01:46
avformat/mxfdec: Check body_offset Fixes: signed integer overflow: 538976288 - -9223372036315799520 cannot be represented in type 'long' Fixes: 68060/clusterfuzz-testcase-minimized-ffmpeg_dem_MXF_fuzzer-5523457266745344 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Tomas Härdin <gitⓐhaerdin.se> Signed-off-by: Michael Niedermayer <michaelⓐniedermayer.cc> [DH] libavformat/mxfdec.c
14:50
avformat/mov: support SpatialAudioBox ambisonic layouts with non-diegetic channels Signed-off-by: James Almer <jamrialⓐgmail.com> [DH] libavformat/mov.c
14:37
avformat/mov: support SpatialAudioBox ambisonic layouts with arbitrary channel mapping Signed-off-by: James Almer <jamrialⓐgmail.com> [DH] libavformat/mov.c
22:09
avcodec/hevcdec: Check ref frame Fixes: NULL pointer dereferences Fixes: 68197/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-6382538823106560 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Andreas Rheinhardt <andreas.rheinhardtⓐoutlook.com> Signed-off-by: Michael Niedermayer <michaelⓐniedermayer.cc> [DH] libavcodec/hevcdec.c
21:46
avcodec/vp3: Call ff_progress_frame_unref() before ff_progress_frame_get_buffer() Fixes: Assertion !f->f && !f->progress failed at libavcodec/decode.c:1688 Fixes: 68190/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THEORA_fuzzer-5942090287611904 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Andreas Rheinhardt <andreas.rheinhardtⓐoutlook.com> Signed-off-by: Michael Niedermayer <michaelⓐniedermayer.cc> [DH] (...)
21:22
avcodec/pngdec: Check last AVFrame before deref Fixes: NULL pointer dereference Fixes: 68184/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APNG_fuzzer-4926478069334016 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michaelⓐniedermayer.cc> [DH] libavcodec/pngdec.c