Luca Barbato
9761abffb6
wmapro: return early on unsupported condition
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 6652338f43 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/wmaprodec.c
2013-06-30 16:03:27 +02:00
Luca Barbato
fbeae4a951
wmapro: check num_vec_coeffs against the actual available buffer
...
Prevent yet another buffer overwrite.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 3822936252 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-30 16:03:27 +02:00
Luca Barbato
88433979c2
wmapro: make sure there is room to store the current packet
...
Prevent horrid and hard to trace struct overwrite.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit e30b068ef7 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-30 16:03:27 +02:00
Luca Barbato
9d1b173aae
lavc: move put_bits_left in put_bits.h
...
(cherry picked from commit afe03092dd )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-30 16:03:27 +02:00
Luca Barbato
c7934c6c0b
4xm: do not overread the source buffer in decode_p_block
...
Check for out of picture macroblocks before calling mcdc.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 94aefb1932 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-30 16:03:27 +02:00
Luca Barbato
04c29196ad
4xm: check bitstream_size boundary before using it
...
Prevent buffer overread.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 59d7bb99b6 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-30 16:03:27 +02:00
Reinhard Tartler
5c54fc6195
Prepare for 9.8 RELEASE
2013-06-30 16:03:27 +02:00
Reinhard Tartler
5d2e4c918f
update Changelog
2013-06-16 19:32:07 +02:00
Kostya Shishkov
7e326d52a7
smacker: check frame size validity
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
(cherry picked from commit 07423ad7836325e03894f2f87ba46a531a1cc0b3)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:58:29 +02:00
Kostya Shishkov
71b8ef938c
smacker: pad the extradata allocation
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
(cherry picked from commit 4c22baf65363433f8c20efd1022b4ba2d8cf2288)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:58:27 +02:00
Kostya Shishkov
5e6122ddad
smacker: check the return value of smacker_decode_tree
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
(cherry picked from commit a2f9937bb04b23a341b0ec0eb1d923bbeb420277)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:58:26 +02:00
Kostya Shishkov
1a0cdd18b0
smacker: fix an off by one in huff.length computation
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
(cherry picked from commit ee205588b250fe5cae0681be8eba51a5403c3272)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:58:22 +02:00
Luca Barbato
d33b0f7224
4xm: do not overread the prestream buffer
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit be373cb50d )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:54:23 +02:00
Luca Barbato
6ddc1eb037
4xm: validate the buffer size before parsing it
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit de2e5777e2 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:54:15 +02:00
Luca Barbato
ded74ab5d1
4xm: reject frames not compatible with the declared version
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 145023f572 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:54:06 +02:00
Luca Barbato
f82e9deec2
4xm: drop pointless assert
...
Make sure the value of wlog2 is always between 0 and 3.
(cherry picked from commit 1f0c607560 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:53:55 +02:00
Luca Barbato
d0cabcc789
4xm: forward errors from decode_p_block
...
Partially mitigate out of memory writes.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit b8b809908e )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:53:44 +02:00
Luca Barbato
dac0d4f354
4xm: fold last_picture lazy allocation in decode_p_frame
...
(cherry picked from commit 50ec1db62d )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
Conflicts:
libavcodec/4xm.c
2013-06-16 15:53:33 +02:00
Luca Barbato
3f71c0c1b0
4xm: do not overread while parsing header
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 42d73f7f6b )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:53:18 +02:00
Luca Barbato
ea56f6e5a7
4xm: refactor fourxm_read_header
...
Split sound and video tag parsing in separate functions.
(cherry picked from commit e7a44f87d0 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
Conflicts:
libavcodec/4xm.c
2013-06-16 15:53:04 +02:00
Luca Barbato
9ac3c6c2c6
4xm: K&R formatting cosmetics
...
(cherry picked from commit e6496ea7e7 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:15:18 +02:00
Luca Barbato
04c506e912
4xm: use the correct logging context
...
(cherry picked from commit 08859d19b4 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-16 15:15:11 +02:00
Luca Barbato
8eb7c2566c
tiff: do not overread the source buffer
...
At least 2 bytes from the source are read every loop.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 9c22169769 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/tiff.c
2013-06-08 16:31:54 +02:00
Anton Khirnov
042b8c2f06
apetag: use int64_t for filesize
...
CC: libav-stable@libav.org
(cherry picked from commit e816aaacd6 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-06-08 16:31:54 +02:00
Luca Barbato
5fed47b94f
vmd: refactor the inner decode loop
...
Simplify a little, assume empty frames are acceptable and
do not pointlessly reinit the bytestream2 contexts using
possibly wrong size values.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 676da248ca )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
Conflicts:
libavcodec/vmdav.c
2013-06-01 15:28:19 +02:00
Luca Barbato
5a01ab0e62
vmd: use the PALETTE_COUNT constant uniformly
...
While at it drop useless parentheses.
(cherry picked from commit 91a6944e56 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-06-01 05:38:38 +02:00
Luca Barbato
dbaf3f7b0b
vmd: drop incomplete chunks and spurious samples
...
Odd chunk size makes no sense for stereo and incomplete chunks are
not supported.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 701966730c )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:14:01 +02:00
Luca Barbato
5a8dcc993d
vmd: return meaningful errors
...
CC: libav-stable@libav.org
(cherry picked from commit c8f3cb9119 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/vmdav.c
2013-05-31 23:00:31 +02:00
Alexandra Khirnova
4f6fbe47a9
vmdav: convert to bytestream2
...
Signed-off-by: Anton Khirnov <anton@khirnov.net >
(cherry picked from commit 0afcf97e1e )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/vmdav.c
2013-05-31 23:00:31 +02:00
Luca Barbato
7251de3032
wavpack: use bytestream2 in wavpack_decode_block
...
Prevent most out of buffer reads.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 3f0b6d7a62 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/wavpack.c
2013-05-31 23:00:31 +02:00
Luca Barbato
5ba83e9091
wavpack: return meaningful errors
...
And forward those that were already meaningful.
(cherry picked from commit 8c34558131 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/wavpack.c
2013-05-31 23:00:31 +02:00
Luca Barbato
93fbf034c9
wavpack: check packet size early
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit fd06291239 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:31 +02:00
Anton Khirnov
10f77c165c
pixdesc: mark gray8 as pseudopal
...
Many functions treat it as such already.
Fixes Bug 499.
CC:libav-stable@libav.org
(cherry picked from commit f36d7831d9 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:31 +02:00
Luca Barbato
aed12df7fe
mjpegdec: validate parameters in mjpeg_decode_scan_progressive_ac
...
Prevent out of buffer write when decoding broken samples.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit cfbd98abe8 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:31 +02:00
Luca Barbato
7923a25fdd
mjpeg: Validate sampling factors
...
They must be non-zero.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 8aa3500905 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:31 +02:00
Luca Barbato
510a96a211
ljpeg: use the correct number of components in yuv
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit a030279a67 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:31 +02:00
Luca Barbato
c340319559
wavpack: validate samples size parsed in wavpack_decode_block
...
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit ed50673066 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/wavpack.c
2013-05-31 23:00:30 +02:00
Luca Barbato
0af5a774eb
jpegls: check the scan offset
...
Prevent an out of array bound write.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit abad374909 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/jpeglsdec.c
2013-05-31 23:00:30 +02:00
Reinhard Tartler
582aec4989
jpegls: factorize return paths
...
Conflicts:
libavcodec/jpeglsdec.c
(cherry picked from commit 4a4107b489 )
2013-05-31 23:00:30 +02:00
Luca Barbato
9eecf633f7
jpegls: return meaningful errors
...
(cherry picked from commit a5a0ef5e13 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
Conflicts:
libavcodec/jpeglsdec.c
2013-05-31 23:00:30 +02:00
Jindrich Makovicka
7f451cb01f
mpegvideo: allocate sufficiently large scratch buffer for interlaced vid
...
MPV_decode_mb_internal needs 3 * 16 * linesize bytes of scratch buffer
For interlaced content, linesize is multiplied by two after the allocation
of the scratch buffer, and the dest_cr pointer ends past the buffer.
This patch makes ff_mpv_frame_size_alloc allocate a total of
(aligned line_size) * 2 * 16 * 3 bytes, which suffices even for the
interlaced case.
CC:libav-stable@libav.org
Signed-off-by: Jindrich Makovicka <makovick@gmail.com >
Signed-off-by: Anton Khirnov <anton@khirnov.net >
(cherry picked from commit 259af1b923 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:30 +02:00
Luca Barbato
aaeef7fa0d
mjpegdec: properly report unsupported disabled features
...
When JPEG-LS support is disabled the decoder would feed the
data to the JPEG Lossless decode_*_scan function resulting in
faulty decoding.
CC: libav-stable@libav.org
(cherry picked from commit b25e49b187 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-31 23:00:30 +02:00
Reinhard Tartler
2c23237cb4
Prepare for 9.7 Release
2013-05-31 23:00:30 +02:00
Reinhard Tartler
82c3792a30
update Changelog
2013-05-12 08:39:07 +02:00
Michael Smith
1fa37f2bfa
proresdec: support mixed interlaced/non-interlaced content
...
Set interlaced to false if we don't have an interlaced frame
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
(cherry picked from commit 0881cbf314 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-12 08:38:36 +02:00
Reinhard Tartler
d2d38531d6
update Changelog
2013-05-11 12:00:54 +02:00
Anton Khirnov
600bc1deba
af_asyncts: fix offset calculation
...
delta is in samples, not bytes. Also the sample format is not guaranteed
to be planar.
CC:libav-stable@libav.org
(cherry picked from commit 16a4a18db0 )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-11 12:00:54 +02:00
Luca Barbato
77a2f4cbcf
oma: properly forward errors in oma_read_packet
...
Prevent spurios EIO on EOF.
CC:libav-stable@libav.org
(cherry picked from commit db9aee6ccf )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-11 12:00:54 +02:00
Anton Khirnov
7f8b55b560
indeo3: use unaligned reads on reference blocks.
...
They are not guaranteed to be aligned.
Fixes Bug 503.
CC:libav-stable@libav.org
(cherry picked from commit a97d8cc16e )
Signed-off-by: Reinhard Tartler <siretart@tauware.de >
2013-05-11 12:00:54 +02:00
Michael Niedermayer
1ab4578c88
lavc: Fix assignments in if() when calling ff_af_queue_add
...
Signed-off-by: Martin Storsjö <martin@martin.st >
(cherry picked from commit 1d7ffd06e4 )
Signed-off-by: Luca Barbato <lu_zero@gentoo.org >
2013-05-08 19:05:21 +02:00