tiffdec: Prevent illegal memory access caused by recycled pointers.
[ffmpeg.git] / libavcodec /
2012-04-01 Alex Conversetiffdec: Prevent illegal memory access caused by recycl...
2012-04-01 Ronald S. Bultjewma: fix off-by-one in array bounds check.
2012-04-01 Ronald S. Bultjeraw: move buffer size check up.
2012-04-01 Ronald S. Bultjesvq3: protect against negative quantizers.
2012-04-01 Michael Niedermayerh263dec: Disallow width/height changing with frame...
2012-04-01 Alex Conversetiff: Make the TIFF_LONG and TIFF_SHORT types unsigned.
2012-04-01 Alex Conversesvq3: Prevent illegal reads while parsing extradata.
2012-04-01 Mans Rullgardac3: Do not read past the end of ff_ac3_band_start_tab.
2012-04-01 Fabian GreffrathFix format string vulnerability detected by -Wformat...
2012-04-01 Ronald S. Bultjeh264: fix mmxext chroma deblock to use correct TC value...
2012-04-01 Ronald S. Bultjecscd: use negative error values to indicate decode_init...
2012-04-01 Ronald S. Bultjeh264: prevent overreads in intra PCM decoding.
2012-04-01 Justin Ruggleswmaenc: fix m/s stereo encoding for the first frame
2012-04-01 Justin Ruggleswmaenc: limit allowed sample rate to 48kHz
2012-04-01 Justin Ruggleswmaenc: limit block_align to MAX_CODED_SUPERFRAME_SIZE
2012-04-01 Justin Ruggleswmaenc: require a large enough output buffer to prevent...
2012-04-01 Alex Conversewmadec: Verify bitstream size makes sense before callin...
2012-04-01 Alex Converserv10/20: Fix a buffer overread caused by losing track...
2012-04-01 Ronald S. Bultjelcl: return negative error codes on decode_init() errors.
2012-04-01 Ronald S. Bultjehuffyuv: do not abort on unknown pix_fmt; instead,...
2012-04-01 Ronald S. Bultjevmnc: return error on decode_init() failure.
2012-04-01 Ronald S. Bultjerpza: error out on buffer overreads.
2012-04-01 Ronald S. Bultjeqtrle: return error on decode_init() failure.
2012-04-01 Ronald S. Bultjevp56: error out on invalid stream dimensions.
2012-04-01 Ronald S. Bultjevorbis: fix overflows in floor1[] vector and inverse...
2012-04-01 Reinhard TartlerFix parser not to clobber has_b_frames when extradata...
2012-04-01 Ronald S. Bultjefraps: release reference buffer on pix_fmt change.
2012-04-01 Ronald S. Bultjekgv1: release reference picture on size change.
2012-04-01 Ronald S. Bultjelcl: error out if uncompressed input buffer is smaller...
2012-04-01 Alex Conversetiff: Prevent overreads in the type_sizes array.
2012-04-01 Ronald S. Bultjetruemotion2: error out if the huffman tree has no nodes.
2012-04-01 Ronald S. Bultjemjpegb: don't return 0 at the end of frame decoding.
2012-04-01 Ronald S. Bultjehuffyuv: error out on bit overrun.
2012-04-01 Ronald S. Bultjeals: prevent infinite loop in zero_remaining().
2012-04-01 Ronald S. Bultjecook: prevent div-by-zero if channels is zero.
2012-04-01 Alex Conversesmacker: Sanity check huffman tables found in the headers.
2012-04-01 Alex Converseaac: fix infinite loop on end-of-frame with sequence...
2012-04-01 Alex Conversewma: Clip WMA1 and WMA2 frame length to 11 bits.
2012-04-01 Ronald S. Bultjeflac: fix infinite loops on all-zero input or end-of...
2012-04-01 Ronald S. Bultjegolomb: avoid infinite loop on all-zero input (or end...
2012-04-01 Alex Converseqdm2: Check data block size for bytes to bits overflow.
2012-03-23 Martin Storsjöavcodec: Remove a misplaced and useless attribute_depre...
2012-03-18 Justin Rugglessmacker: validate channels and sample format.
2012-03-18 Justin Rugglessmacker: check buffer size before reading output size
2012-03-18 Justin Rugglessmacker: validate number of channels
2012-03-18 Mans Rullgardsipr: fix get_bits(0) calls
2012-03-18 Mans Rullgardmotion_est: make MotionExtContext.map_generation unsigned
2012-03-18 Laurent Aimar4xm: prevent NULL dereference with invalid huffman...
2012-03-18 Laurent Aimar4xm: clear FF_INPUT_BUFFER_PADDING_SIZE bytes in tempor...
2012-03-18 Laurent Aimarptx: check for out of bound reads
2012-03-18 Laurent Aimartiffdec: fix out of bound reads/writes
2012-03-18 Laurent Aimareacmv: check for out of bound reads
2012-03-18 Laurent Aimareacmv: fix potential pointer arithmetic overflows
2012-03-18 Laurent Aimaradpcm: fix out of bound reads due to integer overflow
2012-03-18 Laurent Aimaranm: prevent infinite loop
2012-03-18 Laurent Aimaravs: check for out of bound reads
2012-03-18 Gwenole Beauchesnevaapi: Fix VC-1 decoding (reconstruct bitstream TTFRM...
2012-03-18 Mans Rullgard4xm: fix signed overflow
2012-03-18 Mans Rullgardwmavoice: fix a signed overflow
2012-03-18 Mans Rullgardmpegvideo_enc: fix a signed overflow
2012-03-18 Mans Rullgardmpeg12enc: use sign_extend() function
2012-03-18 Mans Rullgardvp8: fix signed overflows
2012-03-18 Mans Rullgardmotion_est: fix some signed overflows
2012-03-18 Mans Rullgarddca: fix signed overflow in shift
2012-03-18 Mans Rullgardaacdec: fix undefined shifts
2012-03-18 Laurent Aimarbink: Check for various out of bound writes
2012-03-18 Laurent Aimarbink: Check for out of bound writes when building tree
2012-03-18 Mans Rullgardput_bits: fix invalid shift by 32 in flush_put_bits()
2012-03-18 Laurent Aimarmpc8: Check out of bound bands limit
2012-03-18 Laurent Aimarxan: Prevent NULL dereference with missing palette
2012-03-18 Laurent Aimarxan: Check for out of bound reads in xan_huffman_decode()
2012-03-18 Laurent Aimarxan: Fixed out of bound accesses in xan_unpack()
2012-03-18 Laurent Aimarmotionpixels: Prevent calling init_vlc() with invalid...
2012-03-18 Laurent Aimarshorten: Fix out of bound writes in fix_bitshift()
2012-03-18 Laurent Aimardsicinav: Check for out of bounds writes
2012-03-18 Laurent Aimartiertexseqv: Check for out of bound reads
2012-03-18 Laurent Aimarquickdraw: Check for out of bound reads
2012-03-18 Laurent Aimardsicinav: Check for out of bounds reads
2012-03-18 Laurent Aimarmotionpixels: Fix the size of workspace buffers
2012-03-18 Laurent Aimarmotionpixels: Clear FF_INPUT_BUFFER_PADDING_SIZE bytes...
2012-03-18 Laurent Aimarwmavoice: Check for corrupted extra data
2012-03-18 Laurent Aimarwmavoice: Check for out of bound writes
2012-03-18 Laurent Aimarxan: Prevent NULL dereferences with missing reference...
2012-03-18 Laurent Aimarbink: Prevent NULL dereferences with missing reference...
2012-03-18 Laurent Aimarwavpack: Reset internal state on corrupted blocks
2012-03-18 Laurent Aimarwmapro: Validate the number of audio channels before...
2012-03-18 Laurent Aimarshorten: Prevent block size from increasing
2012-03-18 Laurent Aimarxan: Prevent out of bound accesses
2012-03-18 Laurent Aimarvp56: Release old pictures after a resolution changes
2012-03-18 Laurent Aimarvp56: Check for missing reference frame data
2012-03-18 Laurent Aimarcinepak: Fix invalid read access on extra data
2012-03-18 Laurent Aimarcook: Fix js_vlc_bits value validation for joint stereo
2012-03-18 Laurent AimarFixed deference of NULL pointer in motionpixels decoder.
2012-03-18 Ronald S. Bultjempegvideo: set correct offset for edge emulation buffer.
2012-03-18 Ronald S. Bultjempegvideo: fix position of bottom edge.
2012-03-18 Chris Rankinqcelpdec: fix the return value of qcelp_decode_frame().
2012-03-18 Justin Rugglessipr: fix the output data size check and only calculate...
2012-03-18 Justin Rugglesmpc8: check output buffer size before decoding
2012-03-18 Justin Rugglesmpc7: return error if packet is too small.
2012-03-18 Justin Rugglesmpc7: check output buffer size before decoding
next