github-mirrors/FFmpeg
1
0
Fork 0
mirror of https://mirror.skon.top/https://github.com/FFmpeg/FFmpeg synced 2026-04-22 13:50:57 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
ace8a759e67ef7e620ce2c3b32cc413c2001e716
FFmpeg/libavcodec
History
Michael Niedermayer ace8a759e6 avcodec/ffwavesynth: use uint32_t to compute difference, it is enough 
Fixes: signed integer overflow: 6494225984479297536 - -6043795377581187040 cannot be represented in type 'long'
Fixes: 15285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5632780307791872

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit e9dd3c7126)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2019-12-02 19:41:48 +01:00
..
aarch64
Revert "avcodec/aarch64/neon.S: Update neon.s for transpose_4x4H"
2015-12-17 21:50:57 +01:00
alpha
…
arm
avcodec/arm/sbrdsp_neon: Use a free register instead of putting 2 things in one
2018-01-31 22:56:15 +01:00
avr32
…
bfin
…
mips
avcodec/mips: Fix failed case: hevc-conformance-AMP_A_Samsung_* when enable msa
2019-12-02 19:41:47 +01:00
neon
…
ppc
ppc: pixblockdsp: do unaligned block accesses correctly again
2016-11-27 00:46:33 +01:00
sh4
…
sparc
…
x86
avcodec/x86/mpegvideodsp: Fix signedness bug in need_emu
2018-01-31 22:56:14 +01:00
4xm.c
avcodec/4xm: Fix returned error codes
2019-12-02 19:41:47 +01:00
8bps.c
avcodec/8bps: Check side data size before use
2016-11-26 15:12:26 +01:00
8svx.c
…
012v.c
…
a64colors.h
…
a64multienc.c
…
a64tables.h
…
aac_ac3_parser.c
…
aac_ac3_parser.h
…
aac_adtstoasc_bsf.c
…
aac_defines.h
avcodec/aac_defines: Add missing () to AAC_HALF_SUM() macro
2017-06-05 23:16:54 +02:00
aac_parser.c
…
aac_tablegen_decl.h
…
aac_tablegen.c
…
aac_tablegen.h
…
aac.h
…
aacadtsdec.c
…
aacadtsdec.h
…
aaccoder.c
aaccoder: prevent crash of anmr coder
2015-12-17 20:03:02 +01:00
aacdec_fixed.c
avcodec/aacdec_fixed: Handle more extreem cases in noise_scale()
2019-12-02 19:41:48 +01:00
aacdec_template.c
avcodec/aacdec_template: skip apply_tns() if max_sfb is 0 (from previous header decode failure)
2019-12-02 19:41:48 +01:00
aacdec.c
avcodec/aacdec: Fix runtime error: signed integer overflow: 2147483520 + 255 cannot be represented in type 'int'
2017-05-20 03:41:34 +02:00
aacdectab.h
…
aacenc_is.c
…
aacenc_is.h
…
aacenc_pred.c
…
aacenc_pred.h
…
aacenc_quantization.h
…
aacenc_tns.c
…
aacenc_tns.h
…
aacenc_utils.h
…
aacenc.c
avcodec/aacenc: Tighter input checks
2016-08-23 12:36:25 +02:00
aacenc.h
…
aacenctab.c
…
aacenctab.h
…
aacps_fixed_tablegen.c
…
aacps_fixed_tablegen.h
…
aacps_fixed.c
…
aacps_float.c
…
aacps_tablegen_template.c
…
aacps_tablegen.c
…
aacps_tablegen.h
…
aacps.c
avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()
2017-07-26 00:14:04 +02:00
aacps.h
…
aacpsdata.c
…
aacpsdsp_fixed.c
…
aacpsdsp_float.c
…
aacpsdsp_template.c
avcodec/aacpsdsp_template: Fix integer overflow in ps_hybrid_analysis_c()
2019-12-02 19:41:48 +01:00
aacpsdsp.h
…
aacpsy.c
…
aacsbr_fixed_tablegen.c
…
aacsbr_fixed_tablegen.h
…
aacsbr_fixed.c
avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
2018-07-10 01:52:55 +02:00
aacsbr_tablegen_common.h
…
aacsbr_tablegen.c
…
aacsbr_tablegen.h
…
aacsbr_template.c
avcodec/aacsbr_template: Do not change bs_num_env before its checked
2017-05-20 03:41:33 +02:00
aacsbr.c
…
aacsbr.h
…
aacsbrdata.h
…
aactab.c
…
aactab.h
…
aandcttab.c
…
aandcttab.h
…
aasc.c
…
ac3_parser.c
…
ac3_parser.h
…
ac3.c
…
ac3.h
…
ac3dec_data.c
…
ac3dec_data.h
…
ac3dec_fixed.c
avcodec/ac3dec_fixed: Fix integer overflow in scale_coefs()
2018-01-31 22:56:15 +01:00
ac3dec_float.c
…
ac3dec.c
avcodec/ac3dec: Fix: runtime error: index -1 out of bounds for type 'INTFLOAT [2]'
2017-05-20 03:41:33 +02:00
ac3dec.h
avcodec/ac3dec: Keep track of band structure
2017-05-20 03:41:33 +02:00
ac3dsp.c
…
ac3dsp.h
…
ac3enc_fixed.c
…
ac3enc_float.c
…
ac3enc_opts_template.c
…
ac3enc_template.c
…
ac3enc.c
…
ac3enc.h
…
ac3tab.c
…
ac3tab.h
…
acelp_filters.c
…
acelp_filters.h
…
acelp_pitch_delay.c
avcodec/acelp_pitch_delay: Fix runtime error: value 4.83233e+39 is outside the range of representable values of type 'float'
2017-06-05 23:16:54 +02:00
acelp_pitch_delay.h
…
acelp_vectors.c
…
acelp_vectors.h
…
adpcm_data.c
…
adpcm_data.h
…
adpcm.c
…
adpcm.h
…
adpcmenc.c
…
adx_parser.c
…
adx.c
…
adx.h
…
adxdec.c
avcodec/adxdec: Fix runtime error: left shift of negative value -1
2017-05-20 03:41:33 +02:00
adxenc.c
…
aic.c
avcodec/aic: Check remaining bits in aic_decode_coeffs()
2019-12-02 19:41:47 +01:00
alac_data.c
…
alac_data.h
…
alac.c
avcodec/alac: Check lpc_quant
2019-12-02 19:41:48 +01:00
alacenc.c
…
aliaspixdec.c
…
aliaspixenc.c
…
allcodecs.c
…
alsdec.c
avcodec/alsdec: Add FF_CODEC_CAP_INIT_CLEANUP
2019-12-02 19:41:48 +01:00
amr.h
…
amrnbdata.h
…
amrnbdec.c
…
amrwbdata.h
…
amrwbdec.c
avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
2018-07-10 01:52:56 +02:00
anm.c
…
ansi.c
avcodec/ansi: Fix frame memleak
2017-06-05 23:16:54 +02:00
apedec.c
avcodec/apedec: Add k < 24 check to the only k++ case which lacks such a check
2019-12-02 19:41:48 +01:00
apng.h
…
ass_split.c
avcodec/ass_split: Fix null pointer dereference in ff_ass_style_get()
2016-01-28 15:53:54 +01:00
ass_split.h
…
ass.c
…
ass.h
…
assdec.c
…
assenc.c
…
asv.c
…
asv.h
…
asvdec.c
…
asvenc.c
lavc: fix typos
2016-11-26 15:12:25 +01:00
atrac1.c
…
atrac1data.h
…
atrac3.c
…
atrac3data.h
…
atrac3plus_data.h
…
atrac3plus.c
…
atrac3plus.h
…
atrac3plusdec.c
…
atrac3plusdsp.c
…
atrac.c
…
atrac.h
…
audio_frame_queue.c
…
audio_frame_queue.h
…
audioconvert.c
…
audioconvert.h
…
audiodsp.c
…
audiodsp.h
…
aura.c
…
avcodec.h
avcodec/avcodec: Limit the number of side data elements per packet
2017-05-20 03:41:33 +02:00
avcodecres.rc
…
avdct.c
…
avdct.h
…
avfft.c
…
avfft.h
…
avpacket.c
avcodec/avcodec: Limit the number of side data elements per packet
2017-05-20 03:41:33 +02:00
avpicture.c
…
avrndec.c
…
avs.c
…
avuidec.c
…
avuienc.c
…
bethsoftvideo.c
avcodec/bethsoftvideo: Check block_type
2019-12-02 19:41:47 +01:00
bethsoftvideo.h
…
bfi.c
…
bgmc.c
…
bgmc.h
…
bink.c
avcodec/bink: Reorder operations in init to avoid memleak on error
2019-12-02 19:41:48 +01:00
binkaudio.c
…
binkdata.h
…
binkdsp.c
avcodec/binkdsp: Fix integer overflows in idct
2019-12-02 19:41:48 +01:00
binkdsp.h
…
bintext.c
avcodec/bintext: Check font height
2019-12-02 19:41:48 +01:00
bintext.h
…
bit_depth_template.c
…
bitstream_filter.c
…
bitstream.c
avcodec/bitstream: Check for more conflicting codes in build_table()
2019-12-02 19:41:48 +01:00
blockdsp.c
…
blockdsp.h
…
bmp_parser.c
avcodec/bmp_parser: Check fsize
2016-08-15 18:54:34 +02:00
bmp.c
lavc/bmp: Avoid a heap buffer overwrite for 1bpp input.
2019-12-02 19:41:47 +01:00
bmp.h
…
bmpenc.c
…
bmvaudio.c
…
bmvvideo.c
avcodec/bmvvideo: Fix runtime error: left shift of 137 by 24 places cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
brenderpix.c
…
bswapdsp.c
…
bswapdsp.h
…
bytestream.h
…
c93.c
…
cabac_functions.h
avcodec/cabac: Check initial cabac decoder state
2015-11-27 14:07:03 +01:00
cabac_tablegen.c
…
cabac_tablegen.h
…
cabac.c
avcodec/cabac: Check initial cabac decoder state
2015-11-27 14:07:03 +01:00
cabac.h
avcodec/cabac: Check initial cabac decoder state
2015-11-27 14:07:03 +01:00
canopus.c
…
canopus.h
…
cavs_parser.c
…
cavs.c
avcodec/cavs: Fix runtime error: signed integer overflow: -12648062 * 256 cannot be represented in type 'int'
2017-06-05 23:16:54 +02:00
cavs.h
…
cavsdata.c
…
cavsdec.c
avcodec/cavsdec: Propagate error codes inside decode_mb_i()
2018-11-04 20:26:04 +01:00
cavsdsp.c
avcodec/cavsdsp: use av_clip_uint8() for idct
2016-09-23 18:19:56 +02:00
cavsdsp.h
…
cbrt_fixed_tablegen.c
…
cbrt_tablegen_template.c
…
cbrt_tablegen.c
…
cbrt_tablegen.h
…
ccaption_dec.c
avcodec/ccaption_dec: Add a blank like at the end to avoid rollup reading from outside
2019-12-02 19:41:48 +01:00
cdgraphics.c
avcodec/cdgraphics: Use ff_set_dimensions()
2019-12-02 19:41:47 +01:00
cdxl.c
avcodec/cdxl: Check format for BGR24
2017-05-20 03:41:33 +02:00
celp_filters.c
…
celp_filters.h
…
celp_math.c
…
celp_math.h
…
cga_data.c
…
cga_data.h
…
chomp_bsf.c
…
cinepak.c
avcodec/cinepak: Skip empty frames
2018-07-10 01:52:55 +02:00
cinepakenc.c
…
cljrdec.c
…
cljrenc.c
…
cllc.c
avcodec/cllc: Check prefix
2017-05-20 03:41:34 +02:00
cngdec.c
avcodec/cngdec: Fix integer clipping
2018-01-31 22:56:14 +01:00
cngenc.c
…
codec_desc.c
…
cook_parser.c
…
cook.c
…
cookdata.h
…
copy_block.h
…
cos_tablegen.c
…
cpia.c
avcodec/cpia: Check input size also against linesizes and EOL
2019-12-02 19:41:48 +01:00
crystalhd.c
…
cscd.c
avcodec/cscd: Check output buffer size for lzo.
2018-07-10 01:52:56 +02:00
cyuv.c
…
d3d11va.h
…
dca_exss.c
…
dca_parser.c
…
dca_syncwords.h
…
dca_xll.c
…
dca.c
dca: fix misaligned access in avpriv_dca_convert_bitstream
2016-01-27 23:45:44 +01:00
dca.h
…
dcadata.c
…
dcadata.h
…
dcadec.c
…
dcadsp.c
…
dcadsp.h
…
dcaenc.c
…
dcaenc.h
…
dcahuff.h
…
dct32_fixed.c
…
dct32_float.c
…
dct32_template.c
…
dct32.h
…
dct-test.c
…
dct.c
…
dct.h
…
dctref.c
…
dctref.h
…
dds.c
avcodec/dds: Fix runtime error: left shift of 210 by 24 places cannot be represented in type 'int'
2017-05-20 03:41:34 +02:00
dfa.c
avcodec/dfa: Check the chunk header is not truncated
2019-12-02 19:41:47 +01:00
dirac_arith.c
…
dirac_arith.h
…
dirac_dwt.c
…
dirac_dwt.h
avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
2018-07-10 01:52:56 +02:00
dirac_parser.c
avcodec/dirac_parser: Check that there is a previous PU before accessing it
2015-12-06 02:51:27 +01:00
dirac.c
…
dirac.h
…
diracdec.c
avcodec/diracdec: Fix integer overflow in global_mv()
2019-12-02 19:41:48 +01:00
diracdsp.c
…
diracdsp.h
…
dnxhd_parser.c
…
dnxhddata.c
…
dnxhddata.h
…
dnxhddec.c
…
dnxhdenc.c
…
dnxhdenc.h
…
dpcm.c
…
dpx_parser.c
…
dpx.c
avcodec/dpx: Move need_align to act per line
2015-11-26 16:05:41 +01:00
dpxenc.c
…
dsd_tablegen.c
…
dsd_tablegen.h
…
dsddec.c
…
dsicinaudio.c
…
dsicinvideo.c
avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
2018-07-10 01:52:55 +02:00
dss_sp.c
avcodec/dss_sp: Fix runtime error: signed integer overflow: 2147481189 + 4096 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
dump_extradata_bsf.c
…
dv_profile_internal.h
…
dv_profile.c
…
dv_profile.h
…
dv_tablegen.c
…
dv_tablegen.h
…
dv.c
…
dv.h
…
dvbsub_parser.c
…
dvbsub.c
…
dvbsubdec.c
avcodec/dvbsubdec: Check object position
2019-12-02 19:41:47 +01:00
dvd_nav_parser.c
…
dvdata.c
…
dvdata.h
…
dvdec.c
avcodec/dvdec: Fix "left shift of negative value -254"
2016-01-15 12:30:40 +01:00
dvdsub_parser.c
avcodec/dvdsub_parser: Allocate input padding
2018-07-15 20:08:57 +02:00
dvdsubdec.c
avcodec/dvdsubdec: Sanity check len in decode_rle()
2018-10-03 12:37:52 +02:00
dvdsubenc.c
…
dvenc.c
…
dxa.c
…
dxtory.c
avcodec/dxtory: Fix input size check in dxtory_decode_v1_410()
2015-11-26 16:05:41 +01:00
dxva2_h264.c
…
dxva2_hevc.c
…
dxva2_internal.h
…
dxva2_mpeg2.c
…
dxva2_vc1.c
…
dxva2.c
…
dxva2.h
…
eac3_data.c
…
eac3_data.h
…
eac3dec.c
avcodec/eac3dec: Fix runtime error: left shift of negative value -3
2017-05-20 03:41:33 +02:00
eac3enc.c
…
eac3enc.h
…
eacmv.c
…
eaidct.c
…
eaidct.h
…
eamad.c
avcodec/eamad: Fix runtime error: signed integer overflow: 49674 * 49858 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
eatgq.c
…
eatgv.c
…
eatqi.c
avcodec/eatqi: Fix runtime error: signed integer overflow: 4466147 * 1075 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
elbg.c
…
elbg.h
…
elsdec.c
avcodec/elsdec: Fix memleaks
2018-07-10 01:52:55 +02:00
elsdec.h
…
error_resilience.c
avcodec/error_resilience: Use a symmetric check for skipping MV estimation
2019-12-02 19:41:47 +01:00
error_resilience.h
…
escape124.c
avcodec/escape124: Fix spelling errors in comment
2018-07-10 01:52:56 +02:00
escape130.c
…
evrcdata.h
…
evrcdec.c
…
exif.c
…
exif.h
…
exr.c
avcodec/exr: Check remaining bits in last get code loop
2018-02-17 16:11:57 +01:00
faandct.c
…
faandct.h
…
faanidct.c
…
faanidct.h
…
faxcompr.c
…
faxcompr.h
…
fdctdsp.c
…
fdctdsp.h
…
fft_fixed_32.c
…
fft_fixed.c
…
fft_float.c
…
fft_init_table.c
…
fft_table.h
…
fft_template.c
…
fft-fixed32-test.c
…
fft-fixed-test.c
…
fft-internal.h
…
fft-test.c
…
fft.h
…
ffv1.c
…
ffv1.h
…
ffv1dec.c
avcodec/ffv1dec: Fix out of array read in slice counting
2018-01-31 22:56:14 +01:00
ffv1enc.c
avcodec/ffv1enc: Check that the crc + version combination is supported
2018-07-10 01:52:55 +02:00
ffwavesynth.c
avcodec/ffwavesynth: use uint32_t to compute difference, it is enough
2019-12-02 19:41:48 +01:00
fic.c
avcodec/fic: Check that there is input left in fic_decode_block()
2019-12-02 19:41:47 +01:00
file_open.c
…
flac_parser.c
avcodec/flac_parser: Fix infinite loop
2018-07-10 01:52:56 +02:00
flac.c
…
flac.h
…
flacdata.c
…
flacdata.h
…
flacdec.c
avcodec/flacdec: Fix overflow in multiplication in decode_subframe_fixed()
2018-01-31 22:56:15 +01:00
flacdsp_lpc_template.c
…
flacdsp_template.c
avcodec/flacdsp_template: Fix undefined shift in flac_decorrelate_indep_c
2016-12-03 17:32:33 +01:00
flacdsp.c
…
flacdsp.h
…
flacenc.c
avcodec/flacenc: fix calculation of bits required in case of custom sample rate
2016-01-28 15:53:54 +01:00
flashsv2enc.c
…
flashsv.c
avcodec/flashsv: Check size before updating it
2015-11-26 16:05:41 +01:00
flashsvenc.c
…
flicvideo.c
avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'
2017-06-11 03:15:13 +02:00
flv.h
…
flvdec.c
…
flvenc.c
…
fmtconvert.c
…
fmtconvert.h
…
frame_thread_encoder.c
…
frame_thread_encoder.h
…
fraps.c
…
frwu.c
…
g2meet.c
avcodec/g2meet: ask for sample with overflowing RGB
2018-07-10 01:52:56 +02:00
g722.c
avcodec/g722: Fix multiple runtime error: left shift of negative value -1
2017-05-20 03:41:33 +02:00
g722.h
…
g722dec.c
…
g722dsp.c
…
g722dsp.h
…
g722enc.c
…
g723_1_data.h
…
g723_1.c
…
g726.c
avcodec/g726: Fix runtime error: left shift of negative value -2
2017-05-20 03:41:33 +02:00
g729_parser.c
…
g729.h
…
g729data.h
…
g729dec.c
…
g729postfilter.c
…
g729postfilter.h
…
get_bits.h
avcodec/get_bits: Make sure the input bitstream with padding can be addressed
2018-07-10 01:18:52 +02:00
gif.c
avcodec/gif: Fix lzw buffer size
2016-01-28 15:53:53 +01:00
gif.h
…
gifdec.c
…
golomb-test.c
…
golomb.c
…
golomb.h
golomb: always check for invalid UE golomb codes in get_ue_golomb
2015-12-17 20:03:56 +01:00
gsm_parser.c
…
gsm.h
…
gsmdec_data.c
…
gsmdec_data.h
…
gsmdec_template.c
…
gsmdec.c
…
h261_parser.c
…
h261.c
…
h261.h
…
h261data.c
…
h261dec.c
…
h261enc.c
…
h263_parser.c
…
h263_parser.h
…
h263.c
…
h263.h
…
h263data.c
…
h263data.h
…
h263dec.c
avcodec/h263dec: Check slice_ret in mspeg4 slice loop
2018-07-10 01:52:55 +02:00
h263dsp.c
…
h263dsp.h
…
h264_cabac.c
avcodec/h264_cabac: Tighten allowed coeff_abs range
2018-02-15 14:09:54 +01:00
h264_cavlc.c
avcodec/h264_cavlc: Check mb_skip_run
2018-10-19 00:18:01 +02:00
h264_direct.c
avcodec/h264_direct: Fix runtime error: left shift of negative value -14
2017-05-20 03:41:33 +02:00
h264_loopfilter.c
…
h264_mb_template.c
…
h264_mb.c
avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264
2017-06-20 03:05:01 +02:00
h264_mc_template.c
avcodec/h264_mc_template: Only prefetch motion if the list is used.
2018-07-10 01:52:56 +02:00
h264_mp4toannexb_bsf.c
…
h264_mvpred.h
avcodec/h264_mvpred: Fix runtime error: left shift of negative value -1
2017-05-20 03:41:33 +02:00
h264_parser.c
…
h264_picture.c
avcodec/h264: Execute error concealment before marking the frame as done.
2016-02-19 02:07:46 +01:00
h264_ps.c
…
h264_refs.c
avcodec/h264_refs: Document last if() in ff_h264_execute_ref_pic_marking()
2018-09-03 00:09:11 +02:00
h264_sei.c
…
h264_slice.c
avcodec/h264_slice: Do not attempt to render into frames already output
2018-01-31 22:56:15 +01:00
h264.c
avcodec/h264_slice: Clear ref_counts on redundant slices
2017-02-08 21:17:51 +01:00
h264.h
avcodec/h264dec: Fix potential array overread
2018-01-31 22:56:14 +01:00
h264addpx_template.c
avcodec/h264addpx_template: Fixes integer overflows
2018-01-31 22:56:15 +01:00
h264chroma_template.c
…
h264chroma.c
…
h264chroma.h
…
h264data.h
…
h264dsp_template.c
…
h264dsp.c
…
h264dsp.h
…
h264idct_template.c
avcodec/h264idct_template: Fix integer overflows in ff_h264_idct8_add()
2018-01-31 22:56:14 +01:00
h264idct.c
…
h264idct.h
…
h264pred_template.c
…
h264pred.c
…
h264pred.h
…
h264qpel_template.c
…
h264qpel.c
…
h264qpel.h
…
hap.c
…
hap.h
…
hapdec.c
…
hapenc.c
…
hevc_cabac.c
avcodec/hevc_cabac: Check prefix so as to avoid invalid shifts in coeff_abs_level_remaining_decode()
2018-01-31 23:47:15 +01:00
hevc_data.c
…
hevc_filter.c
avcodec/hevc_filter: Fix invalid shift
2017-06-22 03:08:46 +02:00
hevc_mp4toannexb_bsf.c
…
hevc_mvs.c
…
hevc_parse.c
lavc/hevc: Allow arbitrary garbage in bytestream as long as at least one NAL unit is found.
2016-04-27 04:40:11 +02:00
hevc_parser.c
…
hevc_ps_enc.c
…
hevc_ps.c
avcodec/hevc_ps: Check log2_sao_offset_scale_*
2018-01-31 23:47:16 +01:00
hevc_refs.c
avcodec/hevc_refs: Check nb_refs in add_candidate_ref()
2017-06-16 01:07:19 +02:00
hevc_sei.c
avcodec/hevc_sei: Fix integer overflows in decode_nal_sei_message()
2018-01-31 22:56:14 +01:00
hevc.c
avcodec/hevcdec: Avoid only partly skiping duplicate first slices
2019-12-02 19:41:47 +01:00
hevc.h
avcodec/hevc_ps: extract one SPS fields required for hvcC construction
2018-01-31 23:47:15 +01:00
hevcdsp_template.c
avcodec/hevcdsp_template: Fix Invalid shifts in put_hevc_qpel_bi_w_h() and put_hevc_qpel_bi_w_w()
2018-01-31 22:56:15 +01:00
hevcdsp.c
…
hevcdsp.h
…
hevcpred_template.c
avcodec/hevcpred_template: Fix left shift of negative value
2017-06-17 23:34:20 +02:00
hevcpred.c
…
hevcpred.h
…
hnm4video.c
…
hpel_template.c
…
hpeldsp.c
…
hpeldsp.h
…
hq_hqa.c
avcodec/hq_hqa: Check available space before reading slice offsets
2019-12-02 19:41:48 +01:00
hq_hqa.h
…
hq_hqadata.c
…
hq_hqadsp.c
…
hq_hqadsp.h
…
hqx.c
…
hqx.h
…
hqxdsp.c
avcodec/hqxdsp: Fix runtime error: signed integer overflow: -196264 * 11585 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
hqxdsp.h
…
hqxvlc.c
…
huffman.c
…
huffman.h
…
huffyuv.c
…
huffyuv.h
…
huffyuvdec.c
avcodec/huffyuvdec: Check input buffer size
2018-02-12 03:02:29 +01:00
huffyuvdsp.c
…
huffyuvdsp.h
…
huffyuvenc.c
…
huffyuvencdsp.c
…
huffyuvencdsp.h
…
idcinvideo.c
avcodec/idcinvideo: Check side data size before use
2016-11-26 15:12:26 +01:00
idctdsp.c
…
idctdsp.h
…
iff.c
avcodec/iff: finetune the palette size check in the mask case
2019-12-02 19:41:48 +01:00
iirfilter.c
…
iirfilter.h
…
imc.c
…
imcdata.h
…
imdct15.c
…
imdct15.h
…
imgconvert.c
avcodec/imgconvert: fix possible null pointer dereference
2018-07-15 19:25:36 +02:00
imgconvert.h
…
imx_dump_header_bsf.c
…
indeo2.c
avcodec/indeo2: Check for invalid VLCs
2017-05-20 03:41:33 +02:00
indeo2data.h
indeo2: Fix banding artefacts
2016-04-27 04:40:11 +02:00
indeo3.c
…
indeo3data.h
…
indeo4.c
avcodec/indeo4: Check for end of bitstream in decode_mb_info()
2018-07-10 01:52:56 +02:00
indeo4data.h
…
indeo5.c
avcodec/indeo5: Do not leave frame_type set to an invalid value
2018-01-31 23:47:16 +01:00
indeo5data.h
…
intelh263dec.c
…
internal.h
…
interplayvideo.c
avcodec/interplayvideo: Move parameter change check up
2017-02-08 21:17:51 +01:00
intrax8.c
…
intrax8.h
…
intrax8dsp.c
…
intrax8dsp.h
…
intrax8huf.h
…
ituh263dec.c
avcodec/ituh263dec: Fix runtime error: left shift of negative value -22
2017-05-20 03:41:33 +02:00
ituh263enc.c
avcodec/motion_est: Fix mv_penalty table size
2016-01-15 12:30:40 +01:00
ivi_dsp.c
avcodec/ivi_dsp: Fix runtime error: left shift of negative value -2
2017-06-05 23:16:54 +02:00
ivi_dsp.h
…
ivi.c
avcodec/ivi: Move buffer/block end check to caller of ivi_dc_transform()
2019-12-02 19:41:48 +01:00
ivi.h
…
j2kenc.c
avcodec/j2kenc: Fix out of array access in encode_cblk()
2018-01-31 22:56:14 +01:00
jacosub.h
…
jacosubdec.c
…
jfdctfst.c
…
jfdctint_template.c
…
jfdctint.c
…
jpeg2000.c
avcodec/jpeg2000: Check that codsty->log2_prec_widths/heights has been initialized
2018-01-31 22:56:14 +01:00
jpeg2000.h
avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()
2017-06-16 01:43:39 +02:00
jpeg2000dec.c
avcodec/jpeg2000dec: Fix off by 1 error in JPEG2000_PGOD_CPRL handling
2018-10-23 00:54:29 +02:00
jpeg2000dsp.c
avcodec/jpeg2000dsp: Fix integer overflows in ict_int()
2018-01-31 22:56:15 +01:00
jpeg2000dsp.h
…
jpeg2000dwt.c
avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
2019-12-02 19:41:47 +01:00
jpeg2000dwt.h
…
jpegls.c
…
jpegls.h
…
jpeglsdec.c
avcodec/jpeglsdec: Check for end of bitstream in ls_decode_line()
2018-01-31 22:56:14 +01:00
jpeglsdec.h
…
jpeglsenc.c
…
jpegtables.c
…
jpegtables.h
…
jrevdct.c
…
jvdec.c
avcodec/jvdec: Use ff_get_buffer() when the content is not reused
2019-12-02 19:41:48 +01:00
kbdwin.c
…
kbdwin.h
…
kgv1dec.c
avcodec/kgv1dec: Check that there is enough input for maximum RLE compression
2018-01-31 22:56:14 +01:00
kmvc.c
avcodec/kmvc: Check side data size before use
2016-11-26 15:12:26 +01:00
lagarith.c
avcodec/lagarith: Check scale_factor
2017-05-20 03:41:33 +02:00
lagarithrac.c
…
lagarithrac.h
…
latm_parser.c
…
lcl.h
…
lcldec.c
…
lclenc.c
…
libaacplus.c
…
libavcodec.v
…
libcelt_dec.c
…
libdcadec.c
…
libfaac.c
…
libfdk-aacdec.c
avcodec/libfdk-aacdec: Correct buffer_size parameter
2017-06-05 23:16:54 +02:00
libfdk-aacenc.c
…
libgsmdec.c
…
libgsmenc.c
…
libilbc.c
…
libkvazaar.c
…
libmp3lame.c
…
libopencore-amr.c
…
libopenh264enc.c
…
libopenjpegdec.c
…
libopenjpegenc.c
…
libopus.c
…
libopus.h
…
libopusdec.c
lavc/libopusdec: Allow avcodec_open2 to call .close
2018-07-10 01:52:55 +02:00
libopusenc.c
…
libschroedinger.c
…
libschroedinger.h
…
libschroedingerdec.c
libschroedingerdec: fix leaking of framewithpts
2016-11-27 00:46:35 +01:00
libschroedingerenc.c
…
libshine.c
…
libspeexdec.c
…
libspeexenc.c
…
libstagefright.cpp
…
libtheoraenc.c
…
libtwolame.c
…
libutvideo.h
…
libutvideodec.cpp
avcodec/libutvideodec: copy frame so it has reference counters when refcounted_frames is set
2016-04-27 04:40:11 +02:00
libutvideoenc.cpp
…
libvo-aacenc.c
…
libvo-amrwbenc.c
…
libvorbisdec.c
avcodec/libvorbisdec: Check extradata size
2019-12-02 19:41:48 +01:00
libvorbisenc.c
…
libvpx.c
…
libvpx.h
…
libvpxdec.c
…
libvpxenc.c
libvpxenc: remove some unused ctrl id mappings
2015-12-06 02:51:28 +01:00
libwavpackenc.c
…
libwebpenc_animencoder.c
libwebpenc_animencoder: add missing braces to struct initialization
2018-07-10 10:47:30 +02:00
libwebpenc_common.c
…
libwebpenc_common.h
…
libwebpenc.c
…
libx264.c
x264: Support version 153
2018-01-31 22:09:44 -03:00
libx265.c
…
libxavs.c
…
libxvid_rc.c
…
libxvid.c
…
libxvid.h
…
libzvbi-teletextdec.c
…
ljpegenc.c
…
loco.c
avcodec/loco: Limit lossy parameter so it is sane and does not overflow
2019-12-02 19:41:48 +01:00
log2_tab.c
…
lossless_audiodsp.c
…
lossless_audiodsp.h
…
lossless_videodsp.c
…
lossless_videodsp.h
…
lpc.c
…
lpc.h
…
lsp.c
…
lsp.h
…
lzw.c
…
lzw.h
…
lzwenc.c
…
mace.c
…
Makefile
…
mathops.c
…
mathops.h
…
mathtables.c
…
mdct_fixed_32.c
…
mdct_fixed.c
avcodec/mdct_*: Fix integer overflow in addition in RESCALE()
2018-01-31 22:56:14 +01:00
mdct_float.c
…
mdct_template.c
avcodec/mdct_*: Fix integer overflow in addition in RESCALE()
2018-01-31 22:56:14 +01:00
mdec.c
avcodec/mdec: Fix signed integer overflow: 28835400 * 83 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
me_cmp.c
avcodec/me_cmp: Fix crashes on ARM due to misalignment
2017-08-21 23:27:35 +02:00
me_cmp.h
…
metasound_data.c
…
metasound_data.h
…
metasound.c
…
microdvddec.c
…
mimic.c
avcodec/mimic: Use ff_set_dimensions() to set the dimensions
2017-05-20 03:41:34 +02:00
mjpeg2jpeg_bsf.c
…
mjpeg_parser.c
…
mjpeg.h
…
mjpega_dump_header_bsf.c
…
mjpegbdec.c
avcodec/mjpegbdec: Fix some misplaced {} and spaces
2019-12-02 19:41:47 +01:00
mjpegdec.c
avcodec/mjpegdec: Check for non ls PAL8
2019-12-02 19:41:48 +01:00
mjpegdec.h
avcodec/mjpegdec: Check input buffer size.
2018-07-10 01:52:55 +02:00
mjpegenc_common.c
avcodec/mjpegenc_common: Store approximate aspect if exact cannot be stored
2016-04-27 04:40:11 +02:00
mjpegenc_common.h
…
mjpegenc.c
…
mjpegenc.h
…
mlp_parser.c
…
mlp_parser.h
…
mlp.c
…
mlp.h
…
mlpdec.c
avcodec/mlpdec: Insuffient typo
2019-12-02 19:41:47 +01:00
mlpdsp.c
avcodec/mlpdsp: Fix signed integer overflow, 2nd try
2018-01-31 22:56:14 +01:00
mlpdsp.h
…
mmaldec.c
…
mmvideo.c
…
motion_est_template.c
…
motion_est.c
avcodec/motion_est: Fix mv_penalty table size
2016-01-15 12:30:40 +01:00
motion_est.h
avcodec/motion_est: Attempt to fix "short data segment overflowed" on IA64
2016-04-29 13:04:17 +02:00
motion-test.c
…
motionpixels_tablegen.c
…
motionpixels_tablegen.h
…
motionpixels.c
avcodec/motionpixels: Check for vlc error in mp_get_vlc()
2019-12-02 19:41:48 +01:00
movsub_bsf.c
…
movtextdec.c
avcodec/movtextdec: Check style_start/end
2018-07-10 01:52:55 +02:00
movtextenc.c
…
mp3_header_decompress_bsf.c
…
mpc7.c
…
mpc7data.h
…
mpc8.c
avcodec/mpc8: Correct end truncation
2016-08-15 18:54:34 +02:00
mpc8data.h
…
mpc8huff.h
…
mpc.c
…
mpc.h
…
mpcdata.h
…
mpeg4_unpack_bframes_bsf.c
…
mpeg4audio.c
…
mpeg4audio.h
…
mpeg4data.h
…
mpeg4video_parser.c
…
mpeg4video_parser.h
…
mpeg4video.c
…
mpeg4video.h
avcodec/mpeg4video: Check time_incr
2016-01-15 12:30:40 +01:00
mpeg4videodec.c
avcodec/mpeg4videodec: Fix typo in sprite delta check
2018-10-23 00:53:45 +02:00
mpeg4videoenc.c
avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
2018-07-10 01:52:56 +02:00
mpeg12.c
…
mpeg12.h
…
mpeg12data.c
…
mpeg12data.h
…
mpeg12dec.c
avcodec/mpeg12dec: Fixes runtime error: division by zero
2017-05-20 03:41:33 +02:00
mpeg12enc.c
avcodec/mpeg12enc: Move high resolution thread check to before initializing threads
2016-01-28 15:53:54 +01:00
mpeg12vlc.h
…
mpeg_er.c
avcodec/mpeg_er: Clear mcsel in mpeg_er_decode_mb()
2018-01-31 22:56:14 +01:00
mpeg_er.h
…
mpegaudio_parser.c
avcodec/mpegaudio_parser: Consume more than 0 bytes in case of the unsupported mp3adu case
2018-11-04 20:24:22 +01:00
mpegaudio_tablegen.c
…
mpegaudio_tablegen.h
…
mpegaudio.c
…
mpegaudio.h
…
mpegaudiodata.c
…
mpegaudiodata.h
…
mpegaudiodec_fixed.c
…
mpegaudiodec_float.c
…
mpegaudiodec_template.c
avcodec/mpegaudiodec_template: Make l3_unscale() work with e=0
2017-05-20 03:41:33 +02:00
mpegaudiodecheader.c
…
mpegaudiodecheader.h
…
mpegaudiodectab.h
…
mpegaudiodsp_data.c
…
mpegaudiodsp_fixed.c
…
mpegaudiodsp_float.c
…
mpegaudiodsp_template.c
…
mpegaudiodsp.c
…
mpegaudiodsp.h
…
mpegaudioenc_fixed.c
…
mpegaudioenc_float.c
…
mpegaudioenc_template.c
…
mpegaudiotab.h
…
mpegpicture.c
…
mpegpicture.h
…
mpegutils.c
…
mpegutils.h
…
mpegvideo_enc.c
avcodec/mpegvideo_enc: Clear mmx state in ff_mpv_reallocate_putbitbuffer()
2016-11-26 15:12:25 +01:00
mpegvideo_motion.c
avcodec/mpeg4video: Fix runtime error: left shift of negative value
2017-05-20 03:41:33 +02:00
mpegvideo_parser.c
…
mpegvideo_xvmc.c
…
mpegvideo.c
avcodec/mpegvideo: Do not clear the parse context during init
2016-08-15 18:54:34 +02:00
mpegvideo.h
…
mpegvideodata.c
…
mpegvideodata.h
…
mpegvideodsp.c
…
mpegvideodsp.h
…
mpegvideoencdsp.c
…
mpegvideoencdsp.h
…
mpl2dec.c
…
mqc.c
…
mqc.h
…
mqcdec.c
…
mqcenc.c
…
msgsmdec.c
…
msgsmdec.h
…
msmpeg4.c
…
msmpeg4.h
…
msmpeg4data.c
…
msmpeg4data.h
…
msmpeg4dec.c
avcodec/msmpeg4dec: Skip frame if its smaller than 1/8 of the minimal size
2019-12-02 15:45:24 +01:00
msmpeg4enc.c
…
msrle.c
avcodec/msrle: Check that the input is large enough to contain a end of picture code
2018-10-25 00:24:30 +02:00
msrledec.c
…
msrledec.h
…
mss1.c
…
mss2.c
mss2: only use error correction for matching block counts
2016-11-27 00:46:36 +01:00
mss2dsp.c
…
mss2dsp.h
…
mss3.c
avcodec/mss3: Change types in rac_get_model_sym() to match the types they are initialized from
2017-05-20 03:41:33 +02:00
mss4.c
avcodec/mss4: Check input size against skip bits
2019-12-02 19:41:48 +01:00
mss12.c
…
mss12.h
…
mss34dsp.c
avcodec/mss34dsp: Fix multiple signed integer overflow
2017-05-20 03:41:33 +02:00
mss34dsp.h
…
msvideo1.c
avcodec/msvideo1: Check for too small dimensions
2019-12-02 15:45:24 +01:00
msvideo1enc.c
…
mvcdec.c
…
mxpegdec.c
…
nellymoser.c
avcodec/nellymoser: Fix multiple left shift of negative value -8591
2017-05-20 03:41:33 +02:00
nellymoser.h
…
nellymoserdec.c
…
nellymoserenc.c
…
noise_bsf.c
…
nuv.c
avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
2018-07-10 01:18:52 +02:00
nvenc.c
…
old_codec_ids.h
…
on2avc.c
on2avc: limit number of bits to 30 in get_egolomb
2015-12-20 13:39:24 +01:00
on2avcdata.c
…
on2avcdata.h
…
options_table.h
…
options.c
avcodec/options: do a more thorough clean up in avcodec_copy_context()
2017-05-19 23:37:03 -03:00
opus_celt.c
…
opus_parser.c
avcodec/opus_parser: Check payload_len in parse_opus_ts_header()
2018-01-31 22:56:15 +01:00
opus_silk.c
avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
2018-07-10 01:52:56 +02:00
opus.c
…
opus.h
…
opusdec.c
…
paf.h
…
pafaudio.c
…
pafvideo.c
avcodec/pafvideo: Check for bitstream end in decode_0()
2018-01-31 22:56:14 +01:00
pamenc.c
…
parser.c
…
parser.h
…
pcm_tablegen.c
…
pcm_tablegen.h
…
pcm-bluray.c
…
pcm-dvd.c
…
pcm.c
…
pcx.c
…
pcxenc.c
…
pel_template.c
…
pgssubdec.c
avcodec/pgssubdec: Check for duplicate display segments
2019-12-02 19:41:47 +01:00
pictordec.c
avcodec/pictordec: Check plane value before doing value/mask computations
2017-05-20 03:41:33 +02:00
pixblockdsp_template.c
…
pixblockdsp.c
avcodec/me_cmp: Fix crashes on ARM due to misalignment
2017-08-21 23:27:35 +02:00
pixblockdsp.h
avcodec/me_cmp: Fix crashes on ARM due to misalignment
2017-08-21 23:27:35 +02:00
pixels.h
…
png_parser.c
…
png.c
…
png.h
…
pngdec.c
avcodec/pngdec: Check compression method
2018-11-16 18:24:34 +01:00
pngdsp.c
…
pngdsp.h
…
pngenc.c
avcodec/pngenc: Fix mixed up linesizes
2016-01-15 12:30:41 +01:00
pnm_parser.c
…
pnm.c
avcodec/pnm: Use ff_set_dimensions()
2017-06-05 23:16:54 +02:00
pnm.h
…
pnmdec.c
pnmdec: make sure v is capped by maxval
2016-11-27 00:46:35 +01:00
pnmenc.c
…
proresdata.c
…
proresdata.h
…
proresdec2.c
avcodec/proresdec2: SKIP_BITS() does not work with len=32
2018-01-31 22:56:14 +01:00
proresdec_lgpl.c
proresdec_lgpl: explicitly check coff[3] against slice_data_size
2016-11-27 00:46:34 +01:00
proresdec.h
…
proresdsp.c
…
proresdsp.h
…
proresenc_anatoliy.c
…
proresenc_kostya.c
…
psymodel.c
…
psymodel.h
…
pthread_frame.c
…
pthread_internal.h
…
pthread_slice.c
avcodec/mpeg12enc: Move high resolution thread check to before initializing threads
2016-01-28 15:53:54 +01:00
pthread.c
…
ptx.c
…
put_bits.h
avcodec/put_bits: Assert buf_ptr in flush_put_bits()
2016-01-28 15:53:53 +01:00
qcelpdata.h
…
qcelpdec.c
…
qdm2_tablegen.c
…
qdm2_tablegen.h
…
qdm2.c
avcodec/qdm2: Move fft_order check up
2019-12-02 19:41:48 +01:00
qdm2data.h
…
qdrw.c
avcodec/qdrw: Fix null pointer dereference
2017-06-05 23:16:54 +02:00
qpeg.c
avcodec/qpeg: Limit copy in qpeg_decode_intra() to the available bytes
2019-12-02 19:41:47 +01:00
qpel_template.c
…
qpeldsp.c
…
qpeldsp.h
…
qsv_api.c
…
qsv_internal.h
…
qsv.c
…
qsv.h
…
qsvdec_h2645.c
…
qsvdec_mpeg2.c
…
qsvdec_vc1.c
…
qsvdec.c
…
qsvdec.h
…
qsvenc_h264.c
…
qsvenc_hevc.c
…
qsvenc_mpeg2.c
…
qsvenc.c
…
qsvenc.h
…
qtrle.c
avcodec/qtrle: Check remaining bytestream in qtrle_decode_XYbpp()
2018-08-03 02:18:56 +02:00
qtrleenc.c
…
r210dec.c
…
r210enc.c
…
ra144.c
avcodec/ra144: Fix integer overflow in add_wav()
2018-10-18 23:59:13 +02:00
ra144.h
…
ra144dec.c
avcodec/ra144dec: Fix runtime error: left shift of negative value -17
2017-06-05 23:16:54 +02:00
ra144enc.c
…
ra288.c
…
ra288.h
…
ralf.c
…
ralfdata.h
…
rangecoder.c
…
rangecoder.h
…
ratecontrol.c
…
ratecontrol.h
…
raw.c
avcodec/raw: Fix decoding of ilacetest.mov
2016-08-15 20:25:13 +02:00
raw.h
…
rawdec.c
avcodec/rawdec: Check side data size before use
2016-11-26 15:12:26 +01:00
rawenc.c
…
rdft.c
…
rdft.h
…
realtextdec.c
…
rectangle.h
…
remove_extradata_bsf.c
…
resample2.c
…
resample.c
avcodec/resample: Remove disabled and faulty code
2016-04-27 04:40:11 +02:00
reverse.c
…
rl2.c
…
rl.c
…
rl.h
…
rle.c
…
rle.h
…
rnd_avg.h
…
roqaudioenc.c
…
roqvideo.c
…
roqvideo.h
…
roqvideodec.c
…
roqvideoenc.c
…
rpza.c
…
rtjpeg.c
…
rtjpeg.h
…
rv10.c
…
rv10.h
…
rv10enc.c
…
rv20enc.c
…
rv30.c
…
rv30data.h
…
rv30dsp.c
…
rv34_parser.c
…
rv34.c
avcodec/rv34: Fix runtime error: signed integer overflow: 36880 * 66288 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
rv34.h
…
rv34data.h
…
rv34dsp.c
…
rv34dsp.h
…
rv34vlc.h
…
rv40.c
avcodec/rv40: Fix runtime error: left shift of negative value
2017-05-20 03:41:33 +02:00
rv40data.h
…
rv40dsp.c
avcodec/rv40: Fix runtime error: left shift of negative value
2017-05-20 03:41:33 +02:00
rv40vlc2.h
…
s302m.c
avcodec/s302m: Fix left shift of 8 by 28 places cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
s302menc.c
…
samidec.c
…
sanm.c
avcodec/sanm: Fix uninitialized reference frames
2017-06-05 23:16:54 +02:00
sbr.h
…
sbrdsp_fixed.c
avcodec/sbrdsp_fixed: Fix integer overflow in shift in sbr_hf_g_filt_c()
2018-01-31 22:56:14 +01:00
sbrdsp_template.c
avcodec/sbrdsp_template: Fix: runtime error: signed integer overflow: 849815297 + 1315389781 cannot be represented in type 'int'
2017-06-05 23:16:54 +02:00
sbrdsp.c
…
sbrdsp.h
…
sgi.h
…
sgidec.c
…
sgienc.c
…
sgirledec.c
…
shorten.c
avcodec/shorten: Fix integer overflow with offset
2018-11-16 13:18:26 +01:00
simple_idct_template.c
…
simple_idct.c
…
simple_idct.h
…
sinewin_fixed_tablegen.c
…
sinewin_fixed.c
…
sinewin_tablegen_template.c
…
sinewin_tablegen.c
…
sinewin_tablegen.h
…
sinewin.c
…
sinewin.h
…
sipr16k.c
…
sipr16kdata.h
…
sipr.c
…
sipr.h
…
siprdata.h
…
smacker.c
smacker: limit recursion depth of smacker_decode_bigtree
2016-11-27 00:46:35 +01:00
smc.c
avcodec/smc: Check input packet size
2018-07-10 01:18:52 +02:00
smvjpegdec.c
smvjpegdec: make sure cur_frame is not negative
2016-11-27 00:46:34 +01:00
snappy.c
…
snappy.h
…
snow_dwt.c
…
snow_dwt.h
…
snow.c
…
snow.h
avcodec/snow: Fix runtime error: signed integer overflow: 1086573993 + 1086573994 cannot be represented in type 'int'
2017-06-05 23:16:54 +02:00
snowdata.h
…
snowdec.c
avcodec/snowdec: Fix integer overflow with motion vector residual
2018-08-25 22:14:51 +02:00
snowenc.c
avcodec/motion_est: Fix mv_penalty table size
2016-01-15 12:30:40 +01:00
sonic.c
sonic: make sure num_taps * channels is not larger than frame_size
2015-12-17 20:04:35 +01:00
sp5x.h
…
sp5xdec.c
…
srtdec.c
avcodec/htmlsubtitles: Check for string truncation and return error
2017-05-20 03:41:33 +02:00
srtenc.c
…
startcode.c
…
startcode.h
…
subviewerdec.c
…
sunrast.c
avcodec/sunrast: Fix input buffer pointer check
2016-11-26 15:12:26 +01:00
sunrast.h
…
sunrastenc.c
…
svq1_cb.h
…
svq1_vlc.h
…
svq1.c
…
svq1.h
…
svq1dec.c
…
svq1enc_cb.h
…
svq1enc.c
…
svq1enc.h
…
svq3.c
avcodec/svq3: Fix overflow in svq3_add_idct_c()
2018-01-31 22:56:14 +01:00
svq3.h
…
svq13.c
…
synth_filter.c
…
synth_filter.h
…
tableprint_vlc.h
avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
2018-07-10 01:18:52 +02:00
tableprint.h
…
tak_parser.c
…
tak.c
…
tak.h
…
takdec.c
avcodec/takdec: Fix integer overflow in decode_lpc()
2018-01-31 22:56:14 +01:00
targa_y216dec.c
avcodec/targa_y216dec: Fix width type
2017-05-20 03:41:33 +02:00
targa.c
…
targa.h
…
targaenc.c
…
tdsc.c
…
textdec.c
…
texturedsp.c
avcodec/texturedsp: Fix runtime error: left shift of 255 by 24 places cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
texturedsp.h
…
texturedspenc.c
…
thread.h
…
tiertexseqv.c
avcodec/tiertexseqv: set the fixed dimenasions, do not depend on the demuxer doing so
2017-05-20 03:41:33 +02:00
tiff_common.c
…
tiff_common.h
…
tiff_data.c
…
tiff_data.h
…
tiff.c
avcodec/tiff: Update pointer only when the result is used
2017-06-23 03:05:34 +02:00
tiff.h
…
tiffenc.c
…
tmv.c
…
tpeldsp.c
…
tpeldsp.h
…
truemotion1.c
avcodec/truemotion1: Fix multiple runtime error: signed integer overflow: 1246906962 * 2 cannot be represented in type 'int'
2017-05-20 03:41:34 +02:00
truemotion1data.h
…
truemotion2.c
avcodec/truemotion2: Fix integer overflow in last loop in tm2_update_block()
2019-12-02 19:41:48 +01:00
truespeech_data.h
…
truespeech.c
…
tscc2.c
…
tscc2data.h
…
tscc.c
avcodec/tscc: Check side data size before use
2016-11-26 15:12:26 +01:00
tta.c
avcodec/tta: Fix undefined shift
2019-12-02 19:41:48 +01:00
ttadata.c
…
ttadata.h
…
ttadsp.c
…
ttadsp.h
…
ttaenc.c
avcodec/ttaenc: Reallocate packet if its too small
2016-04-27 04:40:12 +02:00
twinvq_data.h
…
twinvq.c
…
twinvq.h
…
twinvqdec.c
…
txd.c
…
ulti_cb.h
…
ulti.c
avcodec/ulti: Check number of blocks at init
2018-01-31 23:47:15 +01:00
unary.h
avcodec/unary: Improve get_unary() docs
2018-10-07 21:05:50 +02:00
utils.c
avcodec/utils: Enforce minimum width also for VP5/6
2018-07-10 01:52:55 +02:00
utvideo.c
…
utvideo.h
…
utvideodec.c
avcodec/utvideodec: Check subsample factors
2018-07-10 01:18:52 +02:00
utvideoenc.c
…
v210dec.c
…
v210dec.h
…
v210enc.c
…
v210enc.h
…
v210x.c
…
v308dec.c
…
v308enc.c
…
v408dec.c
…
v408enc.c
…
v410dec.c
…
v410enc.c
…
vaapi_h264.c
…
vaapi_hevc.c
…
vaapi_internal.h
…
vaapi_mpeg2.c
…
vaapi_mpeg4.c
…
vaapi_vc1.c
…
vaapi.c
…
vaapi.h
…
vb.c
avcodec/vb: Check for end of bytestream before reading blocktype
2018-08-25 22:15:49 +02:00
vble.c
…
vc1_block.c
avcodec/vc1_block: Check for vlc error in vc1_decode_ac_coeff()
2019-12-02 19:41:48 +01:00
vc1_common.h
…
vc1_loopfilter.c
…
vc1_mc.c
…
vc1_parser.c
…
vc1_pred.c
…
vc1_pred.h
…
vc1.c
…
vc1.h
…
vc1acdata.h
…
vc1data.c
…
vc1data.h
…
vc1dec.c
…
vc1dsp.c
avcodec/vc1dsp: Avoid undefined shifts in vc1_v_s_overlap_c / vc1_h_s_overlap_c
2019-12-02 19:41:48 +01:00
vc1dsp.h
…
vcr1.c
…
vda_h264_dec.c
…
vda_h264.c
…
vda_vt_internal.h
…
vda.c
…
vda.h
…
vdpau_compat.h
…
vdpau_h264.c
…
vdpau_hevc.c
avcodec/vdpau_hevc: Fix potential out-of-bounds write
2017-05-20 03:41:33 +02:00
vdpau_internal.h
…
vdpau_mpeg4.c
…
vdpau_mpeg12.c
…
vdpau_vc1.c
…
vdpau.c
…
vdpau.h
…
version.h
…
videodsp_template.c
avcodec/videodsp_template: Fix overflow of addition
2019-12-02 19:41:48 +01:00
videodsp.c
…
videodsp.h
…
videotoolbox.c
…
videotoolbox.h
…
vima.c
…
vmdaudio.c
…
vmdvideo.c
…
vmnc.c
avcodec/vmnc: Check available space against chunks before reget_buffer()
2019-12-02 19:41:48 +01:00
vorbis_data.c
…
vorbis_enc_data.h
…
vorbis_parser_internal.h
…
vorbis_parser.c
…
vorbis_parser.h
…
vorbis.c
avcodec/vorbis: Fix another 1 << 31 > int32_t::max() with 1u.
2018-01-31 22:56:14 +01:00
vorbis.h
…
vorbisdec.c
vorbisdec: reject rangebits 0 with non-0 partitions
2016-01-27 23:45:44 +01:00
vorbisdsp.c
…
vorbisdsp.h
…
vorbisenc.c
…
vp3_parser.c
…
vp3.c
avcodec/vp3: Error out on invalid num_coeffs in unpack_vlcs()
2018-02-12 03:07:59 +01:00
vp3data.h
…
vp3dsp.c
avcodec/vp3dsp: Fix multiple signed integer overflow: 46341 * 47523 cannot be represented in type 'int'
2017-05-20 03:41:32 +02:00
vp3dsp.h
…
vp5.c
avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder()
2017-05-20 03:41:32 +02:00
vp5data.h
…
vp6.c
avcodec/vp6: clear dimensions on failed resolution change in vp6_parse_header()
2017-05-20 03:41:32 +02:00
vp6data.h
…
vp6dsp.c
…
vp8_parser.c
…
vp8.c
avcodec/vp8: Check for bitstream end before vp7_fade_frame()
2018-02-18 23:28:53 +01:00
vp8.h
avcodec/vp8: Check for bitsteam end in decode_mb_row_no_filter()
2017-05-20 03:41:32 +02:00
vp8data.h
…
vp8dsp.c
avcodec/vp8dsp: vp7_luma_dc_wht_c: Fix multiple runtime error: signed integer overflow: -1366381240 + -1262413604 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
vp8dsp.h
…
vp9_mc_template.c
…
vp9_parser.c
avcodec/vp9_parser: Check the input frame sizes for being consistent
2016-08-15 20:25:13 +02:00
vp9.c
avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder()
2017-05-20 03:41:32 +02:00
vp9.h
…
vp9data.h
…
vp9dsp_8bpp.c
…
vp9dsp_10bpp.c
…
vp9dsp_12bpp.c
…
vp9dsp_template.c
…
vp9dsp.c
…
vp9dsp.h
…
vp56.c
avcodec/vp56: Check avctx->error_concealment before enabling EC
2017-05-20 03:41:33 +02:00
vp56.h
avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder()
2017-05-20 03:41:32 +02:00
vp56data.c
…
vp56data.h
…
vp56dsp.c
…
vp56dsp.h
…
vp56rac.c
avcodec/vp568: Check that there is enough data for ff_vp56_init_range_decoder()
2017-05-20 03:41:32 +02:00
vqavideo.c
…
wavpack.c
avcodec/wavpack: Fix overflow in adding tail
2018-07-10 01:52:56 +02:00
wavpack.h
avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
2018-07-10 01:52:56 +02:00
wavpackenc.c
avcodec/wavpackenc: print channel count in av_log call
2016-01-15 17:53:58 +01:00
wavpackenc.h
…
webp.c
avcodec/webp: Fixes null pointer dereference
2017-06-05 23:16:54 +02:00
webvttdec.c
…
webvttenc.c
…
wma_common.c
…
wma_common.h
…
wma_freqs.c
…
wma_freqs.h
…
wma.c
…
wma.h
…
wmadata.h
…
wmadec.c
…
wmaenc.c
avcodec/wmaenc: Check ff_wma_init() for failure
2016-01-28 15:53:54 +01:00
wmalosslessdec.c
avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
2018-07-10 01:18:52 +02:00
wmaprodata.h
…
wmaprodec.c
avcodec/wmaprodec: Check bits per sample to be within the range not causing integer overflows
2015-12-06 02:51:27 +01:00
wmavoice_data.h
…
wmavoice.c
…
wmv2.c
…
wmv2.h
…
wmv2dec.c
avcodec/wmv2dec: Skip I frame if its smaller than 1/8 of the minimal size
2019-12-02 15:45:24 +01:00
wmv2dsp.c
avcodec/wmv2dsp: Fix runtime error: signed integer overflow: 181 * -17047030 cannot be represented in type 'int'
2017-05-20 03:41:33 +02:00
wmv2dsp.h
…
wmv2enc.c
…
wnv1.c
avcodec/wnv1: More strict buffer size check
2017-06-05 23:16:54 +02:00
ws-snd1.c
…
xan.c
avcodec/xan: Check for bitstream end in xan_huffman_decode()
2018-01-31 22:56:14 +01:00
xbmdec.c
…
xbmenc.c
…
xface.c
…
xface.h
…
xfacedec.c
…
xfaceenc.c
…
xiph.c
…
xiph.h
…
xl.c
…
xsubdec.c
…
xsubenc.c
…
xvididct.c
…
xvididct.h
…
xvmc_internal.h
…
xvmc.h
…
xwd.h
…
xwddec.c
avcodec/xwddec: Use ff_set_dimensions()
2018-07-10 01:52:56 +02:00
xwdenc.c
…
xxan.c
…
y41pdec.c
avcodec/y41pdec: Fix width in input buffer size check
2017-05-20 03:41:33 +02:00
y41penc.c
…
yop.c
…
yuv4dec.c
…
yuv4enc.c
…
zerocodec.c
…
zmbv.c
avcodec/zmbv: Check that the decompressed data size is correct
2018-10-03 12:31:19 +02:00
zmbvenc.c
…