summaryrefslogtreecommitdiff
path: root/libavformat
Commit message (Collapse)AuthorAge
...
* jvdec: Check return value of avio_seek and avoid modifying state if it failsJoakim Plate2012-02-10
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* filmstripdec: Check return value of avio_seek and avoid modifying state if ↵Joakim Plate2012-02-10
| | | | | | | it fails Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* ffmdec: Check return value of avio_seek and avoid modifying state if it failsJoakim Plate2012-02-10
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* dv: Check return value of avio_seek and avoid modifying state if it failsJoakim Plate2012-02-10
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* bink: Check return value of avio_seek and avoid modifying state if it failsJoakim Plate2012-02-10
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* rtpenc: Write a log message if the max packet size is too smallMartin Storsjö2012-02-10
| | | | Signed-off-by: Martin Storsjö <martin@martin.st>
* dv: Move a table used only by the demuxer out of a shared header.Alex Converse2012-02-09
|
* dv: Fix small overread in audio frequency table.Alex Converse2012-02-09
| | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
* WavPack demuxer: set packet durationPaul B Mahol2012-02-09
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* mxfdec: Ignore the last entry in Avid's index table segmentsTomas Härdin2012-02-09
| | | | | | | | The last entry is the total size of the essence container. Previously a TemporalOffset error would be logged, even though segments like these are expected. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Sanity-check SampleRateTomas Härdin2012-02-09
| | | | | | This avoids a SIGFPE if SampleRate is missing or set to naughty values. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Handle small EditUnitByteCountTomas Härdin2012-02-09
| | | | | | | These are common with audio atoms. Without this the demuxer would read two bytes at a time for a mono 16-bit file. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Consider OPAtom files that do not have exactly one EC to be OP1aTomas Härdin2012-02-09
| | | | | | This fixes demuxing of 2011_DCPTEST_24FPS.V.mxf. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Don't crash in mxf_packet_timestamps() if current_edit_unit overflowsTomas Härdin2012-02-09
| | | | Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Zero nb_ptses in mxf_compute_ptses_fake_index()Tomas Härdin2012-02-09
| | | | | | This fixes SIGSEGV on files with both CBR and VBR index segments (zzuf6.mxf). Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Sanity check PreviousPartitionTomas Härdin2012-02-09
| | | | | | Without this certain files could get the demuxer stuck in a loop. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Never seek back in local sets and KLVsTomas Härdin2012-02-09
| | | | | | | | | Specially crafted files can lead the parsing code to take too long. We fix a lot of these problems by not allowing local tags to extend past the end of the set and not allowing other KLVs to be read past the end of themselves. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Move the current_partition check inside mxf_read_header()Tomas Härdin2012-02-09
| | | | | | This fixes SIGSEGV on files where this is the case, such as zzuf4.mxf. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Fix infinite loop in mxf_packet_timestamps()Tomas Härdin2012-02-09
| | | | | | | This can happen if an index table segment has a very large IndexStartPosition. zzuf3.mxf is an example of such a file. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Check eof_reached in mxf_read_local_tags()Tomas Härdin2012-02-09
| | | | | | This fixes an infinite loop with zzuf2.mxf. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Check for NULL componentTomas Härdin2012-02-09
| | | | | | This fixes a SIGSEGV with zzuf1.mxf. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Make sure mxf->nb_index_tables > 0 in mxf_packet_timestamps()Tomas Härdin2012-02-09
| | | | | | | Only the OPAtom demuxing logic is guaranteed to have index tables, meaning OP1a files that lack an index would cause SIGSEGV. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* mxfdec: Make sure x < index_table->nb_ptsesTomas Härdin2012-02-09
| | | | | | Avoids a SIGSEGV on files with IndexEntryCount < IndexDuration. Signed-off-by: Diego Biurrun <diego@biurrun.de>
* apetag: fix commentPaul B Mahol2012-02-08
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* doxygen: Do not include license boilerplates in Doxygen comment blocks.Diego Biurrun2012-02-06
|
* ape: skip packets with invalid sizeJustin Ruggles2012-02-06
|
* ape: calculate final packet size instead of guessingJustin Ruggles2012-02-06
| | | | | | | Calculates based on total file size and wavetaillength from the header. Falls back to multiplying finalframeblocks by 8 instead of 4 so that it will at least be overestimating for 24-bit. Currently it can underestimate the final packet size, leading to decoding errors.
* ape: stop reading after the last frame has been readJustin Ruggles2012-02-06
| | | | This avoids buffer overread when the last packet size estimate is too small.
* ape: return AVERROR_EOF instead of AVERROR(EIO) when demuxing is finishedJustin Ruggles2012-02-06
|
* ape: return error if seeking to the current packet fails in ape_read_packet()Justin Ruggles2012-02-06
|
* ape: fix seekingPaul B Mahol2012-02-04
| | | | | Signed-off-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
* movdec: Avoid av_malloc(0) in stssAlex Converse2012-02-03
| | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
* frame{crc/md5}: set the stream timebase from codec timebase.Anton Khirnov2012-02-03
| | | | | | | | | | | | | Right now those muxers use the default timebase in all cases(1/90000). This patch avoid unnecessary rescaling and makes the printed timestamps more readable. Also, extend the printed information to include the timebases and packet pts/duration and align the columns. Obviously changes the results of all fate tests which use those two muxers.
* movdec: Parse the dvc1 atomMartin Storsjö2012-02-02
| | | | | | | | | | Normally, the actual payload data contains sequence headers, too, and the parser can extract this and set it as extradata. However, the data in the dvc1 atom is the "official" extradata for the file. This is required for proper stream copy of vc1 from ismv to ismv. Signed-off-by: Martin Storsjö <martin@martin.st>
* movdec: fix dts generation in fragmented filesJanne Grunau2012-02-02
| | | | | | | Do not use AVStream's duration for dts generation since it contains in some cases the duration of the whole file instead of duration of the samples in the moov. This happens if the mdhd holds the duration of the whole file but has no entries or a zero duration in its stts.
* dv: Fix small stack overread related to CVE-2011-3929 and CVE-2011-3936.Alex Converse2012-01-31
| | | | | | | Found with asan. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Alex Converse <alex.converse@gmail.com>
* dv: Fix null pointer dereference due to ach=0Michael Niedermayer2012-01-31
| | | | | | | | | | | dv: Fix null pointer dereference due to ach=0 Fixes part2 of CVE-2011-3929 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Reviewed-by: Roman Shaposhnik <roman@shaposhnik.org> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Alex Converse <alex.converse@gmail.com>
* dv: check stypeMichael Niedermayer2012-01-31
| | | | | | | | | | | | dv: check stype Fixes part1 of CVE-2011-3929 Possibly fixes part of CVE-2011-3936 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Reviewed-by: Roman Shaposhnik <roman@shaposhnik.org> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Alex Converse <alex.converse@gmail.com>
* swfdec: Simplify sample rate calculation.Alex Converse2012-01-31
|
* lavf: add functions for accessing the fourcc<->CodecID mapping tables.Anton Khirnov2012-01-31
| | | | Fixes bug 212.
* lavc: set AVCodecContext.codec in avcodec_get_context_defaults3().Anton Khirnov2012-01-31
| | | | | | | | | This way, if the AVCodecContext is allocated for a specific codec, the caller doesn't need to store this codec separately and then pass it again to avcodec_open2(). It also allows to set codec private options using av_opt_set_* before opening the codec.
* lavc: add avcodec_is_open().Anton Khirnov2012-01-31
| | | | | | | It allows to check whether an AVCodecContext is open in a documented way. Right now the undocumented way this check is done in lavf/lavc is by checking whether AVCodecContext.codec is NULL. However it's desirable to be able to set AVCodecContext.codec before avcodec_open2().
* lavf: rename AVInputFormat.value to raw_codec_id.Anton Khirnov2012-01-31
| | | | It's only used by raw demuxers for storing the codec id.
* lavf: remove the pointless value field from flv and iv8Anton Khirnov2012-01-31
| | | | The demuxers don't use it in any way.
* lavc/lavf: remove unnecessary symbols from the symbol version script.Anton Khirnov2012-01-31
|
* lavf: reorder AVInput/OutputFormat fields.Anton Khirnov2012-01-31
| | | | | | | Put all private fields at the end and mark them as such so they can be easily changed/removed. This breaks ABI.
* movdec: Ignore sample_degradation_priority bits when checking first_sample_flagsMartin Storsjö2012-01-31
| | | | | | | | | | | This makes the first packet of a track fragment run to get the keyframe flag set properly if sample_degradation_priority is nonzero. This makes the keyframes flag be set properly for ismv files created by Microsoft. Signed-off-by: Martin Storsjö <martin@martin.st>
* flvdec: Interpret a toplevel 'object' type metadata item as normal metadata, tooMartin Storsjö2012-01-30
| | | | | | | | | | | | Previously, we've only passed the key string on to the recursive amf_parse_object for the mixedarray type, not for 'object'. By passing the key string on, the recursive amf_parse_object can store the amf objects as metadata. This kind of data was seen in data from XSplit Broadcaster, received over RTMP via Wowza. This patch allows reading this metadata. Signed-off-by: Martin Storsjö <martin@martin.st>
* nsvdec: Propagate errorsAlex Converse2012-01-30
| | | | | | Related to CVE-2011-3940. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
* nsvdec: Be more careful with av_malloc().Alex Converse2012-01-30
| | | | | | | | | | Check results for av_malloc() and fix an overflow in one call. Related to CVE-2011-3940. Based in part on work from Michael Niedermayer. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind