5c1a6ecb98
avcodec/vc1_block: Fix integer overflow in ff_vc1_pred_dc() by
2019-07-04 23:13:13 +0200
e6701fa94b
avcodec/truemotion2: Fix several integer overflows in tm2_motion_block() by
2019-07-08 23:00:09 +0200
f7f3c07282
avcodec/apedec: make left/right unsigned to avoid undefined behavior by
2019-07-02 12:13:19 +0200
f9749f3335
avcodec/apedec: Fix multiple integer overflows and undefined behaviorin filter_3800() by
2019-06-16 11:39:15 +0200
f2eb30e654
avcodec/eatgv: Check remaining size after the keyframe header by
2019-07-28 21:09:14 +0200
8c66aed22b
avcodec/assdec: undefined use of memcpy() by
2019-07-24 22:55:15 +0200
e46c1c68c6
avcodec/brenderpix: Check input size before allocating image by
2019-07-26 14:16:16 +0200
82094a703e
lafv/wavdec: Fail bext parsing on incomplete reads by
2019-07-25 15:54:49 -0700
b47758964a
avcodec/vorbisdec: Check vlc for floor0 dec vector offset by
2019-07-07 23:23:53 +0200
b217b8ed59
avcodec/vorbisdec: amplitude bits can be more than 25 bits by
2019-07-07 23:16:12 +0200
0d922de167
avcodec/apedec: Fix various integer overflows by
2019-06-16 11:32:10 +0200
7700ef6737
avcodec/apedec: Fix multiple integer overflows in predictor_update_filter() by
2019-06-16 10:54:13 +0200
b4185cb154
avcodec/alsdec: Fix 2 integer overflows by
2019-07-06 23:20:30 +0200
d36bc33bcc
avcodec/flicvideo: Make line_packets int by
2019-06-21 23:01:04 +0200
45a306e4c4
avcodec/dvbsubdec: Use ff_set_dimensions() by
2019-07-20 00:07:59 +0200
996accb0d7
avcodec/ffwavesynth: Check if there is enough extradata before allocation by
2019-07-15 00:35:49 +0200
af0aea414f
avcodec/ffwavesynth: More correct cast in wavesynth_seek() by
2019-07-15 00:35:48 +0200
561aefbf8a
avcodec/ffwavesynth: Check sample rate before use by
2019-07-15 00:35:47 +0200
73556665ec
avformat/utils: Check rfps_duration_sum for overflow by
2019-07-04 23:01:19 +0200
9ad8710d1c
avcodec/parser: Check next index validity in ff_combine_frame() by
2019-07-06 09:21:52 +0200
42734c4578
avcodec/ivi: Ask for samples with odd tiles by
2019-07-02 19:57:08 +0200
332a03042d
avformat/xmv: Make bitrate 64bit by
2019-07-13 20:12:41 +0200
f2d81316e8
avcodec/pngdec: Check that previous_picture has same w/h/format by
2019-07-10 23:02:36 +0200
40c3eedd40
avcodec/huffyuv: remove gray8a (the format is listed but not supported by the implementation) by
2019-07-03 23:25:07 +0200
65c25ad368
avcodec/mpc8: Fixes invalid shift in mpc8_decode_frame() by
2019-07-11 20:02:24 +0200
54b3727a49
avcodec/hq_hqa: Use ff_set_dimensions() by
2019-06-29 21:53:09 +0200
4696370756
avcodec/rv10: Fix integer overflow in aspect ratio compare by
2019-06-28 19:20:43 +0200
a70dd95c43
avcodec/4xm: Fix signed integer overflows in idct() by
2019-06-27 00:15:03 +0200
76a60fc760
avcodec/qdm2: Check checksum_size for 0 by
2019-06-24 01:01:04 +0200
2a1e1bc0b5
avcodec/qdm2: error out of qdm2_fft_decode_tones() before entering endless loop by
2019-06-24 01:01:03 +0200
8f5aff9e2d
avcodec/qdm2: Do not read out of array in fix_coding_method_array() by
2019-06-24 01:01:02 +0200
7b4cd6ac8e
avcodec/svq3: Use ff_set_dimension() by
2019-06-25 23:42:43 +0200
a58dfb447e
avcodec/iff: Check ham vs bpp by
2019-06-22 19:21:50 +0200
ace8a759e6
avcodec/ffwavesynth: use uint32_t to compute difference, it is enough by
2019-06-21 22:43:23 +0200
d8c85a3464
avcodec/ffwavesynth: Simplify lcg_seek(), avoid negative case by
2019-06-21 22:41:25 +0200
3bb800525e
avcodec/ffwavesynth: Fix backward lcg_seek() by
2019-06-21 22:08:27 +0200
05a164a4dc
avcodec/vc1_block: Check for vlc error in vc1_decode_ac_coeff() by
2019-06-15 23:28:25 +0200
c583154829
avcodec/alac: Check lpc_quant by
2019-06-19 01:04:07 +0200
fa89d0ec88
avcodec/alsdec: Add FF_CODEC_CAP_INIT_CLEANUP by
2019-06-21 00:47:19 +0200
4e2bf59270
avcodec/alsdec: Fix integer overflow with buffer number by
2019-06-21 00:47:17 +0200
a6d53b3028
avcodec/alsdec: Check opt_order / sb_length in ra_block handling by
2019-06-21 00:47:15 +0200
cabdd900b7
avcodec/alsdec: Fix integer overflow with shifting samples by
2019-06-19 23:27:21 +0200
91c70cc895
avcodec/alsdec: Fix undefined behavior in decode_rice() by
2019-06-19 23:17:31 +0200
7a4e69fed4
avcodec/alsdec: Fixes invalid shifts in read_var_block_data() and INTERLEAVE_OUTPUT() by
2019-06-19 21:53:43 +0200
43ced88379
avcodec/apedec: Add k < 24 check to the only k++ case which lacks such a check by
2019-06-16 11:26:57 +0200
1b491fbf25
avcodec/qdm2: Move fft_order check up by
2019-06-17 20:58:47 +0200
1894a36d6c
avcodec/libvorbisdec: Check extradata size by
2019-06-17 21:26:45 +0200
3af9317a11
avcodec/videodsp_template: Fix overflow of addition by
2019-06-15 00:47:06 +0200
40a614a5bf
avcodec/ffwavesynth: Check ts_end - ts_start for overflow by
2019-06-16 16:12:42 +0200
006d1a2f80
avcodec/vc1dsp: Avoid undefined shifts in vc1_v_s_overlap_c / vc1_h_s_overlap_c by
2019-06-16 16:17:12 +0200
7b9ca45a43
avcodec/tta: Fix undefined shift by
2019-06-16 15:55:55 +0200
58c95520ee
avcodec/bintext: Check font height by
2019-06-16 16:01:45 +0200
274423dd46
avcodec/binkdsp: Fix integer overflows in idct by
2019-06-18 14:28:17 +0200
7ddb5fcbac
avcodec/motionpixels: Check for vlc error in mp_get_vlc() by
2019-06-15 21:08:31 +0200
1d288d16d8
avcodec/loco: Limit lossy parameter so it is sane and does not overflow by
2019-06-15 21:47:16 +0200
677f461508
avformat/mov: Set fragment.found_tfhd only after TFHD has been parsed by
2019-06-15 00:12:36 +0200
1df86144e0
avcodec/aacpsdsp_template: Fix integer overflow in ps_hybrid_analysis_c() by
2019-06-13 15:00:14 +0200
5a7a2180f8
avcodec/truemotion2: Fix integer overflow in last loop in tm2_update_block() by
2019-06-13 19:45:50 +0200
d3a1a59c22
avcodec/iff: finetune the palette size check in the mask case by
2019-06-22 21:17:52 +0200
b9be7f3adf
avcodec/bink: Reorder operations in init to avoid memleak on error by
2019-06-15 21:52:24 +0200
990753e81f
avformat/wtvdec: Avoid (32bit signed) sectors by
2019-06-13 01:20:19 +0200
1bf0dd08c5
avcodec/bitstream: Check for more conflicting codes in build_table() by
2019-06-05 12:18:54 +0200
5cca0755c7
avcodec/bitstream: Check for integer code truncation in build_table() by
2019-06-05 12:18:54 +0200
28e2f0c51d
avformat/sbgdec: Fixes integer overflow in str_to_time() with hours by
2019-06-06 23:20:49 +0200
ea3df2f7be
avcodec/mjpegdec: Check for non ls PAL8 by
2019-06-01 19:06:07 +0200
386368fd91
avcodec/mss4: Check input size against skip bits by
2019-05-14 14:29:43 +0200
7e7f52deda
avcodec/diracdec: Fix integer overflow in global_mv() by
2019-05-22 02:01:33 +0200
b4aeb407a5
avcodec/vmnc: Check available space against chunks before reget_buffer() by
2019-05-17 23:28:49 +0200
380289beab
avcodec/aacdec_template: skip apply_tns() if max_sfb is 0 (from previous header decode failure) by
2019-05-18 10:37:26 +0200
53b314938f
avcodec/aacdec_fixed: Handle more extreem cases in noise_scale() by
2019-05-16 12:00:18 +0200
7f4ac04f30
avcodec/aacdec_template: Merge 3 #ifs related to noise handling by
2019-05-16 11:55:43 +0200
3d7b7e5331
avcodec/aacdec_fixed: ssign seems always -1 in noise_scale(), simplify by
2019-05-16 11:03:59 +0200
d418ca3786
avformat/mp3enc: Avoid SEEK_END as it is unsupported by
2019-05-14 12:12:29 +0200
805e692303
avcodec/truemotion2: Fix several integer overflows in tm2_update_block() by
2019-05-05 00:31:24 +0200
fa0caf43c4
avformat/webm_chunk: Specify expected argument length of get_chunk_filename() by
2019-05-02 20:36:18 +0200
3fa90098a9
avformat/webm_chunk: Check header filename length by
2019-05-02 20:45:14 +0200
2f8d30fb9b
avcodec/cpia: Check input size also against linesizes and EOL by
2019-05-19 17:42:04 +0200
b55cf5f53d
libswcale: Fix possible string overflow in test. by
2019-05-12 05:03:25 -0700
332de4c1e4
avcodec/hq_hqa: Check available space before reading slice offsets by
2019-05-11 23:05:47 +0200
2df8814ae7
lavf/webm_chunk: Respect buffer size by
2019-04-20 00:03:14 +0200
9bb9aa9085
avcodec/jvdec: Use ff_get_buffer() when the content is not reused by
2019-05-04 00:15:33 +0200
a4bd19c53a
avcodec/truemotion2: Fix 2 integer overflows in tm2_update_block() by
2019-04-20 01:05:44 +0200
7a5f875e98
avcodec/aacdec_fixed: Fix undefined shift in noise_scale() by
2019-03-29 08:58:49 +0100
37b2a19afa
avutil/avstring: Fix bug and undefined behavior in av_strncasecmp() by
2019-04-16 00:09:38 +0200
ef7bef2ba4
avformat/aadec: Check for scanf() failure by
2019-04-16 23:56:43 +0200
aa152bcaec
avcodec/ccaption_dec: Add a blank like at the end to avoid rollup reading from outside by
2019-04-20 18:11:42 +0200
89b9c72862
avcodec/ivi: Move buffer/block end check to caller of ivi_dc_transform() by
2019-04-12 00:09:57 +0200
059f291aaf
avcodec/diracdec: Use 64bit in intermediate of global motion vector field generation by
2019-04-07 16:44:53 +0200
12e4877ae2
avcodec/truemotion2: Fix integer overflow in tm2_decode_blocks() by
2019-03-27 00:39:56 +0100
4bc3382780
avcodec/hevcdec: Avoid only partly skiping duplicate first slices by
2019-03-23 20:55:08 +0100
8d3764a54d
lavc/bmp: Avoid a heap buffer overwrite for 1bpp input. by
2019-03-26 13:32:11 +0100
0b93f59318
avcodec/truemotion2: Fix integer overflow in tm2_null_res_block() by
2019-03-16 02:30:57 +0100
ce5fb015ac
avcodec/dfa: Check the chunk header is not truncated by
2019-03-10 23:45:19 +0100
f8cb091b6e
avcodec/dvbsubdec: Check object position by
2019-03-05 20:14:05 +0100
d3423fb7d4
avcodec/cdgraphics: Use ff_set_dimensions() by
2019-03-05 12:51:22 +0100
6e926090d3
avcodec/qpeg: Limit copy in qpeg_decode_intra() to the available bytes by
2019-02-24 00:44:40 +0100
9a5150b40c
avcodec/aic: Check remaining bits in aic_decode_coeffs() by
2019-02-25 13:26:25 +0100
1ca27e5215
avcodec/bethsoftvideo: Check block_type by
2019-02-24 23:39:44 +0100
4797b6092d
avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int() by
2019-02-19 00:05:51 +0100
d555be4ba5
avcodec/error_resilience: Use a symmetric check for skipping MV estimation by
2019-02-19 18:41:42 +0100