Fixes use of uninitialized memory
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes out of array read
Fixes: signal_sigsegv_1b0a4da_1865_cov_2167818389_computer_anger.avi
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Should improve cache usage and reduces stack usage.
Also reduces number of copies in case many levels
have the same number of bits.
Signed-off-by: NReimar Döffinger <Reimar.Doeffinger@gmx.de>

Signed-off-by: NSupraja Meedinti <supraja0493@gmail.com>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes use of freed memory
Fixes: asan_heap-uaf_3660f67_757_cov_1257014655_Hi422FR1_SONY_A.jsv
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes out of array access
Fixes: case2_bad_read_yuv2rgbx32.mp4
Found-by: NMichal Zalewski <lcamtuf@coredump.cx>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes: case1_call_stack_overflow.mp4
Found-by: NMichal Zalewski <lcamtuf@coredump.cx>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes call stack overflow
Fixes: case1_call_stack_overflow.mp4
Found-by: NMichal Zalewski <lcamtuf@coredump.cx>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes out of array accesses
Fixes: asan_heap-oob_25bcd7e_3783_cov_3553517262_utvideo_rgba_median.avi
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Prompted-by: Carl Oxwall <@oxwall>
Signed-off-by: NLou Logan <lou@lrcd.com>

Approved-by: NStefano Sabatini <stefasab@gmail.com>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes out of array access

Fixes: asan_stack-oob_32c12e5_2536_cov_2442316831_lena.xface
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes out of array access
Fixes: asan_heap-oob_4d23ba_91_cov_3853393937_128.vmd

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NPaul B Mahol <onemda@gmail.com>

Close segment I/O context and append segment in hls_write_trailer() only
when segment I/O context is allocated.
Signed-off-by: NChristian Suloway <csuloway@globaleagleent.com>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

If allocation fails earlier on, and the next frame is processed,
the slice buffer could be left in a state where line and data_stack
have already been freed, or are otherwise null pointers.
Signed-off-by: NDerek Buitenhuis <derek.buitenhuis@gmail.com>

Fixes build on win32.
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

* commit '6f4364ab':
  mov: Fix handling of zero-length metadata values

Conflicts:
	libavformat/mov.c
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Since 3cec81f4, a zero-length metadata value would try to
allocate 2*0 bytes, where av_malloc() returns NULL.

Always add one to the allocated length, to allow space for
a null terminator in the zero-length case.

Incidentally, this fixes fate-alac on RVCT 4.0, where a compiler
bug seems to mess up the mov muxer to the point that it writes
the wrong sort of metadata. Previously this bug was undetected,
but since 3cec81f4 such mov files started returning
AVERROR(ENOMEM) in the mov demuxer.
Signed-off-by: NMartin Storsjö <martin@martin.st>

* commit '10d4c5e5':
  tiff: set the correct return value when check_size() fails
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

* commit '3c27275c':
  tiff: Check the check_size() return value and forward it

Conflicts:
	libavcodec/tiffenc.c

See: d50aa006Merged-by: NMichael Niedermayer <michaelni@gmx.at>

* commit '4690e01c':
  prores: Evaluate all the quantizers
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

* commit '490a3ebf':
  matroskadec: Fix read-after-free in matroska_read_seek()

See: 33301f00Merged-by: NMichael Niedermayer <michaelni@gmx.at>

* commit 'd75190aa':
  mpegvideo: move REBASE_PICTURE where it is used
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

* commit '63fcedcf':
  mpegvideo: remove unused function declaration
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

* commit 'b2bece5e':
  hevc: always clip luma_log2_weight_denom
Merged-by: NMichael Niedermayer <michaelni@gmx.at>

Fix trac ticket #3598.
Signed-off-by: NNicolas George <george@nsup.org>
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>

Fixes Ticket3610
Signed-off-by: NMichael Niedermayer <michaelni@gmx.at>