summaryrefslogtreecommitdiff
path: root/libavcodec
Commit message (Collapse)AuthorAgeFilesLines
* simple_idct: idct_4col_put: Fix out of array reads.Michael Niedermayer2012-03-021-5/+4
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* rawdec: fix input overread.Michael Niedermayer2012-03-021-2/+2
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* truemotion1: Check input buffer size against header size.Michael Niedermayer2012-03-021-1/+1
| | | | | | | Fixes overread. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* mjpeg: Check for interlaced progressive framesMichael Niedermayer2012-03-021-1/+6
| | | | | | | Fixes null pointer dereference. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* snow: check reference frame indices.Michael Niedermayer2012-03-021-9/+21
| | | | | | | Fixes NULL ptr dereference Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* huffyuv: pad classic huffman tables so as to avoid bitreader overread.Michael Niedermayer2012-03-021-4/+6
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* vc1: mquant is not allowed to be 0Michael Niedermayer2012-03-021-0/+4
| | | | | | | | Fixes out of bounds read. Checked against SMPTE 421M-2006 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* h263: fix zygo debug printing overreading.Michael Niedermayer2012-03-021-1/+1
| | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* wmadec: fix off by 1 error on the pow_tab index check.Michael Niedermayer2012-03-021-1/+1
| | | | | | | Fixes global out of array read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* h261: check mtype.Michael Niedermayer2012-03-021-0/+4
| | | | | | | Fixes out of array read Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* wavpack: Fix an integer overflowDerek Buitenhuis2012-03-021-1/+1
| | | | | | | | Integer Overflow Checker detected an integer overflow while FATE was running. Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* roqvideodec: improve end of input buffer checkMichael Niedermayer2012-03-021-1/+1
| | | | | | | This fixes a out of array read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* Merge remote-tracking branch 'qatar/master'Michael Niedermayer2012-03-0111-37/+154
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * qatar/master: h264: error out on invalid bitdepth. aacsbr: use a swap index for the Y matrix rather than copy buffers. huffyuv: do not abort on unknown pix_fmt; instead, return an error. lcl: return negative error codes on decode_init() errors. rtpenc: Use MB info side data for splitting H263 packets for RFC 2190 h263enc: Add an option for outputting info about MBs as side data avpacket: Add a function for shrinking already allocated side data nellymoserdec: Saner and faster IMDCT windowing Conflicts: doc/APIchanges libavcodec/avpacket.c libavcodec/version.h Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * h264: error out on invalid bitdepth.Ronald S. Bultje2012-03-011-6/+11
| | | | | | | | | | | | | | | | Fixes invalid reads while initializing the dequant tables, which uses the bit depth to determine the QP table size. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * aacsbr: use a swap index for the Y matrix rather than copy buffers.Christophe Gisquet2012-03-012-14/+20
| | | | | | | | Signed-off-by: Alex Converse <alex.converse@gmail.com>
| * huffyuv: do not abort on unknown pix_fmt; instead, return an error.Ronald S. Bultje2012-03-011-1/+1
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * lcl: return negative error codes on decode_init() errors.Ronald S. Bultje2012-03-011-7/+7
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * h263enc: Add an option for outputting info about MBs as side dataMartin Storsjö2012-03-014-1/+80
| | | | | | | | Signed-off-by: Martin Storsjö <martin@martin.st>
| * avpacket: Add a function for shrinking already allocated side dataMartin Storsjö2012-03-013-1/+28
| | | | | | | | Signed-off-by: Martin Storsjö <martin@martin.st>
| * nellymoserdec: Saner and faster IMDCT windowingVitor Sessak2012-02-291-8/+8
| | | | | | | | Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
* | vc1: avoid reading beyond the last line in vc1_draw_sprites()Michael Niedermayer2012-03-011-2/+2
| | | | | | | | | | | | | | Fixes overread Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | eatgq: Pass error code from tgq_decode_mb() and let the caller fail.Michael Niedermayer2012-03-011-4/+7
| | | | | | | | | | | | | | This fixes a over read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | vc1: fix out of array reads in vc1_inv_trans_4x4_c()Michael Niedermayer2012-03-011-5/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | vc1: fix out of array reads in vc1_inv_trans_4x8_c()Michael Niedermayer2012-03-011-9/+8
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | vc1: fix out of array reads in vc1_inv_trans_8x4_c()Michael Niedermayer2012-03-011-5/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mpc: Fix mpc_CC table and use.Michael Niedermayer2012-03-012-4/+5
| | | | | | | | | | | | | | | | This is based on the reference implementation and fixes a global out of array read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mpc: Fix mpc_SCF use and content.Michael Niedermayer2012-03-012-5/+37
| | | | | | | | | | | | | | | | This fixes a out of global array read. This change is based on the reference mpc imlementation. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | rv34dsp: avoid use of crop table for idct.Michael Niedermayer2012-03-011-5/+4
| | | | | | | | | | | | | | Fixes out of array read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mpegaudiodec: Enable checked bitstream reader.Michael Niedermayer2012-03-011-2/+0
| | | | | | | | | | | | | | | | It appears there are corner cases with damaged input that can lead to small overreads. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | mpegaudiodec: change granule skip code to avoid false checked bitstream ↵Michael Niedermayer2012-03-011-15/+20
| | | | | | | | | | | | | | | | | | reader errors. Code ported from qatar/master, please see there for per line authorship. Main authors AFAIK are Ronald and Justin. I have no authorship on this. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | svq3dec: fix overread of the cliping table.Michael Niedermayer2012-03-011-5/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
* | Merge remote-tracking branch 'qatar/master'Michael Niedermayer2012-03-0131-296/+546
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * qatar/master: (58 commits) amrnbdec: check frame size before decoding. cscd: use negative error values to indicate decode_init() failures. h264: prevent overreads in intra PCM decoding. FATE: do not decode audio in the nuv test. dxa: set audio stream time base using the sample rate psx-str: do not allow seeking by bytes asfdec: Do not set AVCodecContext.frame_size vqf: set packet parameters after av_new_packet() mpegaudiodec: use DSPUtil.butterflies_float(). FATE: add mp3 test for sample that exhibited false overreads fate: add cdxl test for bit line plane arrangement vmnc: return error on decode_init() failure. libvorbis: add/update error messages libvorbis: use AVFifoBuffer for output packet buffer libvorbis: remove unneeded e_o_s check libvorbis: check return values for functions that can return errors libvorbis: use float input instead of s16 libvorbis: do not flush libvorbis analysis if dsp state was not initialized libvorbis: use VBR by default, with default quality of 3 libvorbis: fix use of minrate/maxrate AVOptions ... Conflicts: Changelog doc/APIchanges libavcodec/avcodec.h libavcodec/dpxenc.c libavcodec/libvorbis.c libavcodec/vmnc.c libavformat/asfdec.c libavformat/id3v2enc.c libavformat/internal.h libavformat/mp3enc.c libavformat/utils.c libavformat/version.h libswscale/utils.c tests/fate/video.mak tests/ref/fate/nuv tests/ref/fate/prores-alpha tests/ref/lavf/ffm tests/ref/vsynth1/prores tests/ref/vsynth2/prores Merged-by: Michael Niedermayer <michaelni@gmx.at>
| * amrnbdec: check frame size before decoding.Vitor Sessak2012-02-291-0/+8
| | | | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
| * cscd: use negative error values to indicate decode_init() failures.Ronald S. Bultje2012-02-291-2/+2
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * h264: prevent overreads in intra PCM decoding.Ronald S. Bultje2012-02-291-0/+2
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * mpegaudiodec: use DSPUtil.butterflies_float().Vitor Sessak2012-02-291-0/+7
| | | | | | | | Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
| * vmnc: return error on decode_init() failure.Ronald S. Bultje2012-02-291-0/+1
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * libvorbis: add/update error messagesJustin Ruggles2012-02-291-9/+19
| | | | | | | | also use AVERROR codes for some return values instead of -1
| * libvorbis: use AVFifoBuffer for output packet bufferJustin Ruggles2012-02-291-18/+17
| | | | | | | | simplifies the code and does less memmove()
| * libvorbis: remove unneeded e_o_s checkJustin Ruggles2012-02-291-4/+0
| | | | | | | | | | vorbis_bitrate_flushpacket() does not return any packets that should not be output in the bitstream.
| * libvorbis: check return values for functions that can return errorsJustin Ruggles2012-02-291-7/+15
| |
| * libvorbis: use float input instead of s16Justin Ruggles2012-02-291-3/+3
| | | | | | | | | | libvorbis takes float input, so we can just deinterleave/reorder the input as-is instead of also converting.
| * libvorbis: do not flush libvorbis analysis if dsp state was not initializedJustin Ruggles2012-02-291-1/+4
| | | | | | | | Fixes a segfault if init() fails before initializing the dsp state
| * libvorbis: use VBR by default, with default quality of 3Justin Ruggles2012-02-291-2/+12
| |
| * libvorbis: fix use of minrate/maxrate AVOptionsJustin Ruggles2012-02-292-5/+5
| | | | | | | | | | | | - enable the options for audio encoding - properly check for user-set maxrate - use correct calling order in vorbis_encode_setup_managed()
| * libvorbis: cosmetics: renaming/pretty-printing/comments/unused codeJustin Ruggles2012-02-291-109/+115
| |
| * (e)ac3enc: select a default bit rate based on the channel layoutJustin Ruggles2012-02-295-0/+20
| |
| * ac3enc: choose the closest bit rate to the one requested instead of failingJustin Ruggles2012-02-291-6/+11
| |
| * rpza: error out on buffer overreads.Ronald S. Bultje2012-02-291-0/+4
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
| * qtrle: return error on decode_init() failure.Ronald S. Bultje2012-02-291-1/+1
| | | | | | | | | | Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org
View Lorry Controller Status