generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
37,466 Commits 24 Branches 241 Tags
Commit Graph

13 Commits

Author SHA1 Message Date
Michael Niedermayer
7f5bd6c72b diracdec: Correct the bytestream end pointer. 
This fixes some arith decoder overreads and a potential infinite loop.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 0f13cc732b3752828890b8dff507615cfd454336)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2012-03-16 16:00:07 +01:00
Michael Niedermayer
0be85fd80f diracdec: Check for negative quants which would cause out of array reads. 
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 5cd8afee99c83b62e1474f122d947de7e4ad9ff5)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2012-03-16 15:59:30 +01:00
Michael Niedermayer
9f253ebb41 diracdec: Fix integer overflow leading to out of global array read. 
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 9729f140ae073f1df2041b6c5fd2068592eb9c48)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2012-03-16 15:59:21 +01:00
Michael Niedermayer
ddf0c1d86a diracdec: Check num_refs. 
Fixes: CVE-2011-3950

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2012-01-26 17:05:57 +01:00
Michael Niedermayer
e2291ea153 diracdec: Check dirac_unpack_idwt_params parameters before storing them. 
Fixes CVE-2011-3949

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2012-01-26 17:05:57 +01:00
Paul B Mahol
ba10207bbe Use more designated initializers. 
Also remove some pointless NULL/0 assigments.

C++ code must be left as it is because named struct
initializers are not supported by C++ standard.
 2011-12-30 20:00:53 +01:00
Michael Niedermayer
6718536ba5 diracdec: fix empty data units. 
Fixed Ticket636

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-11-14 18:14:20 +01:00
Jordi Ortiz
fca712df09 Dirac: Specific struct initializers in AVCodec initialization 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-11-05 00:02:11 +01:00
Jordi Ortiz
aae7a5e36d Dirac: Removed goto + some code make up 
(cherry picked from commit 8db434f8a6d210f7fd2f28ba325927d7a5dd04b9)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-11-04 23:59:33 +01:00
Jordi Ortiz
49aa397414 Dirac: More formating 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-10-30 21:50:17 +01:00
Jordi Ortiz
ca239e1c37 Dirac: Doxygen comments and some formatting enhancements 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-10-30 21:50:17 +01:00
Jordi Ortiz
e3cfe54145 Dirac now returns AVFrames instead of DiracFrames 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-10-30 21:50:16 +01:00
multiple authors
5d50fcc549 DIRAC Decoder stable version, MMX support removed. 
Look for MMX_DISABLED to find the disabled functions.

Authors of this code are Marco Gerards <marco@gnu.org> and David Conrad <lessen42@gmail.com>
With changes from Jordi Ortiz <nenjordi@gmail.com>

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
 2011-10-30 21:50:08 +01:00