...
|
...
|
@@ -2,6 +2,71 @@ Entries are sorted chronologically from oldest to youngest within each release,
|
2
|
2
|
releases are sorted from youngest to oldest.
|
3
|
3
|
|
4
|
4
|
|
|
5
|
+version 3.3.3:
|
|
6
|
+- avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later
|
|
7
|
+- avcodec/ffv1dec_template: Fix signed integer overflow
|
|
8
|
+- avcodec/aacdec_template: Fix undefined integer overflow in apply_tns()
|
|
9
|
+- avcodec/magicyuv: Check that vlc len is not too large
|
|
10
|
+- avcodec/mjpegdec: Clip DC also on the negative side.
|
|
11
|
+- avcodec/aacps (fixed point): Fix multiple signed integer overflows
|
|
12
|
+- avcodec/ylc: Fix vlc of 31 bits
|
|
13
|
+- avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()
|
|
14
|
+- avcodec/hevcdec: do not let updated extradata corrupt state
|
|
15
|
+- avcodec/wavpack: Fix invalid shift
|
|
16
|
+- avcodec/h264_slice: Fix signed integer overflow
|
|
17
|
+- avcodec/hevc_ps: Fix integer overflow with beta/tc offsets
|
|
18
|
+- avcodec/cfhd: Fix invalid left shift of negative value
|
|
19
|
+- avcodec/vb: Check vertical GMC component before multiply
|
|
20
|
+- avcodec/hevcdec: do basic validity check on delta_chroma_weight and offset
|
|
21
|
+- avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
|
|
22
|
+- avcodec/apedec: Fix integer overflow
|
|
23
|
+- avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
|
|
24
|
+- avcodec/hevc_ps: Fix max_dec_buffer check
|
|
25
|
+- avcodec/mpeg4videodec: Fix GMC with videos of dimension 1
|
|
26
|
+- avcodec/wavpack: Fix integer overflow
|
|
27
|
+- avcodec/takdec: Fix integer overflow
|
|
28
|
+- avcodec/tiff: Update pointer only when the result is used
|
|
29
|
+- avcodec/cfhd: Check bpc before setting bpc in context
|
|
30
|
+- avcodec/cfhd: Fix undefined shift
|
|
31
|
+- avcodec/hevc_filter: Fix invalid shift
|
|
32
|
+- avcodec/mpeg4videodec: Fix overflow in virtual_ref computation
|
|
33
|
+- avcodec/lpc: signed integer overflow in compute_lpc_coefs() (aacdec_fixed)
|
|
34
|
+- avcodec/wavpack: Fix undefined integer negation
|
|
35
|
+- avcodec/aacdec_fixed: Check s for being too small
|
|
36
|
+- avcodec/htmlsubtitles: Replace very slow redundant sscanf() calls by cleaner and faster code
|
|
37
|
+- avcodec/h264: Fix mix of lossless and lossy MBs decoding
|
|
38
|
+- avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264
|
|
39
|
+- avcodec/h264_cabac: Fix CABAC+8x8dct in 4:4:4
|
|
40
|
+- avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output
|
|
41
|
+- avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows
|
|
42
|
+- avcodec/hevcpred_template: Fix left shift of negative value
|
|
43
|
+- avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps()
|
|
44
|
+- avcodec/jpeg2000dec: Check nonzerobits more completely
|
|
45
|
+- avcodec/shorten: Sanity check maxnlpc
|
|
46
|
+- avcodec/truemotion2: Move skip computation after checks
|
|
47
|
+- avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()
|
|
48
|
+- avcodec/dnxhd_parser: Do not return invalid value from dnxhd_find_frame_end() on error
|
|
49
|
+- avcodec/hevcdec: Check nb_sps
|
|
50
|
+- avcodec/hevc_refs: Check nb_refs in add_candidate_ref()
|
|
51
|
+- avcodec/mpeg4videodec: Check sprite delta upshift against overflowing.
|
|
52
|
+- avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case
|
|
53
|
+- avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble()
|
|
54
|
+- avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible
|
|
55
|
+- avcodec/libvpxdec: Check that display dimensions fit in the storage dimensions
|
|
56
|
+- avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123
|
|
57
|
+- avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int'
|
|
58
|
+- avcodec/snowdec: Fix runtime error: left shift of negative value -1
|
|
59
|
+- avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616
|
|
60
|
+- avcodec/tiff: Fix leak of geotags[].val
|
|
61
|
+- avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int'
|
|
62
|
+- avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'
|
|
63
|
+- avcodec/cfhd: Check band parameters before storing them
|
|
64
|
+- avcodec/h264_parse: Check picture structure when initializig weight table
|
|
65
|
+- avcodec/indeo4: Check remaining data in Pic hdr extension parsing code
|
|
66
|
+- avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int'
|
|
67
|
+- lavc/aarch64/simple_idct: fix idct_col4_top coefficient
|
|
68
|
+
|
|
69
|
+
|
5
|
70
|
version 3.3.2:
|
6
|
71
|
- avcodec/mpeg4videodec: Fix runtime error: signed integer overflow: 53098 * 40448 cannot be represented in type 'int'
|
7
|
72
|
- avcodec/pafvideo: Fix assertion failure
|