summaryrefslogtreecommitdiff
path: root/libavcodec/evc_ps.c
Commit message (Collapse)AuthorAge
* avcodec/evc_ps: Check chroma_format_idcMichael Niedermayer2023-10-16
| | | | | | | | | Fixes: out of array access Fixes: 62678/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-4858264984354816 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Kieran Kunhya <kierank@obe.tv> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/evc_ps: Fix leak on errorAndreas Rheinhardt2023-09-26
| | | | | | | Regression since 4565747056a11356210ed8edcecb920105e40b60. Fixes Coverity ticket #1545072. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
* avcodec/evc_ps: Check cpb_cnt_minus1 and propagate errorMichael Niedermayer2023-09-22
| | | | | | | | Fixes: out of array access Fixes: 60949/clusterfuzz-testcase-minimized-ffmpeg_dem_EVC_fuzzer-5959738853294080 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/evc_ps: make the sps parameter in ref_pic_list_struct constJames Almer2023-09-15
| | | | | | It's not changed. Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: Check ref_pic_num and sps_max_dec_pic_buffering_minus1Michael Niedermayer2023-09-15
| | | | | | | | Fixes: out of array write Found-by: dongsookim@korea.ac.kr Reviewed-by: James Almer <jamrial@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/evc_ps: Check num_ref_pic_list_in_spsMichael Niedermayer2023-07-28
| | | | | | | | | Fixes: out of array write Fixes: 60798/clusterfuzz-testcase-minimized-ffmpeg_BSF_EVC_FRAME_MERGE_fuzzer-4633529766772736 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: James Almer <jamrial@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
* avcodec/evc*: Improve included headersAndreas Rheinhardt2023-07-24
| | | | | | In particular, don't include avcodec.h in evc_frame_merge_bsf.c. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
* avcodec/evc_ps: Replace av_malloc+memset by av_malloczAndreas Rheinhardt2023-06-30
| | | | | Reviewed-by: James Almer <jamrial@gmail.com> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
* avcodec/evc_ps: fix allowed range for pps_pic_parameter_set_idJames Almer2023-06-23
| | | | Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: use unsigned types in structs where correspondsJames Almer2023-06-23
| | | | Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: pass a GetBitContext to the SPS and PPS parsing functionsJames Almer2023-06-21
| | | | | | This is in preparation for the following patch. Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: use get_bits1() where usefulJames Almer2023-06-19
| | | | Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: check valid range for a few more elementsJames Almer2023-06-19
| | | | | | Should prevent overreads on non spec comformant input. Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: use get_bits_long() where neededJames Almer2023-06-19
| | | | Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: Check log2_sub_gop_lengthMichael Niedermayer2023-06-19
| | | | | | | | | Fixes: 1.70141e+38 is outside the range of representable values of type 'int' Fixes: 59883/clusterfuzz-testcase-minimized-ffmpeg_BSF_EVC_FRAME_MERGE_fuzzer-5557887217565696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_ps: make ff_evc_parse_{sps,pps} return an error codeJames Almer2023-06-19
| | | | Signed-off-by: James Almer <jamrial@gmail.com>
* avcodec/evc_parse: split off Parameter Set parsing into its own fileJames Almer2023-06-19
Signed-off-by: James Almer <jamrial@gmail.com>