Stowage/ffmpeg
2
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-02-13 19:05:37 +00:00
Code Issues Projects Releases Packages Wiki Activity
89497 commits 38 branches 415 tags 290 MiB
Commit graph

22 commits

Author SHA1 Message Date
Michael Niedermayer
879521ecdc
avcodec/scpr: Test bx before use 
Fixes: out of array access on 32bit
Fixes: 54850/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-5302669294305280

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1b59de3770)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2023-06-04 20:18:13 +02:00
Michael Niedermayer
fd897acc35 avcodec/scpr: Use av_memcpy_backptr() in type 17 and 33 
This makes the changed code-path faster.

Change not tested except with the fuzzer testcase as I found no other testcase.

Improves: Timeout (136sec -> 74sec)
Improves: 16040/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-5705876062601216

Reviewed-by: Paul B Mahol <onemda@gmail.com>
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
(cherry picked from commit 950a21e83c)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2019-11-15 12:25:45 +01:00
Michael Niedermayer
6689435190 avcodec/scpr: Fix use of uninitialized variable 
Fixes: Undefined shift
Fixes: 12911/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-5677102915911680

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 53248acfb3)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2019-03-24 10:38:52 +01:00
Michael Niedermayer
007da8396f avcodec/scpr: Check for min > max in decompress_p() 
Fixes: Timeout
Fixes: 9342/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SCPR_fuzzer-4795990841229312

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 3378194ce8)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-10-28 02:22:42 +02:00
Michael Niedermayer
c4153d40d5 avcodec/scpr: Fix reading a pixel before the first 
Fixes: 5540/clusterfuzz-testcase-minimized-6122458273808384

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 0fb33a8289)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2018-02-11 19:41:43 +01:00
Michael Niedermayer
981f04b2ae avcodec/scpr: optimize shift loop. 
Speeds code up from 50sec to 15sec

Fixes Timeout
Fixes: 3242/clusterfuzz-testcase-5811951672229888

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-09-10 19:08:23 +02:00
Derek Buitenhuis
f7daed8545 scpr: Added missing error check 
Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
 2017-07-07 15:25:46 -04:00
Michael Niedermayer
5666b95c9f avcodec/scpr: mask bits to prevent out of array read 
Fixes: 1615/clusterfuzz-testcase-minimized-6625214647500800

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-16 23:14:28 +02:00
Michael Niedermayer
2171dfae8c avcodec/scpr: Fix multiple runtime error: index 256 out of bounds for type 'unsigned int [256]' 
Fixes: 1519/clusterfuzz-testcase-minimized-5286680976162816

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-13 15:54:33 +02:00
Michael Niedermayer
7ac5067146 avcodec/scpr: Check y in first line loop in decompress_i() 
Fixes: out of array access
Fixes: 1478/clusterfuzz-testcase-minimized-5285486908145664

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-11 15:51:08 +02:00
Michael Niedermayer
f1a4dd5e48 avcodec/scpr: Fix multiple runtime error: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int' 
Fixes: 1422/clusterfuzz-testcase-minimized-5030993939398656

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
 2017-05-09 19:46:17 +02:00
Paul B Mahol
807d5dcde9 avcodec/scpr: use correct linesize for prev frame 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-03-12 12:34:55 +01:00
Paul B Mahol
6d93e7d1a3 avcodec/scpr: fix top left prediction for special case when x is 0 for keyframes 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-03-03 12:28:24 +01:00
Paul B Mahol
86ab6b6e08 avcodec/scpr: check if total_freq is 0 in decode0 
Fixes SIGFPE, closes #6196.

Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-27 13:55:15 +01:00
Paul B Mahol
6d856b2579 avcodec/scpr: add support for older version 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-26 22:09:54 +01:00
Paul B Mahol
e01c32f260 avcodec/scpr: remove 4 dead store 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-24 19:49:39 +01:00
Paul B Mahol
0a28c50506 avcodec/scpr: improve motion vectors checking for out of buffer write 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-24 15:27:19 +01:00
Paul B Mahol
178cd50c47 avcodec/scpr: make sure that component value is <= 0x1F for 16 bpc 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-24 12:02:48 +01:00
Paul B Mahol
45ed942e7e avcodec/scpr: improve check for out of range motion vectors 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-23 19:45:12 +01:00
Paul B Mahol
95a5af446b avcodec/scpr: check that current row is in valid range 
Stops writing out of dst array.

Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-23 18:46:24 +01:00
Paul B Mahol
fd7af82c53 avcodec/scpr: do not allow out of array access for 16bit case 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-23 17:22:01 +01:00
Paul B Mahol
039011b6b0 avcodec: add ScreenPressor decoder 
Signed-off-by: Paul B Mahol <onemda@gmail.com>
 2017-02-22 22:57:59 +01:00