenc: switch to encode2().Anton Khirnov2012-02-17
|
* ttadec: use branchless unsigned-to-signed unfoldingJustin Ruggles2012-02-17
|
* avcodec: add a Sun Rasterfile encoderAneesh Dogra2012-02-17
| | | | Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* sunrast: Move common defines to a new header file.Aneesh Dogra2012-02-17
| | | | Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* cdxl: fix video decoding for some filesPaul B Mahol2012-02-17
| | | | | | | Width is padded for ham encodings too. Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* cdxl: fix audio for some samplesPaul B Mahol2012-02-17
| | | | | | | There may be extra padding at and of chunk. Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* apetag: add proper support for binary tagsPaul B Mahol2012-02-17
| | | | | | | export as attachment streams Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* ttadec: remove dead codePaul B Mahol2012-02-17
| | | | | | | | The unused code being removed is for encoding only and therefore is not needed by the decoder. Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* swscale: make access to filter data conditional on filter type.Ronald S. Bultje2012-02-17
| | | | | Prevents crashes on 1-tap filter (unscaled). Also rename "bguf" argument to "vbuf", seems that was a typo.
* swscale: update context offsets after removal of AlpMmxFilter.Ronald S. Bultje2012-02-17
|
* prores: initialise encoder and decoder parts only when neededKostya Shishkov2012-02-17
|
* swscale: make monowhite/black RGB-independent.Ronald S. Bultje2012-02-16
| | | | | | Disadvantage is that it no longer allows modifying brightness through adjustment of the RGB lookup table. Advantage is that now monowhite/black no longer need to be identified as a RGB format.
* flac: fix infinite loops on all-zero input or end-of-stream.Ronald S. Bultje2012-02-16
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* wmapro: change max. block size to 13 bits.Ronald S. Bultje2012-02-16
| | | | | | | WMApro actually support 13-bits block sizes (potentially even up to 14), and thus we should support that also. If we get block sizes beyond what the decoder can handle (14 is possible depending on s->decode_flags), error out instead of crashing.
* shorten: Use separate pointers for the allocated memory for decoded samples.Michael Niedermayer2012-02-16
| | | | | | | | | | | Fixes invalid free() if any of the buffers are not allocated due to either not decoding a header or an error prior to allocating all buffers. Fixes CVE-2012-0858 CC: libav-stable@libav.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* atrac3: Fix crash in tonal component decoding.Michael Niedermayer2012-02-16
| | | | | | | | | | | | Add a check to avoid writing past the end of the channel_unit.components[] array. Bug Found by: cosminamironesei Fixes CVE-2012-0853 CC: libav-stable@libav.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* ws_snd1: Fix wrong samples counts.Michael Niedermayer2012-02-16
| | | | | | | | | | | This makes the check that avoids overwrite of the samples array actually work properly. fixes CVE-2012-0848 CC: libav-stable@libav.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* movenc: Don't set a default sample duration when creating ismvMartin Storsjö2012-02-16
| | | | Signed-off-by: Martin Storsjö <martin@martin.st>
* rtp: Factorize the check for distinguishing RTCP packets from RTPMartin Storsjö2012-02-16
| | | | | | The binary doesn't change after this patch. Signed-off-by: Martin Storsjö <martin@martin.st>
* golomb: avoid infinite loop on all-zero input (or end of buffer).Ronald S. Bultje2012-02-16
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
* bethsoftvid: synchronize video timestamps with audio sample rateJustin Ruggles2012-02-16
| | | | | | | | According to unofficial documentation, the video rate is locked to the audio sample rate. This results in proper synchronization of audio and video timestamps from the demuxer. This only works if the first audio packet occurs before the first video packet or the audio sample rate is the default rate of 11111 Hz, both of which are true for all samples in our archive.
* bethsoftvid: add audio stream only after getting the first audio packetJustin Ruggles2012-02-16
| | | | | | This avoids initializing a stream with dummy values or when the file does not contain audio. Also set duration for audio packets, using the sample rate as the time base.
* bethsoftvid: Set video packet duration instead of accumulating pts.Justin Ruggles2012-02-16
|
* bethsoftvid: set packet key frame flag for audio and I-frame video packets.Justin Ruggles2012-02-16
| | | | | Fixes avconv video stream copy of bethsoft video, which was skipping all video frames unless the copyinkf option was used.
* bethsoftvid: fix read_packet() return codes.Justin Ruggles2012-02-16
| | | | Use proper AVERROR codes, and return 0 for no error.
* bethsoftvid: pass palette in side data instead of in a separate packet.Justin Ruggles2012-02-16
| | | | | | Update FATE reference to account for now non-existent palette packet. This also fixes the FATE test if frame data is not initialized in get_buffer(), so update comment in avconv accordingly.
* sdp: Ignore RTCP packets when autodetecting RTP streamsMartin Storsjö2012-02-16
| | | | | | | | The rtp demuxer which listens for RTP packets and detects the RTP payload type will currently get confused if the first packet received is an RTCP packet. Thus ignore such packets. Signed-off-by: Martin Storsjö <martin@martin.st>
* proresenc: initialise 'sign' variableKostya Shishkov2012-02-16
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-30 10:05:16 +0000