#9545: ffmpeg-3.3.3
 Reporter:  bdubbs@…     |       Owner:  bdubbs@…
     Type:  enhancement  |      Status:  assigned
 Priority:  normal       |   Milestone:  8.1
Component:  BOOK         |     Version:  SVN
 Severity:  normal       |  Resolution:
 Keywords:               |

Comment (by bdubbs@…):

 version 3.3.3:
 - avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()
 - avcodec/diracdec: Fix integer overflow in divide3()
 - avcodec/takdec: Fix integer overflow in decode_subframe()
 - avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2
 - avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2
 - avcodec/diracdec: Fix integer overflow in signed multiplication in
 - avcodec/pixlet: Simplify nbits computation
 - avcodec/dnxhddec: Move mb height check out of non hr branch
 - avcodec/hevc_ps: fix integer overflow in
 - avformat/oggparsecelt: Do not re-allocate os->private
 - avcodec/ylc: Fix shift overflow
 - avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()
 - avcodec/aacdec_fixed: fix: left shift of negative value -1
 - avcodec/dirac_vlc: Fix undefined shift
 - doc/filters: typo in frei0r
 - avcodec/cfhd: Fix decoding regression due to height check
 - avcodec/aacdec_template (fixed point): Check gain in decode_cce() to
 avoid undefined shifts later
 - avcodec/ffv1dec_template: Fix signed integer overflow
 - avcodec/aacdec_template: Fix undefined integer overflow in apply_tns()
 - avcodec/magicyuv: Check that vlc len is not too large
 - avcodec/mjpegdec: Clip DC also on the negative side.
 - avcodec/aacps (fixed point): Fix multiple signed integer overflows
 - avcodec/ylc: Fix vlc of 31 bits
 - avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()
 - avcodec/hevcdec: do not let updated extradata corrupt state
 - avcodec/wavpack: Fix invalid shift
 - avcodec/h264_slice: Fix signed integer overflow
 - avcodec/hevc_ps: Fix integer overflow with beta/tc offsets
 - avcodec/cfhd: Fix invalid left shift of negative value
 - avcodec/vb: Check vertical GMC component before multiply
 - avcodec/hevcdec: do basic validity check on delta_chroma_weight and
 - avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
 - avcodec/apedec: Fix integer overflow
 - avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
 - avcodec/hevc_ps: Fix max_dec_buffer check
 - avcodec/mpeg4videodec: Fix GMC with videos of dimension 1
 - avcodec/wavpack: Fix integer overflow
 - avcodec/takdec: Fix integer overflow
 - avcodec/tiff: Update pointer only when the result is used
 - avcodec/cfhd: Check bpc before setting bpc in context
 - avcodec/cfhd: Fix undefined shift
 - avcodec/hevc_filter: Fix invalid shift
 - avcodec/mpeg4videodec: Fix overflow in virtual_ref computation
 - avcodec/lpc: signed integer overflow in compute_lpc_coefs()
 - avcodec/wavpack: Fix undefined integer negation
 - avcodec/aacdec_fixed: Check s for being too small
 - avcodec/htmlsubtitles: Replace very slow redundant sscanf() calls by
 cleaner and faster code
 - avcodec/h264: Fix mix of lossless and lossy MBs decoding
 - avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264
 - avcodec/h264_cabac: Fix CABAC+8x8dct in 4:4:4
 - avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output
 - avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer
 - avcodec/hevcpred_template: Fix left shift of negative value
 - avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps()
 - avcodec/jpeg2000dec: Check nonzerobits more completely
 - avcodec/shorten: Sanity check maxnlpc
 - avcodec/truemotion2: Move skip computation after checks
 - avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()
 - avcodec/dnxhd_parser: Do not return invalid value from
 dnxhd_find_frame_end() on error
 - avcodec/hevcdec: Check nb_sps
 - avcodec/hevc_refs: Check nb_refs in add_candidate_ref()
 - avcodec/mpeg4videodec: Check sprite delta upshift against overflowing.
 - avcodec/mpeg4videodec: Fix integer overflow in
 num_sprite_warping_points=2 case
 - avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble()
 - avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if
 operations are impossible
 - avcodec/libvpxdec: Check that display dimensions fit in the storage
 - avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value
 - avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616
 + 277872640 cannot be represented in type 'int'
 - avcodec/snowdec: Fix runtime error: left shift of negative value -1
 - avcodec/aacdec_fixed: Fix runtime error: left shift of negative value
 - avcodec/tiff: Fix leak of geotags[].val
 - avcodec/ra144: Fix runtime error: signed integer overflow: -2200 *
 1033073 cannot be represented in type 'int'
 - avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 *
 459296 cannot be represented in type 'int'
 - avcodec/cfhd: Check band parameters before storing them
 - avcodec/h264_parse: Check picture structure when initializig weight
 - avcodec/indeo4: Check remaining data in Pic hdr extension parsing code
 - avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer
 overflow: -39271008 * 59 cannot be represented in type 'int'
 - lavc/aarch64/simple_idct: fix idct_col4_top coefficient

Ticket URL: <http://wiki.linuxfromscratch.org/blfs/ticket/9545#comment:2>
BLFS Trac <http://wiki.linuxfromscratch.org/blfs>
Beyond Linux From Scratch
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to