Michael Niedermayer
1e1015fd22
Version numbers for 0.8.6
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
n0.8.6
2011-11-04 13:37:27 +01:00
Michael Niedermayer
c4a34f4025
snow: emu edge support
...
Fixes Ticket592
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 4416931fc0 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:36:28 +01:00
Justin Ruggles
cba03dc667
imc: validate channel count
...
ask for a sample if not mono
(cherry picked from commit 7b7f47e733 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:34:42 +01:00
Justin Ruggles
5a3f494466
imc: check for ff_fft_init() failure
...
(cherry picked from commit 95fee70d67 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:34:35 +01:00
Justin Ruggles
112431705d
libgsmdec: check output buffer size before decoding
...
(cherry picked from commit b03761b130 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:33:38 +01:00
Michael Niedermayer
864581fea3
configure: fix arch x86_32
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 078811d9e4 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:33:33 +01:00
Tobias Rapp
d8acee792f
mp3enc: avoid truncating id3v1 tags by one byte
...
Avoid writing the trailing null-byte for id3v1 tags if length reaches max length.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 0f39fa0279 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:32:59 +01:00
Michael Niedermayer
0e3dec6b08
asfdec: Check packet_replic_size earlier
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 60fcc19bff )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:32:50 +01:00
Justin Ruggles
711e6c947b
cin audio: validate the channel count
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:32:18 +01:00
Justin Ruggles
8491677ab6
binkaudio: add some buffer overread checks.
...
This stops decoding before overreads instead of after.
(cherry picked from commit 101ef19ef4 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 13:31:15 +01:00
Justin Ruggles
f98bb0d3ec
atrac1: validate number of channels
...
(cherry picked from commit bff5b2c1ca )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:40:42 +01:00
Justin Ruggles
346e089d25
atrac1: check output buffer size before decoding
...
(cherry picked from commit 33684b9c12 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:40:35 +01:00
Ronald S. Bultje
0ac6777a34
vp3: fix oob read for negative tokens and memleaks on error.
...
(cherry picked from commit 8370e426e4 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:37:06 +01:00
Justin Ruggles
ae2d3d6be0
apedec: set s->currentframeblocks after validating nblocks
2011-11-04 03:32:39 +01:00
Justin Ruggles
998fc04bcf
apedec: use unsigned int for 'nblocks' and make sure that it's within int range
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:30:44 +01:00
Justin Ruggles
43fa5bf55e
apedec: check for data buffer realloc failure
...
(cherry picked from commit 11ca8b2d74 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:23:39 +01:00
Justin Ruggles
f19b8d9533
apedec: check for filter buffer allocation failure
...
(cherry picked from commit 7500781313 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:23:34 +01:00
Justin Ruggles
4a66fe2107
mpegaudiodec: check output data size based on avctx->frame_size
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:23:13 +01:00
Michael Niedermayer
edf3c5a3eb
resample: Fix array size
...
Found-by: Jim Radford
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 3e7db0a9ee )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:22:03 +01:00
Michael Niedermayer
a39b5e8b32
resample2: fix potential overflow
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
Michael Niedermayer
6ae93d0304
resample: Fix overflow
...
Found-by: Jim Radford
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
Justin Ruggles
241f15f1c9
tta: check for extradata allocation failure in tta demuxer
...
(cherry picked from commit f540ca22c5 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
Justin Ruggles
2137d99086
vorbisdec: check output buffer size before writing output
...
(cherry picked from commit 60aa1a358d )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
Justin Ruggles
e9de2d98a9
twinvq: check output buffer size before decoding
...
(cherry picked from commit e53eecd0e7 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 03:18:52 +01:00
Alex Converse
93f1159af5
vp6: Fix illegal read.
...
(cherry picked from commit 2a6eb06254 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:54:13 +01:00
Justin Ruggles
b08001e00a
shorten: check output buffer size before decoding
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:30:29 +01:00
Justin Ruggles
e1ea35fb52
shorten: check for realloc failure
...
(cherry picked from commit 9e5e2c2d01 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:24:03 +01:00
Laurent Aimar
cbfd34246c
mpegts: do not return from ff_mpegts_parse_packet() after having seen the first PMT
...
It prevents leaving the AVPacket uninitialized.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit bc38e83793 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:23:56 +01:00
Laurent Aimar
feef77ec3a
mpegts: fix return value when enough ts packets have been parsed or when the first PMT has been seen.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 49ec0c818d )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:23:52 +01:00
Matthew Einhorn
f531193690
Fixes avpicture_layout to not write past buffer end.
...
avpicture_get_size() returns the size of buffer required for avpicture_layout.
For pseudo-paletted formats (gray8...) this size does not include the palette.
However, avpicture_layout doesn't know this and still writes the palette. Consequently,
avpicture_layout writes passed the length of the buffer. This fixes it
by fixing avpicture_layout so that it doesn't write the palette for these formats.
Signed-off-by: Matthew Einhorn <moiein2000@gmail.com >
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit e662b263d9 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:23:47 +01:00
Alex Converse
e86e9f8b7a
avio: Check for invalid buffer length.
...
(cherry picked from commit ab2940691b )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:23:33 +01:00
Ronald S. Bultje
15a7fe106c
pthread: copy coded frame dimensions in update_context_from_thread
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit feadcd1bdc )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:23:28 +01:00
Ronald S. Bultje
d32f509de1
vp8: prevent read from uninitialized memory in decode_mvs
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 0f0b5d6434 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:22:59 +01:00
Ronald S. Bultje
5f5f36b52e
vp8: force reallocation in update_thread_context after frame size change
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 5653579381 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:22:52 +01:00
Ronald S. Bultje
d1166f03be
vp8: fix return value if update_dimensions fails
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit f05c2fb6eb )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:22:45 +01:00
Ronald S. Bultje
d51c7b4cbe
matroskadec: fix out of bounds write
...
Signed-off-by: Janne Grunau <janne-libav@jannau.net >
(cherry picked from commit 723229c11f )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:22:38 +01:00
Alex Converse
e58870a587
mov: 10l: Terminate string with 0 not '0'
...
(cherry picked from commit 7ad06beb2c )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:21:57 +01:00
Alex Converse
5c18bcfd9c
mov: Prevent illegal writes when chapter titles are very short.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:11:18 +01:00
Justin Ruggles
62cf52c860
truespeech: check to make sure channels == 1
...
(cherry picked from commit 3e7a176759 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:09:22 +01:00
Justin Ruggles
7e95a12d51
mlpdec: validate that the reported channel count matches the actual output
...
channel count
(cherry picked from commit caa845851d )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:09:17 +01:00
John Brooks
2c0cddf255
rtpdec: Read the packet length for all RTCP packet types
...
This allows skipping past unsupported RTCP packet types, as
RFC 3550 section 6.1 mandates.
Currently this only has any practical effect if a sender puts
an unrecognized type before RTCP_BYE in a compounded packet, or
(incorrectly) does not put RTCP_SR first.
Signed-off-by: Martin Storsjö <martin@martin.st >
(cherry picked from commit 07b77fe387 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:09:05 +01:00
John Brooks
d398d042c1
rtpdec: Fix the minimum packet length for RTCP SR packets
...
We actually read 20 bytes of these packets.
Signed-off-by: Martin Storsjö <martin@martin.st >
(cherry picked from commit 5d6ecf5345 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:08:54 +01:00
Michael Niedermayer
5ae87280e2
mem: fix memalign hack av_realloc()
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit fc11927890 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:08:24 +01:00
Michael Niedermayer
7d02df7036
arm: fix av_clipl_int32() asm
...
Note, the other arm asm code is likely affected too and should be changed as well.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
(cherry picked from commit 96bc6485bc )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:08:16 +01:00
Mans Rullgard
1c3d46a924
h264: fix HRD parameters parsing
...
The bit_rate_value_minus1 and cpb_size_value_minus1 elements
allow a wider range than get_ue_golomb() supports. This
adds a get_ue_golomb_long() function supporting up to 31
leading zeros, which is the maximum for these syntax
elements, and uses it in decode_hrd_parameters().
Signed-off-by: Mans Rullgard <mans@mansr.com >
(cherry picked from commit fdba370f8a )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:08:09 +01:00
Justin Ruggles
800ab099e3
smacker: validate channels and sample format.
...
(cherry picked from commit ff1f89de2d )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:07:49 +01:00
Justin Ruggles
e6b2255329
smacker: check buffer size before reading output size
...
(cherry picked from commit cf044f8bff )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:07:44 +01:00
Justin Ruggles
7f7b2e89e2
smacker: validate number of channels
...
(cherry picked from commit e190e453bd )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:07:39 +01:00
Mans Rullgard
73f85eae68
sipr: fix get_bits(0) calls
...
Zero-length get_bits() is undefined, must check before calling.
Signed-off-by: Mans Rullgard <mans@mansr.com >
(cherry picked from commit c79d2a20ba )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:02:46 +01:00
Alex Converse
9b6080f685
mxfdec: Fix some buffer overreads caused by the misuse of AVPacket related functions.
...
(cherry picked from commit 0c46e958d1 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at >
2011-11-04 01:02:29 +01:00