Dustin Brody
056e9efc8e
vp6: partially propagate huffman tree building errors during coeff model parsing and fix misspelling
...
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
(cherry picked from commit f913eeea43 )
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2011-09-22 01:22:21 +02:00
Laurent Aimar
cf43508eb3
Check for huffman tree building error in vp6 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 7c249d4fba )
2011-09-22 01:19:27 +02:00
Laurent Aimar
c9c6e5f4e8
Release old pictures after a resolution change in vp5/6 decoder
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit dba20b8478 )
2011-09-22 01:19:21 +02:00
Laurent Aimar
a5a02ea3f2
Check for missing reference in vp5/6 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 6a0e78929a )
2011-09-22 01:19:15 +02:00
Laurent Aimar
69b6248327
Check for invalid slices offsets in RV30/40 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit b64269ce55 )
2011-09-22 01:19:07 +02:00
Laurent Aimar
533dbaa55b
Check output buffer size in nellymoser decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 741ec30bd2 )
2011-09-22 01:19:01 +02:00
Michael Niedermayer
ec7f0b527c
Merge remote-tracking branch 'khirnov/release/0.7' into release/0.8
...
* khirnov/release/0.7: (64 commits)
rv34: Check for invalid slice offsets
rv34: Fix potential overreads
rv34: Avoid NULL dereference on corrupted bitstream
rv10: Reject slices that does not have the same type as the first one
lavf: Fix context pointer in av_open_input_stream when avformat_open_input fails
oggdec: fix out of bound write in the ogg demuxer
Fixed size given to init_get_bits().
smacker: fix a few off by 1 errors
Check for invalid VLC value in smacker decoder.
Check and propagate errors when VLC trees cannot be built in smacker decoder.
Fixed off by one packet size allocation in the smacker demuxer.
Check for invalid packet size in the smacker demuxer.
ape demuxer: fix segfault on memory allocation failure.
xan: Add some buffer checks (cherry picked from commit 0872bb23b4 )
Fixed size given to init_get_bits() in xan decoder. (cherry picked from commit 393d5031c6 )
smacker demuxer: handle possible av_realloc() failure.
Fixed segfault with wavpack decoder on corrupted decorrelation terms sub-blocks.
cljr: init_get_bits size in bits instead of bytes (cherry picked from commit 0c1f5b93d9 )
indeo2: fail if input buffer too small (cherry picked from commit b7ce4f1d1c )
indeo2: init_get_bits size in bits instead of bytes (cherry picked from commit 68ca330cbd )
...
Conflicts:
ffmpeg.c
libavdevice/alsa-audio.h
libavformat/gxf.c
libswscale/x86/swscale_template.c
Merged-by: Michael Niedermayer <michaelni@gmx.at>
2011-09-22 01:10:24 +02:00
Carl Eugen Hoyos
bf7dc6b29d
Fix dxva2 decoding for some H264 samples.
2011-09-21 23:47:34 +02:00
Laurent Aimar
d2c5904cab
Check for invalid slice offsets in real decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8716c178dd )
2011-09-21 21:04:51 +02:00
Laurent Aimar
738c17b3a6
rv10: Reject slices that does not have the same type as the first one
...
This prevents crashes with some corrupted bitstreams.
Signed-off-by: Martin Storsjö <martin@martin.st>
2011-09-21 21:03:11 +02:00
Laurent Aimar
60a1384013
Avoid NULL dereference on corrupted bitstream with real decoder.
...
rv34_decode_slice() can return without allocating any pictures.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 140dbcff35 )
2011-09-21 20:56:53 +02:00
Laurent Aimar
b59919afe2
Reject slices that does not have the same type than the first one in RV10/RV20 decoder.
...
This prevents crashes with some corrupted bitstreams.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit d788af6cf6 )
2011-09-21 20:56:53 +02:00
Michael Niedermayer
764ffdd0ec
check all svq3_get_ue_golomb() returns.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 979bea1300 )
2011-09-21 20:56:53 +02:00
Michael Niedermayer
ed9e561490
rv34: check for size mismatch
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 35f38b3ab9 )
2011-09-21 20:56:53 +02:00
Laurent Aimar
4d8330d095
Fix js_vlc_bits value validation when joint stereo is used in cook decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 352c878de6 )
2011-09-21 19:50:08 +02:00
Laurent Aimar
30d7dce94f
Fix potential overreads in rv34 decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 9a0a64cb26 )
2011-09-21 19:50:03 +02:00
Michael Niedermayer
fa3f7391be
h264: allow disabling bitstream overread protection by using the fast flag.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 205c13685f )
2011-09-21 19:49:30 +02:00
Alex Converse
b7000d0517
xan: Add some buffer checks
...
(cherry picked from commit 0872bb23b4 )
2011-09-21 19:47:12 +02:00
Alex Converse
169e634457
xan: Remove extra trailing newline
...
(cherry picked from commit 350f57bd7b )
2011-09-21 19:47:06 +02:00
Laurent Aimar
053bc4ce8b
Fixed size given to init_get_bits() in xan decoder.
...
(cherry picked from commit 393d5031c6 )
2011-09-21 19:47:00 +02:00
Michael Niedermayer
e952ff6981
smacker: fix a few off by 1 errors
...
stereo & 16bit is untested due to lack of samples
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit d67e74929c )
2011-09-21 19:46:34 +02:00
Michael Niedermayer
9cee26dfde
smacker: add forgotten *
...
found by fenrir
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit f98edc73c5 )
2011-09-21 19:46:23 +02:00
Kostya Shishkov
ad6177e52c
rv34: check that subsequent slices have the same type as first one.
...
This prevents some crashes when corrupted bitstream reports e.g. P-type
slice in I-frame. Official RealVideo decoder demands all slices to be
of the same type too.
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 23a1f0c592 )
2011-09-21 19:36:53 +02:00
Laurent Aimar
c9316b7c6d
Fixed invalid read access on extra data in cinepak decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit dc255275f6 )
2011-09-21 18:02:40 +02:00
Laurent Aimar
2bf9a09a2c
Fixed segfaults on corruped smacker streams in the decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit d07ac1853d )
2011-09-21 18:02:29 +02:00
Michael Niedermayer
54544100a3
h264: prevent an out of array read in decode_nal_units()
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit ea0ac11e52 )
2011-09-21 18:02:18 +02:00
Michael Niedermayer
97437dada6
h264dec: Prevent CABAC and CAVLC bitsteram overreading
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 23f5cff92c )
2011-09-21 18:02:13 +02:00
Art Clarke
c8736de331
libspeex encoder wraper
...
taken from svn head of xuggle
(cherry picked from commit a52cdcd296 )
2011-09-21 18:01:25 +02:00
Joakim Plate
92f1b5df32
dvbsubdec: don't hardcode subtitle colors count in dvbsubdec to 16
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 4a3294ef00 )
2011-09-21 18:01:20 +02:00
Laurent Aimar
82e4fd193f
Fixed segfault with wavpack decoder on corrupted decorrelation terms sub-blocks.
...
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 8bfea4ab4e )
2011-09-21 18:01:13 +02:00
Alex Converse
3a0649ddeb
cljr: init_get_bits size in bits instead of bytes
...
(cherry picked from commit 0c1f5b93d9 )
2011-09-21 18:01:09 +02:00
Alex Converse
9f05400ea8
indeo2: fail if input buffer too small
...
(cherry picked from commit b7ce4f1d1c )
2011-09-21 18:01:02 +02:00
Alex Converse
09cfd6f597
indeo2: init_get_bits size in bits instead of bytes
...
(cherry picked from commit 68ca330cbd )
2011-09-21 18:00:54 +02:00
Michael Niedermayer
b2af83a9ed
cabac test: Change input to test, so a wider range of states is tested.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1eb805ed70 )
2011-09-21 18:00:40 +02:00
Michael Niedermayer
f38b2a6be8
cabac test: match encode and decode side
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 830d7d5c4f )
2011-09-21 18:00:36 +02:00
Michael Niedermayer
db93a5a0c8
cabac: fix cabac encoder
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 89653ea728 )
2011-09-21 18:00:18 +02:00
Laurent Aimar
b5fe6bee01
Fixed deference of NULL pointer in motionpixels decoder.
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 824f98f442 )
2011-09-21 18:00:10 +02:00
Laurent Aimar
7181adab80
Fixed size given to init_get_bits().
...
init_get_bits() takes a number of bits and not a number of bytes as
its size argument.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e5e0580b93 )
2011-09-21 17:59:48 +02:00
Laurent Aimar
bac822025e
Fixed size given to init_get_bits() in ffv1 decoder.
...
init_get_bits() takes a number of bits and not a number of bytes as
its size argument.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8362a0ffed )
2011-09-21 17:59:43 +02:00
Alex Converse
8a8aafd2b9
wavpack: Check error codes rather than working around error conditions.
...
(cherry picked from commit dba2b63a98 )
2011-09-21 17:59:36 +02:00
Michael Niedermayer
a13ef61051
rc: finetune convergence failure fix
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 73e0ec2ff4 )
2011-09-21 17:59:30 +02:00
Michael Niedermayer
4fbc35cd53
rc: fix convergence failure
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit ed14517c23 )
2011-09-21 17:59:25 +02:00
Laurent Aimar
558cf502ac
Fixed invalid writes in wavpack decoder on corrupted bitstreams.
...
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 0aedab0340 )
2011-09-21 17:57:33 +02:00
Chris Rankin
b0da6a744a
qcelpdec: fix the return value of qcelp_decode_frame().
...
(cherry picked from commit 04c13dca88 )
2011-09-21 17:57:01 +02:00
Michael Niedermayer
d99613bad6
jpeglsdec: fix infinite loop
...
Fixes Ticket331
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit bd358e128f )
2011-09-21 17:57:01 +02:00
Kostya Shishkov
c026f336b9
wavpack: fix wrong return value in wavpack_decode_block()
...
This function should return number of samples decoded, not number of bytes
decoded.
Spotted by Uoti Urpala.
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit bcd4aa8bec )
2011-09-21 17:56:15 +02:00
Reimar Döffinger
5c2d684986
Check extradata size on resolution change.
...
Ignore resolution change if resolution not defined in extradata.
Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de>
(cherry picked from commit 09c5f990bc )
2011-09-21 17:56:15 +02:00
Gavin Kinsey
30442fa217
jpegdec: set color_range
...
(cherry picked from commit 2f870e262e )
2011-09-21 17:56:15 +02:00
Michael Niedermayer
e7d10f5a90
mpeg4: fix typo in mpeg4_encode_gop_header()
...
Found-by: ubitux
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit f5bda9fcbb )
2011-09-21 17:56:15 +02:00
Michael Niedermayer
ca5dfd1550
h264: clean all non null elements of delayed_pic[]
...
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 66ce282df5 )
2011-09-21 17:56:14 +02:00