|
|
|
@@ -1,6 +1,77 @@ |
|
|
|
Entries are sorted chronologically from oldest to youngest within each release, |
|
|
|
releases are sorted from youngest to oldest. |
|
|
|
|
|
|
|
version 3.0.10 |
|
|
|
- avcodec/snowdec: Check mv_scale |
|
|
|
- avcodec/pafvideo: Check for bitstream end in decode_0() |
|
|
|
- avcodec/ffv1dec: Fix out of array read in slice counting |
|
|
|
- avcodec/dirac_dwt: Fix integer overflow in COMPOSE_53iL0() |
|
|
|
- avcodec/mpeg_er: Clear mcsel in mpeg_er_decode_mb() |
|
|
|
- avcodec/mpeg4videodec: Use 64 bit intermediates for sprite delta |
|
|
|
- avcodec/x86/lossless_videoencdsp: Fix handling of small widths |
|
|
|
- avcodec/truemotion2: Fix integer overflows in tm2_high_chroma() |
|
|
|
- avcodec/aacdec_template: Clear tns present flag on error |
|
|
|
- avcodec/proresdec2: SKIP_BITS() does not work with len=32 |
|
|
|
- avcodec/hevcdsp_template: Fix undefined shift |
|
|
|
- avcodec/jpeg2000: Check that codsty->log2_prec_widths/heights has been initialized |
|
|
|
- avcodec/takdec: Fix integer overflow in decode_lpc() |
|
|
|
- avcodec/proresdec2: Check bits in DECODE_CODEWORD(), fixes invalid shift |
|
|
|
- avcodec/takdec: Fix integer overflows in decode_subframe() |
|
|
|
- avcodec/dirac_dwt: Fix integer overflow in COMPOSE_FIDELITYi*() |
|
|
|
- avcodec/ffv1dec: Fix integer overflow in read_quant_table() |
|
|
|
- avcodec/svq3: Fix overflow in svq3_add_idct_c() |
|
|
|
- avcodec/pngdec: Clean up on av_frame_ref() failure |
|
|
|
- avcodec/hevc_ps: Fix c?_qp_offset_list size |
|
|
|
- avcodec/jpeg2000dsp: Fix multiple integer overflows in ict_int() |
|
|
|
- avcodec/hevcdsp_template: Fix undefined shift in put_hevc_pel_bi_w_pixels |
|
|
|
- avcodec/diracdec: Fix overflow in DC computation |
|
|
|
- avformat/asfdec: Fix DoS in asf_build_simple_index() |
|
|
|
- avformat/mov: Fix DoS in read_tfra() |
|
|
|
- avcodec/dirac_dwt: Fix multiple overflows in 9/7 lifting |
|
|
|
- avcodec/diracdec: Fix integer overflow in INTRA_DC_PRED() |
|
|
|
- avformat/mxfdec: Fix Sign error in mxf_read_primer_pack() |
|
|
|
- avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array() |
|
|
|
- avformat/nsvdec: Fix DoS due to lack of eof check in nsvs_file_offset loop. |
|
|
|
- avcodec/snowdec: Fix integer overflow in decode_subband_slice_buffered() |
|
|
|
- avcodec/hevc_ps: Fix undefined shift in pcm code |
|
|
|
- avcodec/sbrdsp_fixed: Fix undefined overflows in autocorrelate() |
|
|
|
- avformat/mvdec: Fix DoS due to lack of eof check |
|
|
|
- avformat/rl2: Fix DoS due to lack of eof check |
|
|
|
- avformat/rmdec: Fix DoS due to lack of eof check |
|
|
|
- avformat/cinedec: Fix DoS due to lack of eof check |
|
|
|
- avformat/asfdec: Fix DoS due to lack of eof check |
|
|
|
- avformat/hls: Fix DoS due to infinite loop |
|
|
|
- ffprobe: Fix NULL pointer handling in color parameter printing |
|
|
|
- ffprobe: Fix null pointer dereference with color primaries |
|
|
|
- avcodec/hevc_ps: Check delta_pocs in ff_hevc_decode_short_term_rps() |
|
|
|
- avformat/aviobuf: Fix signed integer overflow in avio_seek() |
|
|
|
- avformat/mov: Fix signed integer overflows with total_size |
|
|
|
- avcodec/utils: Fix signed integer overflow in rc_initial_buffer_occupancy initialization |
|
|
|
- avcodec/aacdec_template: Fix running cleanup in decode_ics_info() |
|
|
|
- avcodec/me_cmp: Fix crashes on ARM due to misalignment |
|
|
|
- avcodec/dirac_dwt_template: Fix integer overflow in vertical_compose53iL0() |
|
|
|
- avcodec/fic: Fixes signed integer overflow |
|
|
|
- avcodec/snowdec: Fix off by 1 error |
|
|
|
- avcodec/diracdec: Check perspective_exp and zrs_exp. |
|
|
|
- avcodec/mpeg4videodec: Clear mcsel before decoding an image |
|
|
|
- avcodec/dirac_dwt: Fixes integer overflows in COMPOSE_DAUB97* |
|
|
|
- avcodec/aacdec_fixed: fix invalid shift in predict() |
|
|
|
- avcodec/h264_slice: Fix overflow in slice offset |
|
|
|
- avformat/utils: fix memory leak in avformat_free_context |
|
|
|
- avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0() |
|
|
|
- avcodec/diracdec: Fix integer overflow in divide3() |
|
|
|
- avcodec/takdec: Fix integer overflow in decode_subframe() |
|
|
|
- avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2 |
|
|
|
- avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2 |
|
|
|
- avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH() |
|
|
|
- avcodec/dnxhddec: Move mb height check out of non hr branch |
|
|
|
- avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2 |
|
|
|
- avformat/oggparsecelt: Do not re-allocate os->private |
|
|
|
- avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20() |
|
|
|
- avcodec/aacdec_fixed: fix: left shift of negative value -1 |
|
|
|
- doc/filters: typo in frei0r |
|
|
|
- avcodec/cfhd: Fix decoding regression due to height chec |
|
|
|
|
|
|
|
version 3.0.9 |
|
|
|
- avcodec/aacdec_template: Fix undefined integer overflow in apply_tns() |
|
|
|
- avcodec/mjpegdec: Clip DC also on the negative side. |
|
|
|
|