1. 12 8月, 2018 1 次提交
  2. 11 8月, 2018 3 次提交
  3. 10 8月, 2018 2 次提交
  4. 09 8月, 2018 3 次提交
  5. 08 8月, 2018 5 次提交
  6. 07 8月, 2018 14 次提交
  7. 06 8月, 2018 2 次提交
  8. 04 8月, 2018 6 次提交
    • M
      avcodec/pnm_parser: Avoid reparsing failed data. · 1940c27c
      Michael Niedermayer 提交于
      Alternatively the parser could be re implemented / redesigned so as to better
      and more efficiently find frame boundaries
      
      Fixes: Timeout
      Fixes: 9210/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PBM_fuzzer-4770771833454592
      Fixes: 9214/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PPM_fuzzer-5741633353023488
      Fixes: 9219/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PGM_fuzzer-6249230237696000
      Fixes: 9550/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PAM_fuzzer-5312669836902400
      
      Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: NMichael Niedermayer <michael@niedermayer.cc>
      1940c27c
    • M
      avcodec/simple_idct_template: Fix several integer overflows · 83dab818
      Michael Niedermayer 提交于
      Fixes: simple_idct_template.c:184:30: runtime error: signed integer overflow: -1065517056 - 1392182838 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:269:21: runtime error: signed integer overflow: 16384 * 259254 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:164:17: runtime error: signed integer overflow: 21407 * 210162 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:167:17: runtime error: signed integer overflow: 21407 * 210162 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:169:19: runtime error: signed integer overflow: 22725 * 259190 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:171:19: runtime error: signed integer overflow: 19265 * 259190 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:173:19: runtime error: signed integer overflow: 12873 * 259190 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:183:28: runtime error: signed integer overflow: 1860878336 + 585177665 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:159:17: runtime error: signed integer overflow: 16384 * 189520 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:170:22: runtime error: signed integer overflow: 19265 * 130147 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:174:23: runtime error: signed integer overflow: -22725 * 130147 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:183:20: runtime error: signed integer overflow: 16384 * -175206 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:184:22: runtime error: signed integer overflow: -16384 * -175206 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:185:22: runtime error: signed integer overflow: -16384 * -175206 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:186:20: runtime error: signed integer overflow: 16384 * -175206 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:195:26: runtime error: signed integer overflow: 19265 * 150747 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:198:27: runtime error: signed integer overflow: -22725 * 150747 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:184:37: runtime error: signed integer overflow: 21407 * -171941 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:185:37: runtime error: signed integer overflow: 21407 * -171941 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:192:27: runtime error: signed integer overflow: -12873 * 206341 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:185:30: runtime error: signed integer overflow: 1196441600 + 1703756981 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:176:23: runtime error: signed integer overflow: -12873 * 168461 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:191:27: runtime error: signed integer overflow: -22725 * -140062 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:197:26: runtime error: signed integer overflow: 19265 * -140062 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:183:34: runtime error: signed integer overflow: 8867 * -243046 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:186:34: runtime error: signed integer overflow: 8867 * -243046 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:186:28: runtime error: signed integer overflow: -816234496 - 2139878414 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:188:26: runtime error: signed integer overflow: 12873 * -239872 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:165:16: runtime error: signed integer overflow: 8867 * -260084 cannot be represented in type 'int'
      Fixes: simple_idct_template.c:166:16: runtime error: signed integer overflow: 8867 * -260084 cannot be represented in type 'int'
      Fixes: 9135/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MPEG4_fuzzer-6324422955761664
      
      Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: NMichael Niedermayer <michael@niedermayer.cc>
      83dab818
    • M
      avcodec/aacdec_template: Check for duplicate elements · 40c2f870
      Michael Niedermayer 提交于
      Fixes: Timeout
      Fixes: 9552/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-6027842339995648
      
      Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: NMichael Niedermayer <michael@niedermayer.cc>
      40c2f870
    • M
      avcodec/aacpsdsp_template: Fix integer overflow in ps_stereo_interpolate_c() · 47db5763
      Michael Niedermayer 提交于
      Fixes: signed integer overflow: -1813244069 + -1407981383 cannot be represented in type 'int'
      Fixes: 8823/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5643295618236416
      
      Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpegSigned-off-by: NMichael Niedermayer <michael@niedermayer.cc>
      47db5763
    • M
      avformat/flvenc: Check audio packet size · 6b67d7f0
      Michael Niedermayer 提交于
      Fixes: Assertion failure
      Fixes: assert_flvenc.c:941_1.swf
      Found-by: N#CHEN HONGXU# <HCHEN017@e.ntu.edu.sg>
      Signed-off-by: NMichael Niedermayer <michael@niedermayer.cc>
      6b67d7f0
    • A
      avcodec/mediacodecdec: fix SEGV on modern nvidia decoders · 476fd6ba
      Aman Gupta 提交于
      This code came originally from gstreamer, where it was added in [1]
      as a work-around for the Tegra 3. (The alignment was changed in [2]
      as a response to [3], from 32-bit to 16-bit).
      
      gstreamer only used this workaround in the case where the decoder
      didn't return a slice-height property, but when the code was copied
      into avcodec the conditional got lost. This commit restores the guard
      and prefers the slice-height from the decoder when it is available.
      
      This fixes segfaults decoding 1920x1080 h264 and mpeg2 videos on the
      NVidia SHIELD after upgrading to Android Oreo.
      
      [1] https://github.com/GStreamer/gst-plugins-bad/commit/a870e6a5c30dd85240fe75c7409cc1cf1b86541d
      [2] https://github.com/GStreamer/gst-plugins-bad/commit/21ff3ae0b0127bd82951d278ca24f2d54133b7cd
      [3] https://bugzilla.gnome.org/show_bug.cgi?id=748867Signed-off-by: NAman Gupta <aman@tmm1.net>
      476fd6ba
  9. 03 8月, 2018 3 次提交
  10. 02 8月, 2018 1 次提交