git.videolan.org Git - ffmpeg.git/rss log

Les articles publiés sur le site

• avcodec/speexdec : fix frame_size for mode == 2

  30 janvier, par James Almer

  avcodec/speexdec: fix frame_size for mode == 2
  
  Should match the non-extradata path now, and fix ticket #11078.
  
  Signed-off-by: James Almer <jamrial@gmail.com>
  

  • [DH] libavcodec/speexdec.c

• avcodec/h263dec : Check against previous dimensions instead of coded

  30 janvier, par Michael Niedermayer

  avcodec/h263dec: Check against previous dimensions instead of coded
  
  Fixes: out of array access
  Fixes: crash-a41ef3db699013f669b076f02f36942925f5a98c
  
  Found-by: Kacper Michajlow <kasper93@gmail.com>
  Reviewed-by: Kacper Michajlow <kasper93@gmail.com>
  Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
  

  • [DH] libavcodec/h263dec.c

• lavfi/f_sendcmd : clear Command on alloc failure

  29 janvier, par Marvin Scholz

  lavfi/f_sendcmd: clear Command on alloc failure
  
  If the command array failed to allocate, the current parsed
  Command has to be cleared, else memory allocated for it
  would be leaked.
  
  Fix CID 1638635
  

  • [DH] libavfilter/f_sendcmd.c

• lavfi/f_sendcmd : add helper to clear Command

  29 janvier, par Marvin Scholz

  lavfi/f_sendcmd: add helper to clear Command
  
  Makes clearing the Command more explicit and
  consistent.
  

  • [DH] libavfilter/f_sendcmd.c

• avcodec/jpegxl_parse{,r} : fix integer overflow for some malformed files

  29 janvier, par Leo Izen

  avcodec/jpegxl_parse{,r}: fix integer overflow for some malformed files
  
  If there's a very large ISOBMFF box that needs to be skipped, it can
  cause an overflow for ctx->skip. There's already a safeguard to return
  quickly if ctx->skip > bufsize, so changing ctx->skip to int64_t will
  allow this to happen even if ctx->skip would overflow a signed int.
  
  Several other members are also changed to int64_t to avoid this problem
  in other possible scenarios.
  
  Signed-off-by: Leo Izen <leo.izen@gmail.com>
  Reported-by: Kacper Michajlow <kasper93@gmail.com>
  Fixes: clusterfuzz-testcase-minimized-fuzzer_loadfile-6085331937460224
  

  • [DH] libavcodec/jpegxl_parse.c
  • [DH] libavcodec/jpegxl_parser.c