summaryrefslogtreecommitdiff
path: root/libavcodec
Commit message (Collapse)AuthorAge
* avcodec/indeo3: ensure offsets are non negativeMichael Niedermayer2014-12-18
| | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/adpcm: Check ideltaMichael Niedermayer2014-12-18
| | | | | | | Fixes integer overflow Fixes: signal_sigsegv_1b0a4da_1865_cov_2167818389_computer_anger.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/h264: Check *log2_weight_denomMichael Niedermayer2014-12-18
| | | | | | | Fixes undefined behavior Fixes: signal_sigsegv_14768d2_2248_cov_3629497219_h264_h264___pi_20070614T182942.h264 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/hevc_ps: Check diff_cu_qp_delta_depthMichael Niedermayer2014-12-18
| | | | | | | Fixes undefined behavior Fixes: asan_static-oob_17aa046_582_cov_1577759978_DBLK_G_VIXS_1.bit Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/hevc: move qp_block_mask to where its usedMichael Niedermayer2014-12-18
| | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/h264: Clear delayed_pic on deallocationMichael Niedermayer2014-12-17
| | | | | | | | Fixes use of freed memory Fixes: case5_av_frame_copy_props.mp4 Found-by: Michal Zalewski <lcamtuf@coredump.cx> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/hevc: clear filter_slice_edges() on allocationMichael Niedermayer2014-12-17
| | | | | | | This avoids use of uninitialized memory Fixes: asan_static-oob_17aa046_582_cov_212287884_DBLK_G_VIXS_1.bit Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/dcadec: Check that the added xch channel isnt already thereMichael Niedermayer2014-12-17
| | | | | | | Fixes null pointer dereference Fixes: signal_sigsegv_369609d_623_cov_2008234281_ES_6.1_16bit.dts Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/imc: dont read bits beyond the endMichael Niedermayer2014-12-17
| | | | | | Fixes use of uninitialized memory Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/utils: check the private context classMichael Niedermayer2014-12-17
| | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/indeo3: use signed variables to avoid underflowMichael Niedermayer2014-12-17
| | | | | | | Fixes out of array read Fixes: signal_sigsegv_1b0a4da_1865_cov_2167818389_computer_anger.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* flacenc: calculate lower sum levels in-place.Reimar Döffinger2014-12-17
| | | | | | | | Should improve cache usage and reduces stack usage. Also reduces number of copies in case many levels have the same number of bits. Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de>
* avcodec/h264: make the first field of H264Context an AVClassMichael Niedermayer2014-12-17
| | | | | | | Fixes use of freed memory Fixes: asan_heap-uaf_3660f67_757_cov_1257014655_Hi422FR1_SONY_A.jsv Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/utvideodec: Fix handling of slice_height=0Michael Niedermayer2014-12-16
| | | | | | | Fixes out of array accesses Fixes: asan_heap-oob_25bcd7e_3783_cov_3553517262_utvideo_rgba_median.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/xface: Add asserts to limit nb_words from becoming too largeMichael Niedermayer2014-12-16
| | | | | Approved-by: Stefano Sabatini <stefasab@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/xface: correct the XFACE_MAX_* valuesMichael Niedermayer2014-12-16
| | | | | | | | Fixes out of array access Fixes: asan_stack-oob_32c12e5_2536_cov_2442316831_lena.xface Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/vmdvideo: Check len before using it in method 3Michael Niedermayer2014-12-16
| | | | | | | | Fixes out of array access Fixes: asan_heap-oob_4d23ba_91_cov_3853393937_128.vmd Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* snow_dwt: Don't try and free members of non-existent arraysDerek Buitenhuis2014-12-15
| | | | | | | | If allocation fails earlier on, and the next frame is processed, the slice buffer could be left in a state where line and data_stack have already been freed, or are otherwise null pointers. Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
* vp9/x86: save one register on 32bit idct32x32.Ronald S. Bultje2014-12-16
| | | | | | Fixes build on win32. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* avcodec/tiffenc: Consistently use ADD_ENTRY1()Michael Niedermayer2014-12-15
| | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* Merge commit '10d4c5e55e5b23e165aa4c7723073ebe2c2e7da0'Michael Niedermayer2014-12-15
|\ | | | | | | | | | | | | * commit '10d4c5e55e5b23e165aa4c7723073ebe2c2e7da0': tiff: set the correct return value when check_size() fails Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * tiff: set the correct return value when check_size() failsVittorio Giovara2014-12-15
| | | | | | | | Only one instance affected and solved as other occurences.
* | Merge commit '3c27275c1309190f2d6ed69140b67d014215b6c9'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | | | | | | | | | * commit '3c27275c1309190f2d6ed69140b67d014215b6c9': tiff: Check the check_size() return value and forward it Conflicts: libavcodec/tiffenc.c See: d50aa006fb3430bedc3872ba10e028a714499625 Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * tiff: Check the check_size() return value and forward itLuca Barbato2014-12-15
| | | | | | | | | | | | | | | | | | | | Also use the same type for add_entry and check_size. Bug-Id: CID 700699 CC: libav-stable@libav.org Signed-off-by: Luca Barbato <lu_zero@gentoo.org> Signed-off-by: Vittorio Giovara <vittorio.giovarao@gmail.com>
* | Merge commit '4690e01c3aaf495c87127e5dc74aa347197dbc0b'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | * commit '4690e01c3aaf495c87127e5dc74aa347197dbc0b': prores: Evaluate all the quantizers Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * prores: Evaluate all the quantizersLuca Barbato2014-12-15
| | | | | | | | | | | | | | | | | | Prevent an uninitialized data access. CC: libav-stable@libav.org Bug-Id: CID 703824 / CID 703825 Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com> Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
* | Merge commit 'd75190aa93206c02cb4f18a66d2c927d6a0198e1'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | * commit 'd75190aa93206c02cb4f18a66d2c927d6a0198e1': mpegvideo: move REBASE_PICTURE where it is used Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * mpegvideo: move REBASE_PICTURE where it is usedVittorio Giovara2014-12-15
| | | | | | | | Drop an unused #undef from h264 decoder.
* | Merge commit '63fcedcf01247f15b72c0d1f959bb3b612853ba8'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | * commit '63fcedcf01247f15b72c0d1f959bb3b612853ba8': mpegvideo: remove unused function declaration Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * mpegvideo: remove unused function declarationVittorio Giovara2014-12-15
| |
* | avcodec/hevc: Print an error if luma_log2_weight_denom is out of rangeMichael Niedermayer2014-12-15
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Merge commit 'b2bece5e9a4dd96142962c6798e187c77b88bbfa'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | * commit 'b2bece5e9a4dd96142962c6798e187c77b88bbfa': hevc: always clip luma_log2_weight_denom Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * hevc: always clip luma_log2_weight_denomVittorio Giovara2014-12-15
| | | | | | | | | | | | | | Its value shall be between 0 and 7 according to the specifications. CC: libav-stable@libav.org Bug-Id: CID 1257502
* | avcodec/avdct: support >8bit per sample dctsMichael Niedermayer2014-12-15
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Merge commit 'bab8d73765238bfeea7a8dfd454f40ac213b3d22'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | | | | | | | | | * commit 'bab8d73765238bfeea7a8dfd454f40ac213b3d22': vaapi: wrap codec specific functions in appropiate #ifs Conflicts: libavcodec/vaapi.c See: f2118d44c9f18b3245bec2415c563d94201dcf5a Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * vaapi: wrap codec specific functions in appropiate #ifsThiago Santos2014-12-14
| | | | | | | | | | | | | | | | | | | | Fix linking when only a subset of vaapi decoders is enabled. Bug-Id: 760 CC: libav-stable@libav.org Signed-off-by: Rémi Denis-Courmont <remi@remlab.net> Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
* | Merge commit '5a82ad644f281701eb22e0359fd732fac67aafa4'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | | | | | | | | | * commit '5a82ad644f281701eb22e0359fd732fac67aafa4': svq1dec: Unbreak the scratch buffer allocation Conflicts: libavcodec/svq1dec.c See: 4213fc5b9eebec53c7d22b770c3f1ceecca1c113 Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * svq1dec: Unbreak the scratch buffer allocationMichael Niedermayer2014-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The input packets are always assumed to be padded and the av_fast_ family of function takes a pointer to a pointer. Thanks to Nicolas Dufresne <nicolas.dufresne@collabora.com> for a similar patch. Introduced in 7b588bb691644e1b3c168b99accf74248a24e3cf. Bug-Id: 766 CC: libav-stable@libav.org Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
* | Merge commit 'bcbdeb318e0828cf00b458885ffa1e1596c85d06'Michael Niedermayer2014-12-15
|\| | | | | | | | | | | | | | | | | | | | | | | | | * commit 'bcbdeb318e0828cf00b458885ffa1e1596c85d06': asvenc: Forward the error instead of asserting on it Conflicts: libavcodec/asvenc.c Not merged, conditions which are impossible should be checked by assert*() adding impossible to be true error checks has the potential to confuse Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * asvenc: Forward the error instead of asserting on itLuca Barbato2014-12-14
| | | | | | | | | | Bug-Id: CID 732997 CC: libav-stable@libav.org
* | vp9/x86: sse2 MC assembly.Ronald S. Bultje2014-12-15
| | | | | | | | | | | | | | Also a slight change to the ssse3 code, which prevents a theoretical overflow in the sharp filter. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | vp9/x86: 32bit and sse2 support for vp9 inverse transform assemblyRonald S. Bultje2014-12-15
| | | | | | | | Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Merge commit '559fa0d41b5cf8f7e1ba89d1ac70e74712eb2816'Michael Niedermayer2014-12-14
|\| | | | | | | | | | | | | * commit '559fa0d41b5cf8f7e1ba89d1ac70e74712eb2816': vdpau: add mapping for H.264 Constrained Baseline profile and fallback Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * vdpau: add mapping for H.264 Constrained Baseline profile and fallbackRémi Denis-Courmont2014-12-14
| | | | | | | | | | | | | | Old VDPAU drivers do not support this newly defined profile, so falling back to Main profile is necessary for backward binary compatibility. Signed-off-by: Anton Khirnov <anton@khirnov.net>
* | Merge commit '8502c1e9ff9c1dbb6e467630c048d098f4064021'Michael Niedermayer2014-12-14
|\| | | | | | | | | | | | | * commit '8502c1e9ff9c1dbb6e467630c048d098f4064021': vdpau: add mapping for H.264 Extended profile Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * vdpau: add mapping for H.264 Extended profileRémi Denis-Courmont2014-12-14
| | | | | | | | Signed-off-by: Anton Khirnov <anton@khirnov.net>
* | Merge commit '8b51bcfed75721e0d20832e5a90e1d585318c9d9'Michael Niedermayer2014-12-14
|\| | | | | | | | | | | | | * commit '8b51bcfed75721e0d20832e5a90e1d585318c9d9': vdpau: revector macro to reduce line span Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * vdpau: revector macro to reduce line spanRémi Denis-Courmont2014-12-14
| | | | | | | | Signed-off-by: Anton Khirnov <anton@khirnov.net>
* | avcodec/xiph: mark returned header pointers const from ↵Michael Niedermayer2014-12-14
| | | | | | | | | | | | | | avpriv_split_xiph_headers() Reviewed-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | avcodec: fix wording in AVSubtitleRect doxyClément Bœsch2014-12-13
| |