...
|
...
|
@@ -1,6 +1,328 @@
|
1
|
1
|
Entries are sorted chronologically from oldest to youngest within each release,
|
2
|
2
|
releases are sorted from youngest to oldest.
|
3
|
3
|
|
|
4
|
+version 4.0.5:
|
|
5
|
+ avcodec/wmaprodec: get frame during frame decode
|
|
6
|
+ avcodec/interplayacm: Fix overflow of last unused value
|
|
7
|
+ avcodec/adpcm: Fix undefined behavior with negative predictions in IMA OKI
|
|
8
|
+ avcodec/cook: Move up and extend block_align check
|
|
9
|
+ avcodec/sbcdec: Fix integer overflows in sbc_synthesize_four()
|
|
10
|
+ avcodec/twinvq: Check block_align
|
|
11
|
+ avcodec/cook: Enlarge gain table
|
|
12
|
+ avcodec/cook: Check samples_per_channel earlier
|
|
13
|
+ avcodec/atrac3plus: Check split point in fill mode 3
|
|
14
|
+ avcodec/wmavoice: Check sample_rate
|
|
15
|
+ avcodec/xsubdec: fix overflow in alpha handling
|
|
16
|
+ avcodec/iff: Check available space before entering loop in decode_long_vertical_delta2() / decode_long_vertical_delta()
|
|
17
|
+ avcodec/apedec: Fix integer overflow in filter_3800()
|
|
18
|
+ avutil/lfg: Document the AVLFG struct
|
|
19
|
+ avcodec/ffv1dec: Use a different error message for the slice level CRC
|
|
20
|
+ avcodec/apedec: Fix undefined integer overflow in long_filter_ehigh_3830()
|
|
21
|
+ avcodec/dstdec: Check that AC probabilities are within range
|
|
22
|
+ avcodec/dstdec: Check read_table() for failure
|
|
23
|
+ avcodec/snowenc: Set mb_num to avoid ratecontrol floating point divisions by 0.0
|
|
24
|
+ avcodec/snowenc: Fix 2 undefined shifts
|
|
25
|
+ avformat/nutenc: Do not pass NULL to memcmp() in get_needed_flags()
|
|
26
|
+ avcodec/aptx: Check the number of channels
|
|
27
|
+ avcodec/aacdec_template: Check samplerate
|
|
28
|
+ avcodec/truemotion2: Fix several integer overflows in tm2_low_res_block()
|
|
29
|
+ avcodec/utils: Check block_align
|
|
30
|
+ avcodec/wmalosslessdec: Fix some integer anomalies
|
|
31
|
+ avcodec/adpcm: Fix invalid shifts in ADPCM DTK
|
|
32
|
+ avcodec/apedec: Only clear the needed buffer space, instead of all
|
|
33
|
+ avcodec/libvorbisdec: Fix insufficient input checks leading to out of array reads
|
|
34
|
+ avcodec/g723_1dec: fix invalid shift with negative sid_gain
|
|
35
|
+ avcodec/vp5: Check render_x/y
|
|
36
|
+ avcodec/qdrw: Check input for header/skiped space before get_buffer()
|
|
37
|
+ avcodec/ralf: Skip initializing unused filter variables
|
|
38
|
+ avcodec/takdec: Fix overflow with large sample rates
|
|
39
|
+ avcodec/alsdec: Check that input space for header exists in read_diff_float_data()
|
|
40
|
+ avformat/pjsdec: Check duration for overflow
|
|
41
|
+ avcodec/ptx: Check that the input contains at least one line
|
|
42
|
+ avcodec/alac: Fix integer overflow in LPC
|
|
43
|
+ avcodec/smacker: Fix integer overflows in pred[] in smka_decode_frame()
|
|
44
|
+ avcodec/aliaspixdec: Check input size against minimal picture size
|
|
45
|
+ avcodec/ffwavesynth: Fix integer overflows in pink noise addition
|
|
46
|
+ avcodec/vc1_block: Fixes integer overflow in vc1_decode_i_block_adv()
|
|
47
|
+ avcodec/wmalosslessdec: Check block_align
|
|
48
|
+ avcodec/g729postfilter: Fix left shift of negative value
|
|
49
|
+ avcodec/binkaudio: Check sample rate
|
|
50
|
+ avcodec/sbcdec: Fix integer overflows in sbc_synthesize_eight()
|
|
51
|
+ avcodec/adpcm: Check initial predictor for ADPCM_IMA_EA_EACS
|
|
52
|
+ avcodec/g723_1dec: Fix overflow in shift
|
|
53
|
+ avcodec/apedec: Fix integer overflow in predictor_update_3930()
|
|
54
|
+ avcodec/g729postfilter: Fix undefined intermediate pointers
|
|
55
|
+ avcodec/g729postfilter: Fix undefined shifts
|
|
56
|
+ avcodec/lsp: Fix undefined shifts in lsp2poly()
|
|
57
|
+ avcodec/adpcm: Fix left shifts in AV_CODEC_ID_ADPCM_EA
|
|
58
|
+ avformat/shortendec: Check k in probe
|
|
59
|
+ avfilter/vf_geq: Use av_clipd() instead of av_clipf()
|
|
60
|
+ avcodec/wmaprodec: Check that the streams channels do not exceed the overall channels
|
|
61
|
+ avcodec/qdmc: Check input space in qdmc_get_vlc()
|
|
62
|
+ avcodec/pcm: Check bits_per_coded_sample
|
|
63
|
+ avcodec/exr: Allow duplicate use of channel indexes
|
|
64
|
+ avcodec/fitsdec: Fail on 0 naxisn
|
|
65
|
+ avcodec/dxv: Subtract 12 earlier in dxv_decompress_cocg()
|
|
66
|
+ libavcodec/dxv: Remove redundant seek
|
|
67
|
+ avcodec/ituh263dec: Check input for minimal frame size
|
|
68
|
+ avcodec/truemotion1: Check that the input has enough space for a minimal index_stream
|
|
69
|
+ avformat/mpsubdec: Clear queue on error
|
|
70
|
+ avcodec/sunrast: Check that the input is large enough for the maximally compressed image
|
|
71
|
+ avcodec/sunrast: Check for availability of maplength before allocating image
|
|
72
|
+ avformat/subtitles: Check nb_subs in ff_subtitles_queue_finalize()
|
|
73
|
+ avcodec/wmaprodec: Check if there is a stream
|
|
74
|
+ avcodec/g2meet: Check for end of input in jpg_decode_block()
|
|
75
|
+ avcodec/g2meet: Check if adjusted pixel was on the stack
|
|
76
|
+ avformat/electronicarts: If no packet has been read at the end do not treat it as if theres a packet
|
|
77
|
+ avcodec/dxv: Check op_offset in dxv_decompress_yo()
|
|
78
|
+ avcodec/utils: Check sample_rate before opening the decoder
|
|
79
|
+ avcodec/aptx: Fix multiple shift anomalies
|
|
80
|
+ avcodec/fitsdec: fix use of uninitialised values
|
|
81
|
+ avcodec/motionpixels: Mark 2 functions as always_inline
|
|
82
|
+ avcodec/ituh263dec: Make the condition for the studio slice start code match between ff_h263_resync() and ff_mpeg4_decode_studio_slice_header()
|
|
83
|
+ avcodec/ralf: Fix integer overflow in decode_channel()
|
|
84
|
+ vcodec/vc1: compute rangex/y only for P/B frames
|
|
85
|
+ avcodec/vc1_pred: Fix invalid shifts in scaleforopp()
|
|
86
|
+ avcodec/vc1_block: Fix invalid shift with rangeredfrm
|
|
87
|
+ avcodec/vc1: Check for excessive resolution
|
|
88
|
+ avcodec/vc1: check REFDIST
|
|
89
|
+ avcodec/apedec: Fix several integer overflows in predictor_update_filter() and do_apply_filter()
|
|
90
|
+ avcodec/hevc_cabac: Tighten the limit on k in ff_hevc_cu_qp_delta_abs()
|
|
91
|
+ avcodec/4xm: Check index in decode_i_block() also in the path where its not used.
|
|
92
|
+ avcodec/atrac3: Check block_align
|
|
93
|
+ avcodec/alsdec: Avoid dereferencing context pointer in inner interleave loop
|
|
94
|
+ avcodec/fitsdec: Prevent division by 0 with huge data_max
|
|
95
|
+ avcodec/dstdec: Fix integer overflow in samples_per_frame computation
|
|
96
|
+ avcodec/g729_parser: Check block_size
|
|
97
|
+ avcodec/sbcdec: Initialize number of channels
|
|
98
|
+ avcodec/utils: Optimize ff_color_frame() using memcpy()
|
|
99
|
+ avcodec/aacdec: Check if we run out of input in read_stream_mux_config()
|
|
100
|
+ avcodec/utils: Use av_memcpy_backptr() in ff_color_frame()
|
|
101
|
+ avcodec/smacker: Fix integer overflow in signed int multiply in SMK_BLK_FILL
|
|
102
|
+ avcodec/alac: Fix invalid shifts in 20/24 bps
|
|
103
|
+ avcodec/alac: fix undefined behavior with INT_MIN in lpc_prediction()
|
|
104
|
+ avcodec/ffwavesynth: Fix integer overflow in timestamps
|
|
105
|
+ avcodec/dxv: Check op_offset in both directions
|
|
106
|
+ avcodec/adpcm: Check number of channels for MTAF
|
|
107
|
+ avcodec/sunrast: Fix indention
|
|
108
|
+ avcodec/sunrast: Fix return type for "unsupported (compression) type"
|
|
109
|
+ avformat/mov: Check for EOF in mov_read_meta()
|
|
110
|
+ avcodec/hevcdec: Fix memleak of a53_caption
|
|
111
|
+ avformat/cdxl: Fix integer overflow in intermediate
|
|
112
|
+ avcodec/hevcdec: repeat character in skiped
|
|
113
|
+ avcodec/gdv: Replace assert() checking bitstream by if()
|
|
114
|
+ libavcodec/utils: Free threads on init failure
|
|
115
|
+ avcodec/htmlsubtitles: Avoid locale dependant isdigit()
|
|
116
|
+ avcodec/alsdec: Check k from being outside what our implementation can handle
|
|
117
|
+ avcodec/takdec: Fix integer overflow in decorrelate()
|
|
118
|
+ avcodec/aacps: Fix integer overflows in hybrid_synthesis()
|
|
119
|
+ avcodec/mpeg4videodec: Fix integer overflow in mpeg4_decode_studio_block()
|
|
120
|
+ avcodec/vp56rac: delay signaling an error on truncated input
|
|
121
|
+ avcodec/vp5/6/8: use vpX_rac_is_end()
|
|
122
|
+ avcodec/vp56: Add vpX_rac_is_end() to check for the end of input
|
|
123
|
+ avcodec/qdm2: Check frame size
|
|
124
|
+ avcodec/vc1_pred: Fix refdist in scaleforopp()
|
|
125
|
+ avcodec/vorbisdec: fix FASTDIV usage for vr_type == 2
|
|
126
|
+ avcodec/iff: Check for overlap in cmap_read_palette()
|
|
127
|
+ avcodec/apedec: Fix 32bit int overflow in do_apply_filter()
|
|
128
|
+ avcodec/ralf: fix undefined shift in extend_code()
|
|
129
|
+ avcodec/ralf: fix undefined shift
|
|
130
|
+ avcodec/bgmc: Check input space in ff_bgmc_decode_init()
|
|
131
|
+ avcodec/truemotion2: Fix multiple integer overflows in tm2_null_res_block()
|
|
132
|
+ avcodec/vc1dec: Require res_sprite for wmv3images
|
|
133
|
+ avcodec/vc1_block: Check for double escapes
|
|
134
|
+ avcodec/vorbisdec: Check get_vlc2() failure
|
|
135
|
+ avcodec/tta: Fix integer overflow in prediction
|
|
136
|
+ avcodec/vb: Check input packet size to be large enough to contain flags
|
|
137
|
+ avcodec/cavsdec: Limit the number of access units per packet to 2
|
|
138
|
+ avcodec/alac: Check for bps of 0
|
|
139
|
+ avcodec/alac: Fix multiple integer overflows in lpc_prediction()
|
|
140
|
+ avcodec/rl2: set dimensions
|
|
141
|
+ avcodec/aacdec: Add FF_CODEC_CAP_INIT_CLEANUP
|
|
142
|
+ avcodec/idcinvideo: Add 320x240 default maximum resolution
|
|
143
|
+ avformat/realtextdec: free queue on error
|
|
144
|
+ avcodec/alsdec: Fix integer overflow in decode_var_block_data()
|
|
145
|
+ avcodec/alsdec: Limit maximum channels to 512
|
|
146
|
+ avcodec/anm: Check input size for a frame with just a stop code
|
|
147
|
+ avcodec/flicvideo: Optimize and Simplify FLI_COPY in flic_decode_frame_24BPP() by using bytestream2_get_buffer()
|
|
148
|
+ avcodec/loco: Check left column value
|
|
149
|
+ avcodec/ffwavesynth: Fixes invalid shift with pink noise seeking
|
|
150
|
+ avcodec/ffwavesynth: Fix integer overflow for some corner case values
|
|
151
|
+ avcodec/indeo2: Check remaining input more often
|
|
152
|
+ avcodec/diracdec: Check that slices are fewer than pixels
|
|
153
|
+ avcodec/vp56: Consider the alpha start as end of the prior header
|
|
154
|
+ avcodec/4xm: Check for end of input in decode_p_block()
|
|
155
|
+ avcodec/hevcdec: Check delta_luma_weight_l0/1
|
|
156
|
+ avcodec/hnm4video: Optimize postprocess_current_frame()
|
|
157
|
+ avcodec/hevc_refs: Optimize 16bit generate_missing_ref()
|
|
158
|
+ avcodec/scpr: Use av_memcpy_backptr() in type 17 and 33
|
|
159
|
+ avcodec/dds: Use ff_set_dimensions()
|
|
160
|
+ avcodec/mpc8: Fix 32bit mask/enum
|
|
161
|
+ avcodec/alsdec: Fix integer overflows of raw_samples in decode_var_block_data()
|
|
162
|
+ avcodec/alsdec: Fix integer overflow of raw_samples in decode_blocks()
|
|
163
|
+ avcodec/alsdec: fix mantisse shift
|
|
164
|
+ avcodec/aacdec_template: fix integer overflow in imdct_and_windowing()
|
|
165
|
+ libavcodec/iff: Use unsigned to avoid undefined behaviour
|
|
166
|
+ avcodec/alsdec: Check for block_length <= 0 in read_var_block_data()
|
|
167
|
+ avcodec/vqavideo: Set video size
|
|
168
|
+ avcodec/sanm: Check extradata_size before allocations
|
|
169
|
+ avcodec/mss1: check for overread and forward errors
|
|
170
|
+ avcodec/dirac_parser: Fix overflow in dts
|
|
171
|
+ avcodec/ralf: Fix undefined pointer in decode_channel()
|
|
172
|
+ avcodec/ralf: Fix integer overflow in apply_lpc()
|
|
173
|
+ avcodec/vorbisdec: Implement vr->classifications = 1
|
|
174
|
+ avcodec/vorbisdec: Check parameters in vorbis_floor0_decode() before divide
|
|
175
|
+ avformat/realtextdec: Check for duplicate extradata in realtext_read_header()
|
|
176
|
+ avcodec/apedec: Fix 2 signed overflows
|
|
177
|
+ avcodec/mss3: Check for the rac stream being invalid in rac_normalize()
|
|
178
|
+ avcodec/vc1_block: Check get_vlc2() return before use
|
|
179
|
+ avcodec/apedec: Do not partially clear data array
|
|
180
|
+ avcodec/hnm4video: Forward errors of decode_interframe_v4()
|
|
181
|
+ avcodec/clearvideo: fix invalid shift in tile size check
|
|
182
|
+ avcodec/vp3: Check that theora is theora
|
|
183
|
+ avcodec/vc1_pred: Fix invalid shift in scaleforsame()
|
|
184
|
+ avcodec/vc1_block: Fix integer overflow in ff_vc1_pred_dc()
|
|
185
|
+ avcodec/truemotion2: Fix several integer overflows in tm2_motion_block()
|
|
186
|
+ avcodec/apedec: make left/right unsigned to avoid undefined behavior
|
|
187
|
+ avcodec/apedec: Fix multiple integer overflows and undefined behaviorin filter_3800()
|
|
188
|
+ avformat/mpc: deallocate frames array on errors
|
|
189
|
+ avcodec/eatqi: Check for minimum frame size
|
|
190
|
+ avcodec/eatgv: Check remaining size after the keyframe header
|
|
191
|
+ avcodec/assdec: undefined use of memcpy()
|
|
192
|
+ avcodec/brenderpix: Check input size before allocating image
|
|
193
|
+ lafv/wavdec: Fail bext parsing on incomplete reads
|
|
194
|
+ avcodec/utils: fix leak of subtitle_header on error path
|
|
195
|
+ avcodec/utils: Check close before calling it
|
|
196
|
+ avcodec/vorbisdec: Check vlc for floor0 dec vector offset
|
|
197
|
+ avcodec/vorbisdec: amplitude bits can be more than 25 bits
|
|
198
|
+ avutil/softfloat_ieee754: Fix odd bit position for exponent and sign in av_bits2sf_ieee754()
|
|
199
|
+ avcodec/apedec: Fix various integer overflows
|
|
200
|
+ avcodec/apedec: Fix multiple integer overflows in predictor_update_filter()
|
|
201
|
+ avcodec/alsdec: fix undefined shift in multiply()
|
|
202
|
+ avcodec/alsdec: Fix 2 integer overflows
|
|
203
|
+ avcodec/flicvideo: Make line_packets int
|
|
204
|
+ avcodec/dvbsubdec: Use ff_set_dimensions()
|
|
205
|
+ avcodec/ffwavesynth: Check if there is enough extradata before allocation
|
|
206
|
+ avcodec/ffwavesynth: More correct cast in wavesynth_seek()
|
|
207
|
+ avcodec/ffwavesynth: Check sample rate before use
|
|
208
|
+ avcodec/dnxhd_parser: Fix parser when input does not have nicely sized packets
|
|
209
|
+ avcodec/dnxhd_parser: remove unneeded code
|
|
210
|
+ avformat/utils: Check rfps_duration_sum for overflow
|
|
211
|
+ avcodec/h264_refs: Also check reference in ff_h264_build_ref_list()
|
|
212
|
+ avcodec/parser: Check next index validity in ff_combine_frame()
|
|
213
|
+ avcodec/ivi: Ask for samples with odd tiles
|
|
214
|
+ avformat/xmv: Make bitrate 64bit
|
|
215
|
+ avcodec/pngdec: Check that previous_picture has same w/h/format
|
|
216
|
+ avcodec/huffyuv: remove gray8a (the format is listed but not supported by the implementation)
|
|
217
|
+ avcodec/mpc8: Fixes invalid shift in mpc8_decode_frame()
|
|
218
|
+ avcodec/utils, avcodec_open2: close codec on failure
|
|
219
|
+ avcodec/golomb: Correct the doxy about get_ue_golomb() and errors
|
|
220
|
+ avformat/utils: Check timebase before use in estimate_timings()
|
|
221
|
+ avcodec/hq_hqa: Use ff_set_dimensions()
|
|
222
|
+ avcodec/rv10: Fix integer overflow in aspect ratio compare
|
|
223
|
+ avcodec/4xm: Fix signed integer overflows in idct()
|
|
224
|
+ avcodec/qdm2: Check checksum_size for 0
|
|
225
|
+ avcodec/qdm2: error out of qdm2_fft_decode_tones() before entering endless loop
|
|
226
|
+ avcodec/qdm2: Do not read out of array in fix_coding_method_array()
|
|
227
|
+ avcodec/svq3: Use ff_set_dimension()
|
|
228
|
+ avcodec/iff: Check ham vs bpp
|
|
229
|
+ avcodec/ffwavesynth: use uint32_t to compute difference, it is enough
|
|
230
|
+ avcodec/ffwavesynth: Simplify lcg_seek(), avoid negative case
|
|
231
|
+ avcodec/ffwavesynth: Fix backward lcg_seek()
|
|
232
|
+ avcodec/flicvideo: Fix off by 1 error in flic_decode_frame_24BPP()
|
|
233
|
+ avcodec/vc1_block: Check for vlc error in vc1_decode_ac_coeff()
|
|
234
|
+ avcodec/alac: Check lpc_quant
|
|
235
|
+ avcodec/dxv: Initialize tex_funct to NULL
|
|
236
|
+ avcodec/alsdec: Add FF_CODEC_CAP_INIT_CLEANUP
|
|
237
|
+ avcodec/alsdec: Fix integer overflow with buffer number
|
|
238
|
+ avcodec/alsdec: Fixes signed integer overflow in LSB addition
|
|
239
|
+ avcodec/alsdec: Check opt_order / sb_length in ra_block handling
|
|
240
|
+ avcodec/alsdec: Fix integer overflow with shifting samples
|
|
241
|
+ avcodec/alsdec: Fix undefined behavior in decode_rice()
|
|
242
|
+ avcodec/alsdec: Fixes invalid shifts in read_var_block_data() and INTERLEAVE_OUTPUT()
|
|
243
|
+ avcodec/hevc_ps: Change num_tile_rows/columns checks to sps->ctb_height/weight
|
|
244
|
+ avcodec/hevc_ps: Fix integer overflow with num_tile_rows and num_tile_columns
|
|
245
|
+ avcodec/apedec: Add k < 24 check to the only k++ case which lacks such a check
|
|
246
|
+ avformat/aviobuf: Delay buffer downsizing until asserts are met
|
|
247
|
+ avcodec/fitsdec: Check data_min/max
|
|
248
|
+ avcodec/m101: Fix off be 2 error
|
|
249
|
+ avcodec/qdm2: Move fft_order check up
|
|
250
|
+ avcodec/libvorbisdec: Check extradata size
|
|
251
|
+ avformat/vqf: Check header_size
|
|
252
|
+ avcodec/utils: Check bits_per_coded_sample
|
|
253
|
+ avcodec/videodsp_template: Fix overflow of addition
|
|
254
|
+ avcodec/alsdec: Fix invalid shift in multiply()
|
|
255
|
+ avcodec/ffwavesynth: Check ts_end - ts_start for overflow
|
|
256
|
+ avcodec/vc1dsp: Avoid undefined shifts in vc1_v_s_overlap_c / vc1_h_s_overlap_c
|
|
257
|
+ avcodec/tta: Fix undefined shift
|
|
258
|
+ avcodec/qdmc: Fix integer overflows in PRNG
|
|
259
|
+ avcodec/bintext: Check font height
|
|
260
|
+ avcodec/binkdsp: Fix integer overflows in idct
|
|
261
|
+ avcodec/bink: Fix integer overflow in unquantize_dct_coeffs()
|
|
262
|
+ avcodec/motionpixels: Check for vlc error in mp_get_vlc()
|
|
263
|
+ avcodec/loco: Limit lossy parameter so it is sane and does not overflow
|
|
264
|
+ avformat/mov: Set fragment.found_tfhd only after TFHD has been parsed
|
|
265
|
+ avcodec/xpmdec: Do not use context dimensions as temporary variables
|
|
266
|
+ avcodec/fitsdec: Fix division by 0 in size check
|
|
267
|
+ avcodec/aacpsdsp_template: Fix integer overflow in ps_hybrid_analysis_c()
|
|
268
|
+ avcodec/truemotion2: Fix integer overflow in last loop in tm2_update_block()
|
|
269
|
+ avcodec/iff: finetune the palette size check in the mask case
|
|
270
|
+ avcodec/iff: Fix mask_buf / mask_palbuf leak
|
|
271
|
+ avformat/icodec: Free ico->images on error paths
|
|
272
|
+ avformat/wsddec: Fix undefined shift
|
|
273
|
+ avcodec/fmvc: Check if header fields are available before allocating the image
|
|
274
|
+ avcodec/bink: Reorder operations in init to avoid memleak on error
|
|
275
|
+ avformat/wtvdec: Avoid (32bit signed) sectors
|
|
276
|
+ avcodec/bitstream: Check for more conflicting codes in build_table()
|
|
277
|
+ avcodec/bitstream: Check for integer code truncation in build_table()
|
|
278
|
+ avformat/sbgdec: Fixes integer overflow in str_to_time() with hours
|
|
279
|
+ avformat/vpk: Check offset for validity
|
|
280
|
+ avformat/vpk: Fix integer overflow in samples_per_block computation
|
|
281
|
+ avcodec/mjpegdec: Check for non ls PAL8
|
|
282
|
+ avcodec/interplayvideo: check decoding_map_size with video_data_size
|
|
283
|
+ avcodec/h264_parse: Use 64bit for expectedpoc and expected_delta_per_poc_cycle
|
|
284
|
+ avcodec/mss4: Check input size against skip bits
|
|
285
|
+ avcodec/dxv: Check op_offset in dxv_decompress_cocg()
|
|
286
|
+ avcodec/diracdec: Fix integer overflow in global_mv()
|
|
287
|
+ avcodec/vmnc: Check available space against chunks before reget_buffer()
|
|
288
|
+ avcodec/aacdec_template: skip apply_tns() if max_sfb is 0 (from previous header decode failure)
|
|
289
|
+ avcodec/aacdec_fixed: Handle more extreem cases in noise_scale()
|
|
290
|
+ avcodec/aacdec_template: Merge 3 #ifs related to noise handling
|
|
291
|
+ avcodec/aacdec_fixed: ssign seems always -1 in noise_scale(), simplify
|
|
292
|
+ avformat/mp3enc: Avoid SEEK_END as it is unsupported
|
|
293
|
+ avcodec/truemotion2: Fix several integer overflows in tm2_update_block()
|
|
294
|
+ avformat/webm_chunk: Specify expected argument length of get_chunk_filename()
|
|
295
|
+ avformat/webm_chunk: Check header filename length
|
|
296
|
+ avcodec/cpia: Check input size also against linesizes and EOL
|
|
297
|
+ swscale/tests/swscale: Lengthen pixfmt name buffer to 21 bytes
|
|
298
|
+ libswcale: Fix possible string overflow in test.
|
|
299
|
+ avcodec/hq_hqa: Check available space before reading slice offsets
|
|
300
|
+ lavf/webm_chunk: Respect buffer size
|
|
301
|
+ avcodec/fits: Check bitpix
|
|
302
|
+ avcodec/jvdec: Use ff_get_buffer() when the content is not reused
|
|
303
|
+ avcodec/truemotion2: Fix 2 integer overflows in tm2_update_block()
|
|
304
|
+ avcodec/gdv: Check input palette size before rescale()
|
|
305
|
+ avcodec/jpeg2000: Check stepsize before using it
|
|
306
|
+ avcodec/aacdec_fixed: Fix undefined shift in noise_scale()
|
|
307
|
+ avutil/avstring: Fix bug and undefined behavior in av_strncasecmp()
|
|
308
|
+ avformat/mov: Skip stsd adjustment without chunks
|
|
309
|
+ avformat/aadec: Check for scanf() failure
|
|
310
|
+ avcodec/ccaption_dec: Add a blank like at the end to avoid rollup reading from outside
|
|
311
|
+ avcodec/ivi: Move buffer/block end check to caller of ivi_dc_transform()
|
|
312
|
+ avcodec/diracdec: Use 64bit in intermediate of global motion vector field generation
|
|
313
|
+ avcodec/truemotion2: Fix integer overflow in tm2_decode_blocks()
|
|
314
|
+ avcodec/rscc: Check that the to be uncompressed input is large enough
|
|
315
|
+ avcodec/nvenc: add driver version info for latest SDKs
|
|
316
|
+ avcodec/bsf: check that AVBSFInternal was allocated before dereferencing it
|
|
317
|
+ lavf/rawenc: Only accept the appropriate stream type for raw muxers.
|
|
318
|
+ avcodec/h263dec: fix hwaccel decoding
|
|
319
|
+ avutil/mem: Fix invalid use of av_alloc_size
|
|
320
|
+ avformat/aacdec: resync to the next adts frame on invalid data instead of aborting
|
|
321
|
+ avformat/aacdec: factorize the adts frame resync code
|
|
322
|
+ movsub_bsf: Fix mov2textsub regression
|
|
323
|
+ avformat/aacdec: fix demuxing of small frames
|
|
324
|
+ avcodec/cuviddec: improve progressive frame detection
|
|
325
|
+
|
4
|
326
|
version 4.0.4:
|
5
|
327
|
- avcodec/hevcdec: Avoid only partly skiping duplicate first slices
|
6
|
328
|
- lavc/bmp: Avoid a heap buffer overwrite for 1bpp input.
|