|
|
|
@@ -1,6 +1,197 @@ |
|
|
|
Entries are sorted chronologically from oldest to youngest within each release, |
|
|
|
releases are sorted from youngest to oldest. |
|
|
|
|
|
|
|
version 4.2.3 |
|
|
|
- avformat/mov: Free temp buffer upon negative sample_size error. |
|
|
|
- avformat/matroskadec: Improve forward compability |
|
|
|
- avformat/matroskadec: Don't discard valid packets |
|
|
|
- avformat/matroskaenc: Don't segfault when seekability changes |
|
|
|
- avformat/utils: Fix memleaks |
|
|
|
- avformat/utils: Fix memleaks in avformat_open_input() |
|
|
|
- avfilter/vf_dedot: Fix leak of AVFrame if making it writable fails |
|
|
|
- avfilter/vf_paletteuse: Fix potential double-free of AVFrame |
|
|
|
- avformat/mov: Don't leak MOVFragmentStreamInfo on error |
|
|
|
- avformat/mov: Free encryption data on error |
|
|
|
- fftools/ffmpeg: Free swresample dictionary during cleanup |
|
|
|
- avcodec/mediacodec_wrapper: fix {input,output}_buffers global reference leak |
|
|
|
- avformat/webm_chunk: Close IO if writing header fails |
|
|
|
- avcodec/cavsdsp: Fix undefined left shifts of negative numbers |
|
|
|
- avcodec/ra144enc: Fix invalid left shift of negative number |
|
|
|
- avcodec/adxenc: Avoid undefined left shift of negative numbers |
|
|
|
- avcodec/adpcm: Fix undefined left shifts of negative numbers |
|
|
|
- avcodec/proresenc_anatoliy: Fix invalid left shift of negative number |
|
|
|
- avformat/aviobuf: Honor avio_open[2] documentation |
|
|
|
- avcodec/cinepakenc: Fix invalid shifts |
|
|
|
- avfilter/vf_xbr: Fix left shift of negative number |
|
|
|
- avfilter/vf_hqx: Fix undefined left shifts of negative numbers |
|
|
|
- avcodec/jpeg2000dwt: Fix undefined shifts of negative numbers |
|
|
|
- avcodec/ituh263dec: Fix undefined left shift of negative number |
|
|
|
- avcodec/dnxhdenc: Fix undefined left shifts of negative numbers |
|
|
|
- swscale/utils: Fix invalid left shifts of negative numbers |
|
|
|
- swscale/x86/swscale: Fix undefined left shifts of negative numbers |
|
|
|
- fftools/ffmpeg_opt: Fix signed integer overflow |
|
|
|
- avcodec/exr: Fix undefined left shifts of negative numbers |
|
|
|
- avformat/movenc: Fix undefined shift |
|
|
|
- avcodec/pcm: Fix undefined shifts |
|
|
|
- avcodec/wavpackenc: Fix undefined shifts |
|
|
|
- avutil/encryption_info: Don't pass NULL to memcpy |
|
|
|
- avcodec/ac3enc: Fix memleak |
|
|
|
- avcodec/ac3enc: Fix invalid shift |
|
|
|
- avcodec/g723_1dec: Fix invalid shift |
|
|
|
- avcodec/tdsc: Fix undefined shifts |
|
|
|
- avcodec/ttaenc: Fix undefined shift |
|
|
|
- avformat/avidec: Fix memleak with embedded GAB2 subtitles |
|
|
|
- avformat/matroskadec: Don't discard the upper 32bits of TrackNumber |
|
|
|
- dump_extradata: Insert extradata even for small packets |
|
|
|
- avformat/segafilmenc: Fix undefined left shift of 1 by 31 places |
|
|
|
- avformat/wtvdec: Fix memleak when reading header fails |
|
|
|
- avformat/dashenc: Fix leak of AVFormatContext on error |
|
|
|
- avformat/fitsdec: Fix potential leak of string in AVBPrint |
|
|
|
- avformat/matroskadec: Sanitize SeekHead entries |
|
|
|
- avformat/matroskaenc: Fix memleak upon encountering bogus chapter |
|
|
|
- avformat/matroskaenc: Make ebml_num_size() more robust |
|
|
|
- avformat/oggenc: Don't free AVStream's priv_data, fix memleak |
|
|
|
- avformat/utils: Fix memleak when decoding subtitle in find_stream_info |
|
|
|
- fftools/ffmpeg_opt: Check attachment filesize |
|
|
|
- avformat/mpeg: Don't use unintialized value |
|
|
|
- avformat/webmdashenc: Check codec types |
|
|
|
- avformat/webmdashenc: Fix memleak upon realloc failure |
|
|
|
- avformat/subtitles: Don't increment packet counter prematurely |
|
|
|
- avformat/bethsoftvid: Fix potential memleak upon reallocation failure |
|
|
|
- avformat/smoothstreaming: Fix memleaks on errors |
|
|
|
- avformat/matroskaenc: Check BlockAdditional size before use |
|
|
|
- avformat/matroskaenc: Check functions that can fail |
|
|
|
- avformat/matroskaenc: Check for reformatting errors |
|
|
|
- avformat/matroskadec: Check before allocations |
|
|
|
- avfilter/vf_unsharp: Don't dereference NULL |
|
|
|
- avcodec/zmbvenc: Correct offset in buffer |
|
|
|
- avcodec/cbs_h2645: Fix potential out-of-bounds array access |
|
|
|
- avformat/mov: Don't allow negative sample sizes. |
|
|
|
- mpeg4videoenc: Don't crash with -fsanitize=bounds |
|
|
|
- avformat/mpegts: Shuffle avio_seek |
|
|
|
- avcodec/binkaudio: Fix 2Ghz sample_rate |
|
|
|
- avcodec/adpcm: Fix integer overflow in ADPCM THP |
|
|
|
- avcodec/ralf: Check num_blocks before use |
|
|
|
- avcodec/iff: Test video_size being non zero |
|
|
|
- avcodec/utvideodec: Fix integer overflow in decode_plane() |
|
|
|
- avcodec/ttadsp: Fix several integer overflows in tta_filter_process_c() |
|
|
|
- avcodec/ralf: Fix integer overflow in decode_block() |
|
|
|
- avcodec/nuv: widen buf_size type |
|
|
|
- avcodec/iff: Fix several integer overflows |
|
|
|
- avcodec/g729postfilter: Clip gain before scaling with AGC_FAC1 |
|
|
|
- avcodec/alac: Fix integer overflow with 24/20bps samples |
|
|
|
- avcodec/dstdec: Check sample rate |
|
|
|
- avformat/thp: Require a video stream |
|
|
|
- avformat/mpeg: Decrease score by 1 for files with very little valid data |
|
|
|
- avcodec/pngdec: Check length in fdAT |
|
|
|
- avcodec/g2meet: Check tile_width in epic_jb_decode_tile() |
|
|
|
- avcodec/hapdec: Check tex_size more strictly and before using it |
|
|
|
- avcodec/vp9dsp_template: Fix integer overflows in idct32_1d() |
|
|
|
- avcodec/alacdsp: Fix invalid shift in append_extra_bits() |
|
|
|
- libavcodec/wmalosslessdec: prevent sum of positive numbers from becoming negative |
|
|
|
- avcodec/dstdec: Fix integer overflow in read_table() |
|
|
|
- avcodec/txd: Check for input size against the header size. |
|
|
|
- avcodec/svq1dec: Check that there is data left after the header |
|
|
|
- avcodec/cbs_h265_syntax_template: Check num_negative/positive_pics when inter_ref_pic_set_prediction_flag is set |
|
|
|
- avcodec/intrax8: Check for end of bitstream in ff_intrax8_decode_picture() |
|
|
|
- avcodec/hevc_mp4toannexb_bsf: Check nalu_size |
|
|
|
- avcodec/iff: Check length before memcpy() in decode_deep_rle32() |
|
|
|
- avcodec/iff: Fix invalid pointer intermediates in decode_deep_rle32() |
|
|
|
- avcodec/pngdec: Pass ret from decode_iccp_chunk() |
|
|
|
- avcodec/rv40dsp: Fix integer overflows in rv40_weight_func_*() |
|
|
|
- avcodec/ac3dec_fixed: Fix several invalid left shifts in scale_coefs() |
|
|
|
- avcodec/flac_parser: Do not lose header count in find_headers_search() |
|
|
|
- avcodec/audiodsp: Fix integer overflow in scalarproduct_int16_c() |
|
|
|
- avcodec/cbs_jpeg_syntax_template: Check array index in huffman_table() |
|
|
|
- avcodec/cbs_jpeg_syntax_template: Check table index before use in dht() |
|
|
|
- avformat/oggdec: Check for EOF after page header |
|
|
|
- swscale/yuv2rgb: Fix vertical dither offset with slices |
|
|
|
- avcodec/dpcm: clip exponent into supported range in XAN DPCM |
|
|
|
- avcodec/flacdsp_template: Fix invalid shifts in decorrelate |
|
|
|
- avcodec/xvididct: Fix integer overflow in MULT() |
|
|
|
- avcodec/ffwavesynth: Correct undefined overflow of PINK_UNIT |
|
|
|
- avcodec/cbs_h264_syntax_template: fix off by 1 error with slice_group_change_cycle |
|
|
|
- swscale/output: Fix integer overflow in yuv2rgb_write_full() with out of range input |
|
|
|
- swscale/output: Fix integer overflow in alpha computation in yuv2gbrp16_full_X_c() |
|
|
|
- libavformat/amr.c: Check return value from avio_read() |
|
|
|
- libavformat/mov.c: Free aes_decrypt to avoid leaking memory |
|
|
|
- libavformat/oggdec.c: Check return value from avio_read() |
|
|
|
- avformat/asfdec_f: Fix overflow check in get_tag() |
|
|
|
- avformat/nsvdec: Fix memleaks on errors while reading the header |
|
|
|
- avcodec/ffwavesynth: Fix integer overflow in computation of ddphi |
|
|
|
- avcodec/cbs_jpeg: Check length for SOS |
|
|
|
- avcodec/adpcm: Fix invalid shift in AV_CODEC_ID_ADPCM_PSX |
|
|
|
- avcodec/mpeg12dec: Fix invalid shift in mpeg2_fast_decode_block_intra() |
|
|
|
- avcodec/cbs_h2645: Treat slices without data as invalid |
|
|
|
- avcodec/cbs_h2645: Remove dead code to delete trailing zeroes |
|
|
|
- avcodec/cbs_av1_syntax_template: Set seen_frame_header only after successfull uncompressed_header() |
|
|
|
- avcodec/mpegaudioenc_template: fix invalid shift of sample |
|
|
|
- avcodec/motion_est_template: Fix invalid shifts in no_sub_motion_search() |
|
|
|
- libavformat/avienc: Check bits per sample for PAL8 |
|
|
|
- avformat/mpegts: Improve the position determination for avpriv_mpegts_parse_packet() |
|
|
|
- avcodec/magicyuv: Check that there are enough lines for interlacing to be possible |
|
|
|
- avformat/mvdec: Check stream numbers |
|
|
|
- avcodec/pcm: Fix invalid shift in AV_CODEC_ID_PCM_LXF |
|
|
|
- avcodec/qdm2: Check fft_coefs_index |
|
|
|
- avformat/utils: Fix integer overflow with complex time bases in avformat_find_stream_info() |
|
|
|
- avformat/avidec: Avoid integer overflow in NI switch check |
|
|
|
- fftools/ffmpeg: Fix integer overflow in duration computation in seek_to_start() |
|
|
|
- avfilter/vf_aspect: Fix integer overflow in compute_dar() |
|
|
|
- avcodec/apedec: Fix invalid shift with 24 bps |
|
|
|
- avformat/utils: Fix undefined behavior in ff_configure_buffers_for_index() |
|
|
|
- avcodec/dpcm: Fix integer overflow in AV_CODEC_ID_GREMLIN_DPCM |
|
|
|
- avcodec/wmalosslessdec: Fix integer overflow with sliding in padding bits |
|
|
|
- avcodec/wmalosslessdec: Fix loop in revert_acfilter() |
|
|
|
- avcodec/agm: YUV420 without DCT needs even dimensions |
|
|
|
- avcodec/agm: Test remaining data in decode_raw_intra_rgb() |
|
|
|
- avcodec/lagarith: Sanity check scale |
|
|
|
- avcodec/apedec: Fix integer overflows in predictor_decode_mono_3950() |
|
|
|
- avcodec/ralf: Fix integer overflow in apply_lpc() |
|
|
|
- avcodec/dca_lbr: Fix some error codes and error passing |
|
|
|
- avcodec/wmavoice: Fix rounding and integer anomalies in calc_input_response() |
|
|
|
- avcodec/wmavoice: sanity check block_align |
|
|
|
- avcodec/pcm: Fix invalid shift in pcm_decode_frame for LXF |
|
|
|
- avcodec/snappy: Sanity check bytestream2_get_levarint() |
|
|
|
- avcodec/mlpdsp: Fix a invalid shift in ff_mlp_rematrix_channel() |
|
|
|
- avcodec/avdct: Clear IDCTDSPContext context |
|
|
|
- avcodec/x86/diracdsp: Fix high bits on Windows x86_64 |
|
|
|
- tests/fate/lavf-video.mak: fix fate-lavf-gif dependencies |
|
|
|
- avformat/mov: Check STCO location |
|
|
|
- avcodec/wmalosslessdec: Fix multiple integer overflows |
|
|
|
- avcodec/apedec: Fix undefined integer overflow in decode_array_0000() |
|
|
|
- avcodec/smacker: Check space before decoding type |
|
|
|
- avcodec/rawdec: Use linesize in b64a |
|
|
|
- avcodec/iff: Over-allocate ham_palbuf for HAM6 IFF-PBM |
|
|
|
- avcodec/x86/diracdsp: Fix incorrect src addressing in dequant_subband_32() |
|
|
|
- avfilter/vf_find_rect: Remove assert |
|
|
|
- avfilter/vf_find_rect: Increase worst case score |
|
|
|
- swscale/input: Fix several invalid shifts related to rgb2yuv constants |
|
|
|
- swscale/output: Fix several invalid shifts in yuv2rgb_full_1_c_template() |
|
|
|
- swscale/swscale: Fix several invalid shifts related to vChrDrop |
|
|
|
- avcodec/hevc_mp4toannexb_bsf: check that nalu size doesnt overflow |
|
|
|
- avcodec/hevc_mp4toannexb_bsf: Avoid NULL memcpy() |
|
|
|
- avcodec/cbs_av1: Check leb128 values read |
|
|
|
- avcodec/wmalosslessdec: move channel check up |
|
|
|
- avcodec/cbs_h2645: Skip all 0 NAL units |
|
|
|
- avcodec/adpcm: Fix overflow in FFABS() IMA_EA_EACS |
|
|
|
- avcodec/alac: Fix integer overflow in LPC coefficient adaption |
|
|
|
- avcodec/g729postfilter: Optimize out overflowing multiplication from apply_tilt_comp() |
|
|
|
- avcodec/vc1dec: Check field_mode for sprites |
|
|
|
- avcodec/vc1dec: Limit bits by the actual bitstream size |
|
|
|
- avcodec/vmdaudio: Check block_align more |
|
|
|
- configure: bump year |
|
|
|
- avcodec/pgssubdec: Free subtitle on error |
|
|
|
- avcodec/nvenc: use framerate if available |
|
|
|
- avcodec/cbs_h265: fix writing extension_data bits |
|
|
|
- avcodec/nvenc: offset dts to account for b-frame reordering |
|
|
|
- Revert "avformat/rtp: Pass sources and block filter addresses via sdp file for rtp" |
|
|
|
- avformat/matroskadec: Fix default value of BlockAddID |
|
|
|
- avformat/dashdec: Don't allocate and leak strings that are never used |
|
|
|
- avformat/matroskaenc: Write level 1 elements in one go |
|
|
|
- avformat/rtp: Pass sources and block filter addresses via sdp file for rtp |
|
|
|
- avformat/bintext: avoid division by zero |
|
|
|
|
|
|
|
|
|
|
|
version 4.2.2 |
|
|
|
- cbs_mpeg2: Fix parsing the last unit |
|
|
|
- cbs_mpeg2: Rearrange start code search |
|
|
|
|