[FFmpeg-cvslog] New commits on branch release/0.7

Git System git at videolan.org
Mon Apr 2 02:22:00 CEST 2012


URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=336d5ae37b31704509c3989c5572598267bb56ff
Merge: e00d6e8 b6cc1c7
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Mon Apr 2 01:44:30 2012 +0200

    Merge branch 'release/0.8' into release/0.7
    
    * release/0.8: (182 commits)
      id3v2: fix skipping extended header in id3v2.4
      Update RELEASE file for 0.7.5
      lcl: use AVERROR_INVALIDDATA instead of AVERROR_UNKNOWN
      kgv1dec: Increase offsets array size so it is large enough.
      kgv1: use avctx->get/release_buffer().
      kvmc: fix invalid reads
      nsvdec: Propagate error values instead of returning 0 in nsv_read_header().
      mjpegbdec: Fix overflow in SOS.
      shorten: Use separate pointers for the allocated memory for decoded samples.
      shorten: check for realloc failure (cherry picked from commit 9e5e2c2d010c05c10337e9c1ec9d0d61495e0c9c)
      atrac3: Fix crash in tonal component decoding.
      ws_snd1: Fix wrong samples count and crash.
      ws_snd: add some checks to prevent buffer overread or overwrite. (cherry picked from commit 417364ce1f979031ef6fee661fc15e1869bdb1b4)
      ws_snd: decode to AV_SAMPLE_FMT_U8 instead of S16.
      dca: include libavutil/mathematics.h for possibly missing M_SQRT1_2
      h264: stricter reference limit enforcement.
      jvdec: unbreak video decoding
      xxan: don't read before start of buffer in av_memcpy_backptr().
      dsicinvideo: validate buffer offset before copying pixels.
      huffyuv: add padding to classic (v1) huffman tables.
      ...
    
    Conflicts:
    	Doxyfile
    	RELEASE
    	VERSION
    
    Merged-by: Michael Niedermayer <michaelni at gmx.at>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b6cc1c77fd7d6a037c0c0c848c3621c7b1ff33b6
Merge: ceeaf42 bc5d86d
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Mon Apr 2 01:25:31 2012 +0200

    Merge remote-tracking branch 'qatar/release/0.7' into release/0.8
    
    * qatar/release/0.7: (84 commits)
      id3v2: fix skipping extended header in id3v2.4
      Update RELEASE file for 0.7.5
      lcl: use AVERROR_INVALIDDATA instead of AVERROR_UNKNOWN
      kgv1dec: Increase offsets array size so it is large enough.
      kgv1: use avctx->get/release_buffer().
      kvmc: fix invalid reads
      nsvdec: Propagate error values instead of returning 0 in nsv_read_header().
      mjpegbdec: Fix overflow in SOS.
      shorten: Use separate pointers for the allocated memory for decoded samples.
      shorten: check for realloc failure (cherry picked from commit 9e5e2c2d010c05c10337e9c1ec9d0d61495e0c9c)
      atrac3: Fix crash in tonal component decoding.
      ws_snd1: Fix wrong samples count and crash.
      ws_snd: add some checks to prevent buffer overread or overwrite. (cherry picked from commit 417364ce1f979031ef6fee661fc15e1869bdb1b4)
      ws_snd: decode to AV_SAMPLE_FMT_U8 instead of S16.
      dca: include libavutil/mathematics.h for possibly missing M_SQRT1_2
      h264: stricter reference limit enforcement.
      jvdec: unbreak video decoding
      xxan: don't read before start of buffer in av_memcpy_backptr().
      dsicinvideo: validate buffer offset before copying pixels.
      huffyuv: add padding to classic (v1) huffman tables.
      ...
    
    Conflicts:
    	RELEASE
    	libavcodec/atrac3.c
    	libavcodec/h264.c
    	libavcodec/h264_parser.c
    	libavcodec/kgv1dec.c
    	libavcodec/shorten.c
    	libavcodec/svq3.c
    	libavcodec/ws-snd1.c
    	libavcodec/xxan.c
    	libswscale/utils.c
    
    Merged-by: Michael Niedermayer <michaelni at gmx.at>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bc5d86d23d1ad377addf54d65ee665327836075e
Author: Anton Khirnov <anton at khirnov.net>
Date:   Sat Mar 31 07:52:42 2012 +0200

    id3v2: fix skipping extended header in id3v2.4
    
    In v2.4, the length includes the length field itself.
    (cherry picked from commit ddb4431208745ea270dce8fce4cba999f0ed4303)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1687c55e24cdc9d23401795e86928d3eb37a60f7
Author: Reinhard Tartler <siretart at tauware.de>
Date:   Sun Apr 1 19:08:06 2012 +0200

    Update RELEASE file for 0.7.5

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fd53da21a1707225ba9b69f3452725b175e2d8b8
Author: Reinhard Tartler <siretart at tauware.de>
Date:   Sun Mar 18 19:08:15 2012 +0100

    lcl: use AVERROR_INVALIDDATA instead of AVERROR_UNKNOWN
    
    While bogus, this change avoids the necessity to backport
    AVERROR_UNKNOWN, which is not entirely trivial.
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a0b65938b7cf37680a4ce0667444a217a151c551
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Wed Jan 25 23:23:35 2012 +0100

    kgv1dec: Increase offsets array size so it is large enough.
    
    Fixes CVE-2011-3945
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    (cherry picked from commit 807a045ab7f51993a2c1b3116016cbbd4f3d20d6)
    
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit a02e8df973f5478ec82f4c507f5b5b191a5ecb6b)
    (cherry picked from commit d5f2382d0389ed47a566ea536887af908bf9b14f)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cb8a17ddaccdbbe47748ba7ac4ce7303e47732fe
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Dec 29 09:07:32 2011 -0800

    kgv1: use avctx->get/release_buffer().
    
    Also fixes crashes on corrupt bitstreams.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 33cd32b389864f2437c94e6fd7dc109ff5f0ed06)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit e537dc230b2e123be8aebdaeee5a7d7787328b0b)
    
    Conflicts:
    
    	libavcodec/kgv1dec.c
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=24eabc53bae467cfe57e2c24dee0f33e11e697a1
Author: Gaurav Narula <gnarula94 at gmail.com>
Date:   Mon Dec 12 20:24:54 2011 +0530

    kvmc: fix invalid reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit ad3161ec1d70291efcf40121d703ef73c0b08e5b)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6fe5038753ec8da6770b1872588f5d83f6f13963
Author: Diego Biurrun <diego at biurrun.de>
Date:   Thu Jun 23 13:27:21 2011 +0200

    nsvdec: Propagate error values instead of returning 0 in nsv_read_header().
    
    This eliminates a warning about a set-but-unused variable.
    (cherry picked from commit 35fa0d47585cef28cd8191dccf0607d90c7667a6)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6ae95a0b93e8df15fe5f364535a7214be0817736
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Jan 25 13:39:24 2012 -0800

    mjpegbdec: Fix overflow in SOS.
    
    Based in part by a fix from Michael Niedermayer <michaelni at gmx.at>
    
    Fixes CVE-2011-3947
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit b57d262412204e54a7ef8fa1b23ff4dcede622e5)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit 083a8a00373b12dc06b8ae4c49eec61fb5e55f4b)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=96ed18cab1048f03ff1c825f46b25d49218f1da4
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Sun Dec 25 12:28:50 2011 +0100

    shorten: Use separate pointers for the allocated memory for decoded samples.
    
    Fixes invalid free() if any of the buffers are not allocated due to either
    not decoding a header or an error prior to allocating all buffers.
    
    Fixes CVE-2012-0858
    CC: libav-stable at libav.org
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    Signed-off-by: Justin Ruggles <justin.ruggles at gmail.com>
    (cherry picked from commit 204cb29b3c84a74cbcd059d353c70c8bdc567d98)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit 6fc3287b9ccece290c5881b92948772bbf72e68c)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a207a2fecc6a77735ab0cf209fdba0b4dd942a86
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Thu Sep 15 18:08:52 2011 -0400

    shorten: check for realloc failure (cherry picked from commit 9e5e2c2d010c05c10337e9c1ec9d0d61495e0c9c)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f728ad26f0ec87650d2986a892785c0e2b97d161
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Sat Dec 17 03:18:58 2011 +0100

    atrac3: Fix crash in tonal component decoding.
    
    Add a check to avoid writing past the end of the channel_unit.components[]
    array.
    
    Bug Found by: cosminamironesei
    Fixes CVE-2012-0853
    CC: libav-stable at libav.org
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    Signed-off-by: Justin Ruggles <justin.ruggles at gmail.com>
    (cherry picked from commit c509f4f74713b035a06f79cb4d00e708f5226bc5)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit f43b6e2b1ed47a1254a5d44c700a7fad5e9784be)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e676bbb8cfb7401cfc189a88c61e7e7c22557fa7
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Sun Dec 25 00:10:27 2011 +0100

    ws_snd1: Fix wrong samples count and crash.
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    (cherry picked from commit 9fb7a5af97d8c084c3af2566070d09eae0ab49fc)
    
    Addresses CVE-2012-0848
    
    Reviewed-by: Justin Ruggles <justin.ruggles at gmail.com>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit 697a45d861b7cd6a96718383a44f41348487f844)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=847c7cd0c8795bb68e8729f74969aa49a5dc10ad
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Mon Sep 12 09:41:06 2011 -0400

    ws_snd: add some checks to prevent buffer overread or overwrite. (cherry picked from commit 417364ce1f979031ef6fee661fc15e1869bdb1b4)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=137007b5bfbee8992ac088732c39cc1301bb7a3a
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Mon Sep 12 08:55:43 2011 -0400

    ws_snd: decode to AV_SAMPLE_FMT_U8 instead of S16.
    
    8-bit unsigned is the native sample format.
    (cherry picked from commit 2322ced8da990835717a176b8d2c32961cfecd3e)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=90db3c435ea5e77befe186b7079c8a7f4bf457d2
Author: Kostya Shishkov <kostya.shishkov at gmail.com>
Date:   Wed Mar 7 20:07:17 2012 +0100

    dca: include libavutil/mathematics.h for possibly missing M_SQRT1_2
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8b819fd9d3f363483559a3e9aeb8b78acba47bb7
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Mar 13 16:26:44 2012 -0700

    h264: stricter reference limit enforcement.
    
    Progressive images can have only 16 references, error out if there are
    more, since the data is almost certainly corrupt, and the invalid value
    will lead to random crashes or invalid writes later on.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit e0febda22d0e0fab094a9c886b0e0f0f662df1ef)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=81c5b4ddcb08d65b691e944d8d8cdc144c19dc9b
Author: Paul B Mahol <onemda at gmail.com>
Date:   Wed Mar 14 03:02:02 2012 +0000

    jvdec: unbreak video decoding
    
    The safe bitstream reader broke it since the buffer size was specified
    in bytes instead of bits.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    CC: libav-stable at libav.org
    (cherry picked from commit a1c036e961a32f7208e7315dabfa0ee99d779edb)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5ae49ddaa447bb4fba287f92ca508caba399ffbd
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Mar 8 16:32:46 2012 -0800

    xxan: don't read before start of buffer in av_memcpy_backptr().
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit f1279e286b00e99f343adb51e251f036a3df6f32)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=311361348dc5af77ad189bba846f2fdaff85a5c4
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Sun Mar 11 07:28:54 2012 -0700

    dsicinvideo: validate buffer offset before copying pixels.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit c95fefa0420be9cc0f09a95041acf11114aaacd0)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=99536be9d46b49e9496cfe6d49d82d3b0fe5e44c
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Mar 7 16:29:23 2012 -0800

    huffyuv: add padding to classic (v1) huffman tables.
    
    We slightly overread the input buffer, so we require
    padding at the end of the buffer, as is documented in the
    get_bits API. Without padding, we'll read uninitialized
    data or beyond the end of the .rodata, which may crash.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 4ffe5e2aa5241f8da9afd2c8fbc854dcc916c5f9)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bbe316dfb425edecd98e3fbef93c17abe6bb5cb8
Author: Alex Converse <alex.converse at gmail.com>
Date:   Tue Mar 6 17:00:29 2012 -0800

    tiffdec: Prevent illegal memory access caused by recycled pointers.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit fd0be63049ed46660993d0550a4f0847a0b942ea)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b4a223fd1936f8c7d3dd48f37f49790b0d04f429
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Mar 7 14:18:14 2012 -0800

    wma: fix off-by-one in array bounds check.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit b4bccf3e4e58f6fe58043791ca09db01a4343fac)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4924520513d06b4d9169a1d3e0374d5a48bc02e0
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Mar 6 16:08:10 2012 -0800

    raw: move buffer size check up.
    
    This way, it protects against overreads for 4bpp/2bpp content also.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit cc5dd632cecc5114717d0b90f8c2be162b1c6ee8)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f2e412d050ae9a0dcdea515f1c02620c6dcf8c47
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Mar 6 17:24:20 2012 -0800

    smacker: error out if palette copy-with-offset overruns palette size.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit a93b572ae4f517ce0c35cf085167c318e9215908)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6dfe865aed25b52b181afddd37e1622d34f57d0b
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Mon Mar 5 17:03:32 2012 -0800

    svq3: protect against negative quantizers.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 11b940a1a8e7e5d5b212935a3ce78aeda577f5f2)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=853ce33dbc372071fda0a20182b07f00d6eb2a0d
Author: Alex Converse <alex.converse at gmail.com>
Date:   Tue Feb 21 15:37:35 2012 -0800

    mov: Add more HDV and XDCAM FourCCs.
    
    Reference: VLC
    (cherry picked from commit b142496c5630b9bc88fb9eaccae7f6bd62fb23e7)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5015ada0ec11b2ace2588153451775487731b97b
Author: Alex Converse <alex.converse at gmail.com>
Date:   Tue Feb 21 14:08:02 2012 -0800

    mov: Add support for MPEG2 HDV 720p24 (hdv4)
    
    (cherry picked from commit 0ad522afb3a3b3d22402ecb82dd4609f7655031b)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4be63587e110c05cda3101abf2e3745d919f3fae
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Fri Feb 17 13:35:10 2012 -0800

    h263dec: Disallow width/height changing with frame threads.
    
    Fixes CVE-2011-3937
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    (cherry picked from commit 71db86d53b5c6872cea31bf714a1a38ec78feaba)
    
    Conflicts:
    
    	libavcodec/h263dec.c
    
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a642953b0f1c87592d2e7bff5b67ed024bc29a64
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Feb 23 10:22:51 2012 -0800

    tiff: Make the TIFF_LONG and TIFF_SHORT types unsigned.
    
    TIFF v6.0 (unimplemented) adds signed equivalents.
    (cherry picked from commit e32548d1331ce05a054f1028fcdda8823a4f215a)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f5ce67d837cd686f12c515e601acd6e2a5df05a7
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Feb 9 20:21:47 2012 -0800

    svq3: Prevent illegal reads while parsing extradata.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit 9e1db721c4329f4ac166a0bcc002c8d75f831aba)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b0888b8a48dbc4a5aa0aaed016b72fbbb7c30261
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Feb 9 17:11:55 2012 -0800

    dv: Fix small overread in audio frequency table.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit 0ab3687924457cb4fd81897bd39ab3cc5b699588)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2c199cb253cb98fdc26b26eba1e401daf4dc1d80
Author: Mans Rullgard <mans at mansr.com>
Date:   Tue Jan 31 10:20:33 2012 -0800

    ac3: Do not read past the end of ff_ac3_band_start_tab.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit 034b03e7a0e8e4f8f66c82b736f2c0aa7c063ec0)
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=00fa6ffe1a0b252d6a81815e51f125225cd0b97a
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Jan 26 15:08:26 2012 -0800

    dv: Fix small stack overread related to CVE-2011-3929 and CVE-2011-3936.
    
    Found with asan.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit 2d1c0dea5f6b91bec7f5fa53ec050913d851e366)
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=44e182d41e3a73548f3f5e8445ec428d3846e6d6
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Tue Jan 24 17:51:40 2012 +0100

    dv: Fix null pointer dereference due to ach=0
    
    dv: Fix null pointer dereference due to ach=0
    
    Fixes part2 of CVE-2011-3929
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Reviewed-by: Roman Shaposhnik <roman at shaposhnik.org>
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit 5a396bb3a66a61a68b80f2369d0249729bf85e04)
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bb737d381f6d6413899a0697f426fb082eac66fc
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Tue Jan 24 17:48:23 2012 +0100

    dv: check stype
    
    dv: check stype
    
    Fixes part1 of CVE-2011-3929
    Possibly fixes part of CVE-2011-3936
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Reviewed-by: Roman Shaposhnik <roman at shaposhnik.org>
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit 635bcfccd439480003b74a665b5aa7c872c1ad6b)
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0100c4b1b0736e0f5b3c98f9b0ab8acbef574888
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Jan 26 17:23:09 2012 -0800

    nsvdec: Propagate errors
    
    Related to CVE-2011-3940.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit c898431ca5ef2a997fe9388b650f658fb60783e5)
    
    Conflicts:
    
    	libavformat/nsvdec.c
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=be524c186b50337db64d34a5726dfe3e8ea94f09
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Jan 26 17:21:46 2012 -0800

    nsvdec: Be more careful with av_malloc().
    
    Check results for av_malloc() and fix an overflow in one call.
    
    Related to CVE-2011-3940.
    
    Based in part on work from Michael Niedermayer.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit 8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=65beb8c1173906b0541442713cb29e8ba44c47ef
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Tue Jan 24 22:20:26 2012 +0100

    nsvdec: Fix use of uninitialized streams.
    
    Fixes CVE-2011-3940 (Out of bounds read resulting in out of bounds write)
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    (cherry picked from commit 5c011706bc752d34bc6ada31d7df2ca0c9af7c6b)
    
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit 6a89b41d9780325ba6d89a37f2aeb925aa68e6a3)
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f375e19f37c7d1738cde70e43c3f64c6ab68c928
Author: Fabian Greffrath <fabian at greffrath.com>
Date:   Mon Mar 5 16:06:01 2012 +0100

    Fix format string vulnerability detected by -Wformat-security.
    
    Signed-off-by: Diego Biurrun <diego at biurrun.de>
    (cherry picked from commit c9dbac36ad4bac07f6c1d06d465e361ab55bcb95)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=54e947273cefc4791d7b9e10823ffd1756cadf17
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Sun Feb 26 08:57:14 2012 -0800

    h264: fix mmxext chroma deblock to use correct TC values. (cherry picked from commit b0c4f04338234ee011d7b704621347ef232294fe)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e3e05963c1eff2481da3a2ea9ce662336391e2ca
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 29 13:55:09 2012 -0800

    cscd: use negative error values to indicate decode_init() failures.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 8a9faf33f2b4f40afbc3393b2be49867cea0c92d)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bd37b95383b6bd6b69aa8dba8eebd2cbef2aeed8
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 18:48:27 2012 -0800

    h264: prevent overreads in intra PCM decoding.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit d1604b3de96575195b219028e2c4f08b2259aa7d)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=58133bb010c1587515ab4a8bf990760ca28b4dda
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Fri Mar 2 17:11:25 2012 -0500

    wmaenc: fix m/s stereo encoding for the first frame
    
    We need to set ms_stereo in encode_init() in order to avoid incorrectly
    encoding the first frame as non-m/s while flagging it as m/s. Fixes an
    uncomfortable pop in the left channel at the start of playback.
    
    CC:libav-stable at libav.org
    (cherry picked from commit 51ddf35c9017018e58c15275ff5b129647a0c94d)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=43e3e7764c498138c28507c5a7dfcd08c0748633
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Fri Mar 2 16:27:57 2012 -0500

    wmaenc: limit allowed sample rate to 48kHz
    
    ff_wma_init() allows up to 50kHz, but this generates an exponent band
    size table that requires 65 bands. The code assumes 25 bands in many
    places, and using sample rates higher than 48kHz will lead to buffer
    overwrites.
    
    CC:libav-stable at libav.org
    (cherry picked from commit 1ec075cfecac01f9a289965db06f76365b0b1737)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=74bd46e82ad6e1cf57b5427a53a5213e7dfa61cd
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Fri Mar 2 16:10:00 2012 -0500

    wmaenc: limit block_align to MAX_CODED_SUPERFRAME_SIZE
    
    This is near the theoretical limit for wma frame size and is the most that
    our decoder can handle. Allowing higher bit rates will just end up padding
    each frame with empty bytes.
    
    Fixes invalid writes for avconv when using very high bit rates.
    
    CC:libav-stable at libav.org
    (cherry picked from commit c2b8dea1828f35c808adcf12615893d5c740bc0a)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c932844882f315928688c704fd9cdcb7eee37d17
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Fri Mar 2 16:33:33 2012 -0500

    wmaenc: require a large enough output buffer to prevent overwrites
    
    The maximum theoretical frame size is around 17000 bytes. Although in
    practice it will generally be much smaller, we require a larger buffer
    just to be safe.
    
    CC: libav-stable at libav.org
    (cherry picked from commit dfc4fdedf8cfc56a505579b1f2c1c5efbce4b97e)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=433aaeb2f1cf679f254f5f1c7220b4100bc89c68
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Mar 1 17:01:22 2012 -0800

    matroska: check buffer size for RM-style byte reordering.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 9c239f6026a170866a4a0c96908980ac2cfaa8b3)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=88b47010c4e2ed0d756f30c54b0d88153c33aec5
Author: Alex Converse <alex.converse at gmail.com>
Date:   Fri Jan 27 14:24:07 2012 -0800

    wmadec: Verify bitstream size makes sense before calling init_get_bits.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    (cherry picked from commit 48f1e5212c90b511c90fa0449655abb06a9edda2)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b56b7b9081d5b9048732c0db171c7b6af9831bad
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Mar 1 14:07:22 2012 -0800

    rv10/20: Fix a buffer overread caused by losing track of the remaining buffer size.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 2f6528537fdd88820f3a4683d5e595d7b3a62689)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bd0d32d13181c452906011e33000fc4328771005
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 29 17:50:28 2012 -0800

    lcl: return negative error codes on decode_init() errors.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit bd17a40a7e0eba21b5d27c67aff795e2910766e4)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d680295d0c3662793292338d0fd01b044601f338
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Mar 1 09:41:22 2012 -0800

    huffyuv: do not abort on unknown pix_fmt; instead, return an error.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 63c9de6469005974288f4e4d89fc79a590e38c06)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ced190c96c1fa99ca395ad02290f9784f07b07ee
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 19:00:48 2012 -0800

    vmnc: return error on decode_init() failure.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 07a180972fb369bb59bf6d4f8edb4598c51e80d2)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e15d137ecfa9e78797e7f25b5aa32834f00f2559
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 17:04:33 2012 -0800

    rpza: error out on buffer overreads.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 78e9852a2e3b198ecd69ffa0deab3fa22a8e5378)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=87a1169ab85d4232daff457b16c2fac9280fe608
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 19:00:39 2012 -0800

    qtrle: return error on decode_init() failure.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit e54ae60e46f737b8e9a96548971091f7ab6b8f7c)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4f64456a144d89cc026048816031e8c3dcd29737
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 18:21:31 2012 -0800

    swscale: fix another integer overflow.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 791de61bbb0d2bceb1037597b310e2a4a94494fd)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f28ec733798ceb2fc4a9c8a9c39c73e8d447310f
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Feb 23 11:19:33 2012 -0800

    vp56: error out on invalid stream dimensions.
    
    Prevents crashes when playing corrupt vp5/6 streams.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 8bc396fc0e8769a056375c1c211f389ce0e3ecc5)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a2d5e741a889bfed621e18a94ff266d49d280557
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 28 16:13:46 2012 -0800

    asf: don't seek back on EOF.
    
    Seeking back on EOF will reset the EOF flag, causing us to re-enter
    the loop to find the next marker in the ASF file, thus potentially
    causing an infinite loop.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit bb6d5411e1e1a8e0608b1af1c4addee654dcbac5)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=18caebca4c91605fd0a9f5bc339a63be9a6c977a
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 12:21:22 2012 -0800

    asf: error out on ridiculously large minpktsize values.
    
    They cause various issues further down in demuxing.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 6e57a02b9f639af53acfa9fc742c1341400818f8)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=117b8b00cc12efb473402a8d6ab1e9013ea0a851
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Jan 10 17:01:26 2012 -0800

    vorbis: fix overflows in floor1[] vector and inverse db table index.
    
    (cherry picked from commit 24947d4988012f1f0fd467c83418615adc11c3e8)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a02da9ceaf298e57bd6f579ea6158164d32ed18e
Author: Reinhard Tartler <siretart at tauware.de>
Date:   Sun Feb 26 10:50:45 2012 +0100

    Fix parser not to clobber has_b_frames when extradata is set.
    
    Because in contrast to the decoder, the parser does not setup low_delay.
    The code in parse_nal_units would always end up setting has_b_frames
    to "1", except when stream is explicitly marked as low delay.
    Since the parser itself would create 'extradata', simply reopening
    the parser would cause this.
    
    This happens for instance in estimate_timings_from_pts(), which causes the
    parser to be reopened on the same stream.
    
    This fixes Libav #22 and FFmpeg (trac) #360
    
    CC: libav-stable at libav.org
    
    Based on a patch by Reimar Döffinger <Reimar.Doeffinger at gmx.de>
    (commit 31ac0ac29b6bba744493f7d1040757a3f51b9ad7)
    
    Comments and description adapted by Reinhard Tartler.
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit 790a367d9ecd04360f78616765ee723f3fe65645)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=811989e91092bfa8cbcf6305eee7c1353da99809
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 22 11:33:24 2012 -0800

    rm: prevent infinite loops for index parsing.
    
    Specifically, prevent jumping back in the file for the next index, since
    this can lead to infinite loops where we jump between indexes referring
    to each other, and don't read indexes that don't fit in the file.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit aac07a7a4c2c7a4a29cf6dbc88c1b9fdd191b99d)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=678737c26be4fb93dc6b3ede04b8231bd39b2e3b
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 24 14:11:04 2012 -0800

    fraps: release reference buffer on pix_fmt change.
    
    Prevents crash when trying to copy from a non-existing plane in e.g.
    a RGB32 reference image to a YUV420P target image
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 830f70442a87a31f7c75565e9380e3caf8333b8a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=25784c040904d3b5bc532583495b0a473360e246
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 24 16:27:53 2012 -0800

    kgv1: release reference picture on size change.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 6c4c27adb61b2881a94ce5c7d97ee1c8adadb5fe)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d10c22d33ce3d134025bc7fb0b2acbd58a0cef50
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Feb 23 16:09:36 2012 -0800

    lcl: error out if uncompressed input buffer is smaller than framesize.
    
    This prevents crashes when trying to read beyond the end of the buffer
    while decoding frame data.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit be129271eac04f91393bf42a490ec631e1a9abea)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b1d9a808633f695aa74b5c8b59eb628bc1bea1e2
Author: Alex Converse <alex.converse at gmail.com>
Date:   Thu Feb 23 10:47:50 2012 -0800

    tiff: Prevent overreads in the type_sizes array.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 447363870f2f91e125e07ac2d0820359a5d86b06)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=cd6c5e16c6ae536435bfde9b455b0aca6e09cbae
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Feb 23 11:53:27 2012 -0800

    swf: check return values for av_get/new_packet().
    
    Prevents crashers when using the packet if allocation failed.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 31632e73f47d25e2077fce729571259ee6354854)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=18b2f23ef83cf317fcf0de6035878407ba68829c
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 22 12:19:52 2012 -0800

    truemotion2: error out if the huffman tree has no nodes.
    
    This prevents crashers and errors further down when reading nodes in the
    empty tree.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 2b83e8b7005d531bc78b0fd4f699e9faa54ce9bb)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=33149928edef047fb6391cf8a84602a213c62921
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 16:27:36 2012 -0800

    mjpegb: don't return 0 at the end of frame decoding.
    
    Return 0 indicates "please return the same data again", i.e. it causes
    an infinite loop. Instead, return that we consumed the buffer if we
    finished decoding succesfully, or return an error if an error occurred.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 74699ac8c8b562e9f8d26e21482b89585365774a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9a331217b00be566e8cc7afcd4df916b43e1756b
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 12:21:18 2012 -0800

    asf: prevent packet_size_left from going negative if hdrlen > pktlen.
    
    This prevents failed assertions further down in the packet processing
    where we require non-negative values for packet_size_left.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 41afac7f7a67c634c86b1d17fc930e9183d4aaa0)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2380a3d37f0b94436db53aa56491cbc9203bc8fe
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 15:00:47 2012 -0800

    huffyuv: error out on bit overrun.
    
    On EOF, get_bits() will continuously return 0, causing an infinite
    loop.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 84c202cc37024bd78261e4222e46631ea73c48dd)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4509129e9d04c93a3de4005787a058d1b950eb03
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 12:28:26 2012 -0800

    als: prevent infinite loop in zero_remaining().
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit af468015d972c0dec5c8c37b2685ffa5cbe4ae87)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d031302e0ec6bfddb905f4827782f9e6e338cf9d
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 17 12:10:33 2012 -0800

    cook: prevent div-by-zero if channels is zero.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 941fc1ea1ed7f7d99a8b9e2607b41f2f2820394a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0fe53216340e2bab1bb07df6fcdc14f742f3e69c
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 22 16:48:38 2012 -0800

    swscale: take first/lastline over/underflows into account for MMX.
    
    Fixes crashes for extremely large resizes (several 100-fold).
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 1d8c4af396b6ed84c84b5ebf0bf1163c4a7a3017)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b2b2dc61fa95279f78a8c425f02bdca09bdf2821
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 22 16:46:31 2012 -0800

    swscale: fix overflows in filterPos[] calculation for large sizes.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 19a65b5be47944c607a9e979edb098924d95f2e4)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ce99c1bfb5968ea680c6c48a52c407677db2fe82
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Sat Feb 11 08:42:28 2012 -0800

    swscale: enforce a minimum filtersize.
    
    At very small dimensions, this calculation could lead to zero-sized
    filters, which leads to uninitialized output, zero-sized allocations,
    loop overflows in SIMD that uses do{..}while(i++<filtersize); instead
    of for(i=0;i<filtersize;i++){..} and several other similar failures.
    Therefore, require a minimum filtersize of 1.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit dae2ce361a2b5fd9be1d43e5e8c00bdbc5f03e3d)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fd3af2950ace3b78e3003432873509dd3544f982
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Jan 25 16:12:42 2012 -0800

    smacker: Sanity check huffman tables found in the headers.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    
    CC: libav-stable at libav.org
    (cherry picked from commit 9adf25c1cf78dbf1d71bf386c49dc74cb8a60df0)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6c12293f6c3c91d5fbbb1146ad0f77b887abed48
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Fri Feb 24 16:12:18 2012 -0800

    matroska: don't overwrite string values until read/alloc was succesful.
    
    This prevents certain tags with a default value assigned to them (as per
    the EBML syntax elements) from ever being assigned a NULL value. Other
    parts of the code rely on these being non-NULL (i.e. they don't check for
    NULL before e.g. using the string in strcmp() or similar), and thus in
    effect this prevents crashes when reading of such specific tags fails,
    either because of low memory or because of targeted file corruption.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit cd40c31ee9ad2cca6f3635950b002fd46be07e98)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=dd7b323d9a2f6ddc0e277403fdbd06226306f4a1
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Jan 25 14:34:21 2012 -0800

    matroskadec: Pad AAC extradata.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    
    CC: libav-stable at libav.org
    (cherry picked from commit d2ee8c17793201ce969afd1f433ba1580c143cd2)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bf9f26cef73eea9d9c2e73b89a5fe88e5aedc737
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Feb 22 11:05:42 2012 -0800

    aac: fix infinite loop on end-of-frame with sequence of 1-bits.
    
    Based-on-work-by: Ronald S. Bultje <rsbultje at gmail.com>
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 1cd9a6154bc1ac1193c703cea980ed21c3e53792)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0fbde741cbca76e826d0dce446480b02da5f6706
Author: Alex Converse <alex.converse at gmail.com>
Date:   Tue Jan 24 18:43:43 2012 -0800

    wma: Clip WMA1 and WMA2 frame length to 11 bits.
    
    The MDCT buffers in the decoder are only sized for up to 11 bits. The
    reverse engineered documentation for WMA1/2 headers say that that for
    all samplerates above 32kHz 11 bits are used. 12 and 13 bit support
    were added for WMAPro. I was unable to make any Microsoft tools generate
    a test file at a samplerate above 48kHz.
    
    Discovered by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    
    CC: libav-stable at libav.org
    (cherry picked from commit d78bb1a4b2a3a415b68e4e6dd448779eccec64e3)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ec961c89194aa090ab39f2cd4336479c909e532b
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Wed Feb 15 09:52:11 2012 -0800

    flac: fix infinite loops on all-zero input or end-of-stream.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 52e4018be47697a60f4f18f83551766df31f5adf)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3b5e1494c6e4bee4a0823b02d1342185252461d6
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Tue Feb 14 11:50:57 2012 -0800

    golomb: avoid infinite loop on all-zero input (or end of buffer).
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit c6643fddba73560f26f90d327c84d8832222a720)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ccd528cc32024195c0ae1e5420223bff6ffc5317
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Jan 25 15:27:11 2012 -0800

    qdm2: Check data block size for bytes to bits overflow.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    
    CC: libav-stable at libav.org
    (cherry picked from commit dac56d9ce01eb9963f28f26b97a81db5cbd46c1c)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e00d6e80ff62d151fb9c20336ee365ca42854a69
Author: Martin Storsjö <martin at martin.st>
Date:   Wed Nov 2 17:54:00 2011 +0200

    avcodec: Remove a misplaced and useless attribute_deprecated
    
    If attribute_deprecated is used in an enum declaration, it
    should follow the 'enum' keyword, otherwise it's ignored
    silently. This is the only case of attribute_deprecated for
    enum declarations currently.
    
    Currently, this attribute_deprecated doesn't have any effect.
    If moved to the right place, it emits a warning every single
    time avcodec.h is included, like this:
    
    avcodec.h:2827: warning: ‘AVLPCType’ is deprecated (declared at avcodec.h:543)
    
    There is already a working attribute_deprecated for the
    corresponding field in AVCodecContext, so therefore this
    one shouldn't be needed.
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit 1b6da627d49e98fe7661c9aa9ec4e16ab04dfda4)
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ceeaf424513fc019228f2cb88ea468940eb61648
Author: Martin Storsjö <martin at martin.st>
Date:   Wed Nov 2 17:54:00 2011 +0200

    avcodec: Remove a misplaced and useless attribute_deprecated
    
    If attribute_deprecated is used in an enum declaration, it
    should follow the 'enum' keyword, otherwise it's ignored
    silently. This is the only case of attribute_deprecated for
    enum declarations currently.
    
    Currently, this attribute_deprecated doesn't have any effect.
    If moved to the right place, it emits a warning every single
    time avcodec.h is included, like this:
    
    avcodec.h:2827: warning: ‘AVLPCType’ is deprecated (declared at avcodec.h:543)
    
    There is already a working attribute_deprecated for the
    corresponding field in AVCodecContext, so therefore this
    one shouldn't be needed.
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit 1b6da627d49e98fe7661c9aa9ec4e16ab04dfda4)
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c321f2abca6a5bd4b1600ffa35bf2175dd55b388
Author: Martin Storsjö <martin at martin.st>
Date:   Wed Nov 2 17:54:00 2011 +0200

    avcodec: Remove a misplaced and useless attribute_deprecated
    
    If attribute_deprecated is used in an enum declaration, it
    should follow the 'enum' keyword, otherwise it's ignored
    silently. This is the only case of attribute_deprecated for
    enum declarations currently.
    
    Currently, this attribute_deprecated doesn't have any effect.
    If moved to the right place, it emits a warning every single
    time avcodec.h is included, like this:
    
    avcodec.h:2827: warning: ‘AVLPCType’ is deprecated (declared at avcodec.h:543)
    
    There is already a working attribute_deprecated for the
    corresponding field in AVCodecContext, so therefore this
    one shouldn't be needed.
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit 1b6da627d49e98fe7661c9aa9ec4e16ab04dfda4)
    
    Signed-off-by: Martin Storsjö <martin at martin.st>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a3d331f2d88ec77dc60f6eb8de89e8d778cc9938
Merge: 3a3f2b5 73ad066
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Mon Mar 19 05:14:44 2012 +0100

    Merge remote-tracking branch 'qatar/release/0.7' into release/0.8
    
    * qatar/release/0.7: (96 commits)
      intfloat_readwrite: fix signed addition overflows
      smacker: validate channels and sample format.
      smacker: check buffer size before reading output size
      smacker: validate number of channels
      sipr: fix get_bits(0) calls
      motion_est: make MotionExtContext.map_generation unsigned
      4xm: prevent NULL dereference with invalid huffman table
      4xmdemux: prevent use of uninitialized memory
      4xm: clear FF_INPUT_BUFFER_PADDING_SIZE bytes in temporary buffers
      ptx: check for out of bound reads
      tiffdec: fix out of bound reads/writes
      eacmv: check for out of bound reads
      eacmv: fix potential pointer arithmetic overflows
      adpcm: fix out of bound reads due to integer overflow
      anm: prevent infinite loop
      avsdemux: check for out of bound writes
      avs: check for out of bound reads
      avsdemux: check for corrupted data
      mxfdec: Fix some buffer overreads caused by the misuse of AVPacket related functions.
      vaapi: Fix VC-1 decoding (reconstruct bitstream TTFRM correctly).
      ...
    
    Conflicts:
    	libavcodec/adpcm.c
    	libavcodec/bink.c
    	libavcodec/h264.c
    	libavcodec/h264.h
    	libavcodec/h264_cabac.c
    	libavcodec/h264_cavlc.c
    	libavcodec/motion_est_template.c
    	libavcodec/mpegvideo.c
    	libavcodec/nellymoserdec.c
    	libavcodec/ptx.c
    	libavcodec/svq3.c
    	libavcodec/vaapi_vc1.c
    	libavcodec/xan.c
    	libavfilter/vf_scale.c
    	libavformat/4xm.c
    	libavformat/flvdec.c
    	libavformat/mpeg.c
    	tests/ref/fate/motionpixels
    
    Merged-by: Michael Niedermayer <michaelni at gmx.at>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=73ad066939bc435ba2cc47071a9dc617f8a9dda4
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 02:16:29 2011 +0100

    intfloat_readwrite: fix signed addition overflows
    
    These additions might overflow the signed range for large
    input values.  Converting to unsigned before the addition
    rather than after avoids such undefined behaviour.  The
    result under normal two's complement wraparound remains
    unchanged.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 88d1e2b2b0a129365a62efd666db0394e8ffbe08)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1cc0b0863572cc4339ff38b04f48b13ec64062a2
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 21 11:49:33 2011 -0400

    smacker: validate channels and sample format.
    
    (cherry picked from commit ff1f89de2da3472d133e2c95bf7c9ad2d88df33d)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b3d7fffee3bf0e2b28ce98ba609b7fd2099938db
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 21 11:42:55 2011 -0400

    smacker: check buffer size before reading output size
    
    (cherry picked from commit cf044f8bff0d28dbc34492f18b0d18b3ba8bad9d)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ef7a4df4584db51a97edea3b1140661faf4ddf56
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 21 11:37:51 2011 -0400

    smacker: validate number of channels
    
    (cherry picked from commit e190e453bd1e4d4b409ed3556b3a50d1087c15d7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3b7a1ba90ec94fe052b6ea085ae6f3f3bfd9ba27
Author: Mans Rullgard <mans at mansr.com>
Date:   Mon Oct 10 20:41:31 2011 +0100

    sipr: fix get_bits(0) calls
    
    Zero-length get_bits() is undefined, must check before calling.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit c79d2a20bad59298188171f1316a830d563a41ee)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=da73a2005aa4fbea03226eadbb4a1afd1d860cca
Author: Mans Rullgard <mans at mansr.com>
Date:   Sun Oct 9 20:18:34 2011 +0100

    motion_est: make MotionExtContext.map_generation unsigned
    
    The way this value is used, it should be an unsigned type.
    While the numerical value has no meaning, unsigned wraparound
    is relied upon.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit cb668476ab1343d27e03edc0b32f57ca7a187471)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6b011631e92073b68a1f67c8769946db1c28d623
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Oct 2 00:48:11 2011 +0000

    4xm: prevent NULL dereference with invalid huffman table
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 1b1182ce97db7a97914bb7713eba66fee5d93937)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5ab326d7db3fd3feba570188b49dd4cd69105e9c
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Oct 2 00:48:11 2011 +0000

    4xmdemux: prevent use of uninitialized memory
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 79964745b3ed5a700f4f0dda56c7360497328c88)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=39fd8d0083f416812bce028126ece47b418a203b
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Oct 2 00:48:11 2011 +0000

    4xm: clear FF_INPUT_BUFFER_PADDING_SIZE bytes in temporary buffers
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 8d518a9c4fe92e2497565f1765da7f913be8b1e7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b3bdefb01b0dabcbb55a07d0f3370cb7ef903e85
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Oct 2 00:48:12 2011 +0000

    ptx: check for out of bound reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit dc64f203a62083c3d5f81e8201018279c29581af)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4eb51d96dd27bcd21ec2248bd3475d6ed2df42fc
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:33 2011 +0000

    tiffdec: fix out of bound reads/writes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 04a845caa7cdcdd1457f8c0dde52a7b2085ed92f)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d75c80e9427eef962b1de8ce3dd0246dd2ec5c05
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:32 2011 +0000

    eacmv: check for out of bound reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 46cb2f6a2928a7fa4bee3f09b0475ccb8cdd2064)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=34d6f22a571e230b519223e779e14b93d7e20989
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:32 2011 +0000

    eacmv: fix potential pointer arithmetic overflows
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 8df8a87e3fd5bd0c3dabc676aae8fd84992932dc)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=518c72474d3fa3e90c80b2a9c6b8851f4be26544
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:32 2011 +0000

    adpcm: fix out of bound reads due to integer overflow
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit c7f89064e2f0fef8198aadf64b0daf12787404ee)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=39fed2e95b74dcfe8f4a87835bb2c00ab07d030d
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:32 2011 +0000

    anm: prevent infinite loop
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 2475f1a83ccf313d828b25f1769e3a37442ecf64)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7fa13e12e6eb0c791578e53a32dd6de0de0f8743
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:31 2011 +0000

    avsdemux: check for out of bound writes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 6de33611c918e6ad5bbc878840a59607cb42b8c0)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ab201f6f1bca54324c05f8e7254a7a183999fbfc
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:31 2011 +0000

    avs: check for out of bound reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit de049a95f4a8089b2878c7fcef6cac7e88a8f1bf)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=b696d61518bba0514cf72ce765572275d12c0bf7
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 23:42:31 2011 +0000

    avsdemux: check for corrupted data
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 76c6971a6464705f263fc30e537b370a3a7c853b)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a23bcc923d73bfe5fe1d4c8e43359466b24bb0ab
Author: Alex Converse <alex.converse at gmail.com>
Date:   Fri Oct 7 18:41:06 2011 -0700

    mxfdec: Fix some buffer overreads caused by the misuse of AVPacket related functions.
    
    (cherry picked from commit 0c46e958d1fd3817b8e9fa048d0450d509c80378)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=559261ce499029fdd32b2793c143b16663fc73e1
Author: Gwenole Beauchesne <gwenole.beauchesne at intel.com>
Date:   Mon Oct 10 13:51:41 2011 +0200

    vaapi: Fix VC-1 decoding (reconstruct bitstream TTFRM correctly).
    
    Signed-off-by: Diego Biurrun <diego at biurrun.de>
    (cherry picked from commit 53efb758c045900f512c947074900c0dbc988685)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f9d17e6f54bad7a3fa287882dad7780b188b59bf
Author: Mans Rullgard <mans at mansr.com>
Date:   Sun Oct 9 20:38:01 2011 +0100

    4xm: fix signed overflow
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 84dda407628e298f33d610e9e04a8b2945d24665)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0b1ac7bf4f8d091e03736decc7f8ac0357e80e5c
Author: Mans Rullgard <mans at mansr.com>
Date:   Sun Oct 9 20:46:22 2011 +0100

    wmavoice: fix a signed overflow
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit ba3f07d0611d9a6c10eaa90b3c058ecdffe76676)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=af0a56e6ef3dcc140b960808b8a419d32a229775
Author: Mans Rullgard <mans at mansr.com>
Date:   Sun Oct 9 20:32:58 2011 +0100

    mpegvideo_enc: fix a signed overflow
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 05795f35be4b479bfa8d60ed3eb13e0f89e439c0)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5e3ba60e6f6a949e030d479cb4bcd8dd63b76a5d
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 01:59:51 2011 +0100

    crc: fix signed overflow
    
    This fixes a signed overflow from i << 24 when i == 255 by
    making i unsigned.  The result of the shift is already
    assigned to an variable of unsigned type.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 8b19ae07616bbd18969b94cbf5d74308a8f2bbdf)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=48f9a800722736c9fd1ed37562a8760417f8f221
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 12:56:54 2011 +0100

    mpeg12enc: use sign_extend() function
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 2f329db90e5d72ad383a0ba05fde3641a34ef73b)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2c99aa48d7073a6ccdecc7ff1f88a781a5a62a86
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 02:06:26 2011 +0100

    lavf: fix signed overflow in avformat_find_stream_info()
    
    On the first iteration through this code, last_dts is always
    INT64_MIN (AV_NOPTS_VALUE) and the subtraction overflows in
    an invalid manner.  Although the result is only used if the
    input values are valid, performing the subtraction is still
    not allowed in a strict environment.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit a31e9f68a426f634e002282885c6c2eb1bfbea44)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fdc669fcbb855a35fcc0352d3ab75064b85194a0
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 15:03:51 2011 +0100

    vp8: fix signed overflows
    
    In addition to avoiding undefined behaviour, an unsigned type
    makes more sense for packing multiple 8-bit values.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit bb59156606e00057a706ed30165bc7329db3823f)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fe3314a4137682bd7556d8c20798ea9e45f9863f
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 13:52:44 2011 +0100

    motion_est: fix some signed overflows
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit e708afd3c026a9eb547dab07781320a7e2564312)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=58afe6061adf61c17a876ce22b4dae03d0c0299a
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 13:49:42 2011 +0100

    dca: fix signed overflow in shift
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 559c244d42be7a02c23976216b47fd63b80d6c7f)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8c2ae575ad5f4aadad65186e4c7bc3f4db2a62c5
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 13:41:23 2011 +0100

    aacdec: fix undefined shifts
    
    Since nnz can be zero, this is needed to avoid a shift by 32.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit d12294304acd82cb219e3f66ca9cd6efb2194fa4)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9c78fe936013dfb6be0df46e4fb5c097f8a3b994
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 12:16:41 2011 +0000

    bink: Check for various out of bound writes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit a00676e48e49a3d794d6d2063ceca539e945a4a4)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c98d7882d8c67475bc756ebc956fed3d4d2ca696
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 12:16:41 2011 +0000

    bink: Check for out of bound writes when building tree
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 24adf7832b8370f3c1febbef6c686f574d360d32)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e52e85ac3ab6527a38e950142ea92f203909bf96
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 02:09:42 2011 +0100

    put_bits: fix invalid shift by 32 in flush_put_bits()
    
    If flush_put_bits() is called when the 32-bit buffer is empty,
    e.g. after writing a multiple of 32 bits, and invalid shift by
    32 is performed.  Since flush_put_bits() is called infrequently,
    this additional check should have negligible performance impact.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit ac6eab1496aad6f8b09deabbef4fe5fd829e142d)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4faa00b256bfdecb4ee1c14f332a7d0b2f539e94
Author: Alex Converse <alex.converse at gmail.com>
Date:   Fri Oct 7 17:02:36 2011 -0700

    mpegps: Use av_get_packet() instead of poorly emulating it.
    
    (cherry picked from commit 98ef887a759c66febcb612407c6bb361c4d50bcb)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=90d7146511db0e2dd2d2b1baf2ceb7177b30dd8d
Author: Janne Grunau <janne-libav at jannau.net>
Date:   Fri Oct 7 18:08:55 2011 +0200

    motionpixels: decode only the 111 complete frames for fate
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit c2f2dfb3dd20e036b8b08c0fd1486a3044e8f02a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=59050c0629870d3261b6e686725759e667e4e91f
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Sep 25 20:06:20 2011 +0000

    mpc8: Check out of bound bands limit
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 9bd854b1ff342f82efa6d2ad4e8fefddce5fa731)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=be2404b06d7cddc8152337e51ae2ca97b6536eea
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 03:12:07 2011 +0000

    xan: Prevent NULL dereference with missing palette
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 7d17a794f0348ba40d5cda7d969564cb83981001)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=49007b494eaf7727e445a62a4eb040b080a91f00
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 20:38:01 2011 +0000

    xan: Check for out of bound reads in xan_huffman_decode()
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 3db3fdf4c669aed9379be430c17f151d4d0697c5)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0277c82de21c22d4d5438e0054f377b3fe2357de
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 03:12:07 2011 +0000

    xan: Fixed out of bound accesses in xan_unpack()
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 3e0757c2a87c8cf3e452f67bca279001c64cedff)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5fa8e43b547859fe0963c127e67832789564bf1e
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 03:12:07 2011 +0000

    motionpixels: Prevent calling init_vlc() with invalid parameters
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 1cd0a5516396bd6fb54e4df1e7c88ed18416299b)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=737bea21b6c2c1d4dca0b7b18824c0a3205556d2
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Fri Sep 30 01:26:22 2011 +0000

    shorten: Fix out of bound writes in fix_bitshift()
    
    The data pointers s->decoded[*] already take into account s->nwrap.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 5f05cf4ea9aaafed8edcabe785c2719786103ec1)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=aa9e308580dc929d920c93b130e10153414a9ffb
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    dsicinav: Check for out of bounds writes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 172060328771d149b076f00352b004b5b5272d38)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d57d039e04b9955beb603d1a85971bdd6dec5d02
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    tiertexseqv: Check for out of bound reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 64263dd526ec25ede1591fc1144715a20cc7bc4e)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=97a1ab4bcea7a029a02c09b1c22a177911bb8a95
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    quickdraw: Check for out of bound reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 4fd56f842cbaecf74df94c38f9c10452342f436a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=914b9b0b2b162a70a5fd4d61dc79f98e607af6a9
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    dsicinav: Check for out of bounds reads
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit e3ca9b93d9f464861638dda3280fcf65e402466a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=39de0e008d473662fd8381da4cbd5887e4fd5cc2
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    motionpixels: Fix the size of workspace buffers
    
    Some buffers must be mod 4 in width and/or height.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 210c80331e0604edf9c800865c26ba06ed3c2082)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f2f2a00d39a458e23c018744b9aacb3f94501d67
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Thu Sep 29 23:13:35 2011 +0000

    motionpixels: Clear FF_INPUT_BUFFER_PADDING_SIZE bytes at the end of the temporary buffer
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit d337dd3a907110b32c6305bb65e4beca5b830c5d)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=905d0633a6e8f345bd6a0ae442d77cc03cf62c4b
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 22:15:31 2011 +0000

    wmavoice: Check for corrupted extra data
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit d99427cb8ba099375d8cce6df808d4acf045ab43)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=95605595b57e8fdfd9fdc591766b8286dd017ee4
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 22:15:31 2011 +0000

    wmavoice: Check for out of bound writes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 1c1449b548a2a0bf0295a522051b04107286653c)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fb20141563d740a979f3e4db6db0e3908c5c6962
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 22:15:32 2011 +0000

    xan: Prevent NULL dereferences with missing reference frame
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 06be075cda0a6ba8bab8f543571b380884f562ac)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c5766b55c41c702cf0961253e737b86fe7c28308
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Tue Sep 27 22:15:31 2011 +0000

    bink: Prevent NULL dereferences with missing reference frame
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit c7e631986b4a326a71a20a1a51000f3fbf6e64e7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d646cce15f140730f288c1a38a79dc7232b31e69
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Mon Sep 26 22:18:29 2011 +0000

    wavpack: Reset internal state on corrupted blocks
    
    wavpack_decode_block() supposes that it is called back with the exact
    same buffer unless it has returned with an error. With multi-channels
    files, wavpack_decode_frame() was breaking this assumption.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 2c6cf1394096d08396faadc6e7c0b404fd6df006)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=04b71cdedd7421d09e12600d7999fab87d35a908
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Mon Sep 26 22:18:29 2011 +0000

    wmapro: Validate the number of audio channels before using it
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 2c1ba7994190fa2f1ad430594551070a49353bd1)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fce03f878314e2989eb26f4f3330848bfb4e27e6
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Sep 25 20:06:19 2011 +0000

    mpc8: Fix return value on EOF
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 1e3336de69d1c4c28a5e306fab20555f4078f2d7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=22949c42edf5352c5fa8c43870efe20698432b35
Author: Laurent Aimar <fenrir at elivagar.org>
Date:   Sun Oct 2 00:48:12 2011 +0000

    shorten: Prevent block size from increasing
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 95010d18b2d808db9a49377e41bc2f7cf4dfa03e)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8751941030462a4623b1c4ded425632f48063f6f
Author: Laurent Aimar <fenrir at elivagar.org>
Date:   Tue Sep 27 22:15:33 2011 +0000

    xan: Prevent out of bound accesses
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 124a16f678ddcffe8f1825efb29a6e8da1d580ac)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3e1b5981ba11a5eb317282078766ebb9e57b7781
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Wed Sep 21 20:46:33 2011 +0200

    vp56: Release old pictures after a resolution changes
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 3d09d0017d10a0d738141a955c75c555133e41b2)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=efe3fb13a79957ea94f2766c3f3e502ae775eace
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Wed Sep 21 20:46:30 2011 +0200

    vp56: Check for missing reference frame data
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 0ec6d6e9b682318b5b5b5457e09fbf3c4ca41335)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=987f5dc55ed5b1d882ad8d8adb3e51b4e3aa4679
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Sep 11 19:17:43 2011 +0200

    cinepak: Fix invalid read access on extra data
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit d239d4b447885cb7c5eee9ce359f34ad6b64f373)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5bb9ce755b5913f53eb72c2f18942671d6f3a850
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sat Sep 17 16:56:35 2011 +0200

    cook: Fix js_vlc_bits value validation for joint stereo
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 3a742470a845c24e7c3a40c0a228705ca951e673)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ea5a5f09088c94d32492173c2fc39b8eb36e56d1
Author: Laurent Aimar <fenrir at elivagar.org>
Date:   Thu Oct 6 22:53:41 2011 +0200

    segafilm: Check for memory allocation failures in segafilm demuxer.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 1775b92fee43f0527e2f5892a5a30450fa929722)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=619aab2f41b11f289411b542e3816f90a9209438
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sat Sep 10 13:28:13 2011 +0200

    Fixed deference of NULL pointer in motionpixels decoder.
    
    Some of the arguments given to init_vlc() come from the stream
    and can be corrupted.
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 69a0bce753a5d5556d5bc0888afe390e22611dd8)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8099d77ca4e7f1afb3315eae0cf3777644238a96
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Mon Oct 3 08:38:03 2011 -0700

    mpegvideo: set correct offset for edge emulation buffer.
    
    Using the old code, half of it was unused and the other half was too
    small for e.g. >8bpp interlaced data, causing random buffer overruns.
    (cherry picked from commit 330deb75923675224fb9aed311d3d6ce3ec52420)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bb7fd94eebbc6470588cc88ca6713e5ac5e419d3
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Mon Oct 3 07:37:24 2011 -0700

    mpegvideo: fix position of bottom edge.
    
    It was wrong in colorspaces where horizontal and vertical chroma
    subsampling are not the same, e.g. 422.
    (cherry picked from commit 0884dd5a1b87aff6c8a06e6492dece5cef8f3978)
    
    Conflicts:
    
    	libavcodec/mpegvideo.c
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ea311af23dbed93c7638b7a1c14ec0b0c1ea6060
Author: Chris Rankin <rankincj at yahoo.com>
Date:   Wed Sep 7 10:17:30 2011 +0100

    qcelpdec: fix the return value of qcelp_decode_frame().
    
    Signed-off-by: Justin Ruggles <justin.ruggles at gmail.com>
    (cherry picked from commit bde25700134b98068e2ad21c1f92955a4b489cdc)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4562f95ba85c3f3187fb1bca8ed3131b82fb3a23
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Tue Sep 20 15:27:44 2011 -0400

    sipr: fix the output data size check and only calculate it once.
    
    (cherry picked from commit 1b5a189f06879338088809b3049ea7620f4e7e78)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=fc0e151cdc03420af92bc21b5399eefcde5efd7c
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 14 11:39:21 2011 -0400

    mpc8: check output buffer size before decoding
    
    (cherry picked from commit 5674d4b0a35a34b75e3533a8580e0b5a0a8895a7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=56fe62ec944a0f1999d9d5cd6b61bbc340105256
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 14 11:16:42 2011 -0400

    mpc7: return error if packet is too small.
    
    (cherry picked from commit 8290d1f38b438f1b070de67645c8b4a42014c7ac)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ce3e0d48f8b6dd90f42fa9157bbd76a573cbf4c7
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Tue Sep 13 18:53:18 2011 -0400

    mpc7: check output buffer size before decoding
    
    (cherry picked from commit c8b5c4d27409dfdcec80868686b173ba446c998b)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d46efbebe7c54932d5a4a1e807607424c2986481
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Wed Sep 14 12:16:05 2011 -0400

    nellymoser: check output buffer size before decoding
    
    (cherry picked from commit 8b31c086b6065084644b86a63c9171f3094cf6ad)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=151aaf539f0d1010471f916082742b3d80da1359
Author: Martin Storsjö <martin at martin.st>
Date:   Fri Sep 30 20:30:35 2011 +0300

    lavf: Avoid using av_malloc(0) in av_dump_format
    
    On OS X, av_malloc(0) returns pointers that cause crashes when
    freed.
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit e81e5e8ad2bb5746df0c343c396019aca165cf66)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f74a4b621fed92f964ed58bae00721f8785fe90b
Author: Stefano Sabatini <stefano.sabatini-lala at poste.it>
Date:   Sat Jun 11 11:15:40 2011 +0200

    avfiltergraph: use meaningful error codes
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 59cef18c24ab21de4e652e130ac25905c1141f62)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7fc9aa6d359e6c594a367e4db6366bc661581f56
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Tue Sep 13 15:13:44 2011 -0400

    flacdec: fix buffer size checking in get_metadata_size()
    
    Adds an additional check before reading the next block header and avoids a
    potential integer overflow when checking the metadata size against the
    remaining buffer size.
    (cherry picked from commit 4c5e7b27d57dd2be777780e840eef9be63242158)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ce80957cf10e2ddbdbe6f74912c69228a8efaf35
Author: Justin Ruggles <justin.ruggles at gmail.com>
Date:   Fri Sep 23 21:43:43 2011 -0400

    sol: return error if av_get_packet() fails.
    
    This prevents sending a packet with data=NULL size=AVERROR_EOF.
    (cherry picked from commit b15a9888a8f8e8cc9784ffd8d5d0307900fb78bb)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=74f4c1358c27d168bd346d3d3db6a097b9f71558
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sat Sep 24 16:16:38 2011 +0200

    flvdec: Fix invalid pointer deferences when parsing index
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit 2b4e49d4281690db67073ba644ad2ffc17767cdf)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8475df81587d6b7d2753574a5afa842b4893d126
Author: Peter Ross <pross at xvid.org>
Date:   Sat Apr 23 22:08:48 2011 +1000

    permit decoding of multichannel ADPCM_EA_XAS
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
    (cherry picked from commit 3a549eb82be709d633a0ba964b037ee2f700e0c9)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=282a1a960a75d853928b6b2b2c90951b58cb56dc
Author: Reimar Döffinger <Reimar.Doeffinger at gmx.de>
Date:   Wed Sep 7 22:14:07 2011 -0400

    Fix input buffer size check in adpcm_ea decoder.
    
    Unfortunately the output buffer size check assumes that the
    input buffer is never over-consumed, thus this actually
    also allowed to write outside the output buffer if "lucky".
    
    Based on:
    git.videolan.org/ffmpeg.git
    commit 701d0eb185192542c4a17f296e39e37cedf7abc6
    (cherry picked from commit ffe92ff9f0c7f390d895de12c8ffef959ced3cd8)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2ba86066be79d68a3d0927425b407c5149a4a240
Author: Sean McGovern <gseanmcg at gmail.com>
Date:   Mon Sep 19 21:32:09 2011 -0400

    fft: avoid a signed overflow
    
    As a signed integer, 1<<31 overflows, so force it to unsigned.
    
    Signed-off-by: Alex Converse <alex.converse at gmail.com>
    (cherry picked from commit c2d3f561072132044114588a5f56b8e1974a2af7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2f62b677cc1ee6002ed953b4515807a170fd51b3
Author: Alex Converse <alex.converse at gmail.com>
Date:   Fri Sep 23 16:28:23 2011 -0700

    mpegps: Handle buffer exhaustion when reading packets.
    
    (cherry picked from commit 9fba8ebe0acdc28193d37b5e1f4c0d73c589ede2)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=684f671f2874855d6e9872213097e732bc5cfb18
Author: Alex Converse <alex.converse at gmail.com>
Date:   Wed Sep 21 15:26:35 2011 -0700

    mp4: Don't read an empty Decoder Config Descriptor
    
    (cherry picked from commit 1c2e07b8111b24f62b8d1bda62907848e34dfbcb)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=000bd5209f91bbdaf08a29271b6b5bd8c6058c3e
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Wed Sep 21 20:46:31 2011 +0200

    rv34: Check for invalid slices offsets
    
    Signed-off-by: Martin Storsjö <martin at martin.st>
    (cherry picked from commit fe476e5a9b5a1e56e53f1fa62374778fa00ec1fd)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=047c6ad752386e892afd45fd97214108e303776f
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Thu Feb 9 22:57:01 2012 -0800

    h264: disallow constrained intra prediction modes for luma.
    
    Conversion of the luma intra prediction mode to one of the constrained
    ("alzheimer") ones can happen by crafting special bitstreams, causing
    a crash because we'll call a NULL function pointer for 16x16 block intra
    prediction, since constrained intra prediction functions are only
    implemented for chroma (8x8 blocks).
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable at libav.org
    (cherry picked from commit 45b7bd7c53b41bc5ff6fc2158831f2b1b1256113)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>
    (cherry picked from commit 248d4e461578ff327a2fd75fd0db4f38c270918a)
    
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=6362264e2d97f141dfb13fc191d153966c2963f9
Author: Mans Rullgard <mans at mansr.com>
Date:   Tue Oct 11 16:00:21 2011 +0100

    h264: fix HRD parameters parsing
    
    The bit_rate_value_minus1 and cpb_size_value_minus1 elements
    allow a wider range than get_ue_golomb() supports.  This
    adds a get_ue_golomb_long() function supporting up to 31
    leading zeros, which is the maximum for these syntax
    elements, and uses it in decode_hrd_parameters().
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit fdba370f8a1bdfc22ecbdf3c7148c2f8680a4ac4)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ccb3b71b424680dd4cd1d99002befeed6ac95d00
Author: Mans Rullgard <mans at mansr.com>
Date:   Tue Oct 11 12:58:31 2011 +0100

    h264: fix invalid shifts in init_cavlc_level_tab()
    
    The level_code expression includes a shift which is invalid in
    those cases where the value is not used.  Moving the calculation
    to the branch where the result is used avoids these.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 8babfc033ecb6332155c1f8879e54dee41d16952)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4ed486dc3aff211861dafa23ccec5b37b8bd9e38
Author: Mans Rullgard <mans at mansr.com>
Date:   Tue Oct 11 00:58:03 2011 +0100

    h264: fix detection of optional trailing PPS elements
    
    The PPS may contain a few trailing elements whose presence is
    only signalled by data remaining after the the mandatory part
    has been parsed.  The current code fails to take into account
    the rbsp_trailing_bits() when deciding whether to parse these
    optional elements.  Assuming no unnecessary padding bytes are
    passed to this function, the optional elements are present if
    either more than 8 extra bits remain or the remaining bits do
    not form a valid rbsp_trailing_bits() after the mandatory PPS
    elements have been parsed.
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit be1242a3f2b28e9cb08515bdc1db6c14403c279a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ba31a0168131a5dfc4ca521720f998229abbb1a5
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sun Oct 2 14:03:47 2011 +0000

    h264: reset h->ref_count in case of errors in ff_h264_decode_ref_pic_list_reordering()
    
    Signed-off-by: Janne Grunau <janne-libav at jannau.net>
    (cherry picked from commit 4c7a232fc81fdbdee279ab819a255f624a22b083)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1e809ab887d401c2ff22a7882ff900f8b4172da9
Author: Mans Rullgard <mans at mansr.com>
Date:   Sat Oct 8 21:22:06 2011 +0100

    h264pred: use unsigned types for pixel values, fix signed overflows
    
    Signed-off-by: Mans Rullgard <mans at mansr.com>
    (cherry picked from commit 60f10e0ad37418cc697765d85b0bc22db70f726a)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c6bb93dcd96ae1ece3c2a505f296f2f4a28134a8
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Tue Oct 4 00:14:48 2011 +0200

    H264: Only wait before triggering ff_thread_setup_complete() until the next slice that contains a start-of-field/frame macroblock
    
    This allows concurrent decoding of the last field/frame, rather than
    only the last slice, of data packets with multiple NAL units packed
    together.
    
    This will fix the slowdown reported in e.g. bug 52.
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 14c21c1ff509eac97f6437aeb51202b15af3a700)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=485f85aa900df0e50dd2300509ed8331e7bf6301
Author: Ronald S. Bultje <rsbultje at gmail.com>
Date:   Mon Oct 3 08:41:51 2011 -0700

    h264: correct implicit_weight for field-interlaced pictures.
    (cherry picked from commit 4418aa9cb3b2f0b83748e37d2952560cf84b3611)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ec2a1d91e216c30a1e286b2141eaabe64a0296f5
Author: Laurent Aimar <fenrir at videolan.org>
Date:   Sat Sep 24 16:16:39 2011 +0200

    h264: check for out of bounds reads in ff_h264_decode_extradata().
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit d1186ff72d75b6067770890758c4feb92abd84f7)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=958e0f705dab60f4d11ab90e2ebe2b4e7393fb41
Author: Stefano Sabatini <stefano.sabatini-lala at poste.it>
Date:   Sun Jun 19 22:07:18 2011 +0200

    lavfi: fix realloc size computation in avfilter_add_format()
    
    Replace sizeof((*avff)->formats)
    with    sizeof(*(*avff)->formats)
    
    as the size of the array element is given by the pointed element
    rather than by its pointer.
    
    In particular fix computation with the pending patch when
    sizeof(int64_t) != sizeof(int64_t *).
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 0ec56d1144fa4ea36950295987bb5f49c9747046)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=734a9bb05f2b5c09c43d6c26c75dae6af3f51fa2
Author: Stefano Sabatini <stefano.sabatini-lala at poste.it>
Date:   Fri Aug 12 08:42:35 2011 +0200

    vf_unsharp: fix out-of-buffer read
    
    In apply_unsharp(), when y is >= height, prevent out-of-buffer reading
    from src, read from the last buffer line in src2 instead.
    
    The check was implemented in the original unsharp libmpcodecs code and
    lost in the port.
    
    This also fixes output discrepancy between the two filters.
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 998e8519efbc772994c5ba19c0d39573998be9db)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7f62cf120bd066964d93617c73bd5f9f2ee9de00
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Sat Aug 27 01:49:55 2011 +0200

    vf_scale: apply the same transform to the aspect during init that is applied per frame
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit d33e0c6bc819048b05c168d304fba7bdd75a80e1)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=af58dd479859001808a9b7c085e1d271b8e8962b
Author: Stefano Sabatini <stefano.sabatini-lala at poste.it>
Date:   Mon Jul 4 11:15:14 2011 +0200

    vf_pad: fix "vsub" variable value computation
    
    It was shifting 2 rather than 1, +10l.
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 80de930a781c177dc54f3836f57aa8959597bcda)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5c9ca599a70c0babdc4af301753e7067888611d6
Author: Stefano Sabatini <stefano.sabatini-lala at poste.it>
Date:   Thu Aug 4 00:25:35 2011 +0200

    vf_yadif: correct documentation on the parity parameter
    
    0 is top-field-first, 1 is bottom-field-first, not the other way
    around.
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 4703a7b50b098a53ec2f806bd41a00fd87ea9d8c)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=4a2287667590ad932b012a1a760b67cdf3ad1c14
Author: Joakim Plate <elupus at ecce.se>
Date:   Thu Jul 14 22:31:37 2011 +0200

    vf_yadif: copy buffer properties like aspect for second frame as well
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    (cherry picked from commit 5feb67f8a1a17a4dd3cec0aa80ef0dc543fc7673)
    
    Signed-off-by: Anton Khirnov <anton at khirnov.net>
    Signed-off-by: Reinhard Tartler <siretart at tauware.de>

URL:    http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=3a3f2b515fa54937efe1a9f0e1657c37266a98e1
Author: Michael Niedermayer <michaelni at gmx.at>
Date:   Thu Jan 12 22:25:00 2012 +0100

    Update for 0.8.10
    
    Signed-off-by: Michael Niedermayer <michaelni at gmx.at>



More information about the ffmpeg-cvslog mailing list