This is an automated email from the git hooks/post-receive script.
Git pushed a change to branch release/4.4
in repository ffmpeg.
from e791fab239 aarch64/hpeldsp_neon: fix out-of-bounds read
new f9d1d070ec fate: add missing options in config template
new d7a8d211e5 avfilter/vf_libopencv: make sure there is space for
null-terminator in shape_str
new 7da7407b90 avfilter/vf_neighbor_opencl: add error condition when
filter name doesn't match
new ee93174198 avformat/hls: Check seg size and offset for overflow
new 3a2a7dc9fb avformat/hls: fix double space
new 957f06d9d2 avcodec/mjpegdec: only test the size bound in sequential
mjpeg
new 2e3ce98001 avfilter/vf_stack: add checks for the final canvas
dimensions
new 1a5275bc36 avcodec/notchlc: zero-initialize history buffer
new 6646c3e381 avfilter/vf_find_rect: Fix handling odd sized images
new f696860fd1 avformat/http: Check that the protocol of redirects is http
or https
new 2b50f85a9a avfilter/scale_eval: Avoid undefined behavior with double
to int cast
new 204629df10 avfilter/scale_eval: Use 64bit for factor_w/h
new c0c37cd04f avcodec/omx: Check extradata size and nFilledLen
new 32b97f7a95 avcodec/exr: use av_realloc_array()
new 8f1775cf6d avcodec/mjpegdec: fix segfault on extern_huff and no
extradata
new df3f60709c swscale/utils: Avoid FF_ALLOC_TYPED_ARRAY() and use
av_malloc_array() directly
new 53dd13bee4 swscale/utils: Sanity check sizeFactor
new 503df884f2 lavc/j2kdec: Do not ignore colour association for packed
formats
new 2dbfbd9b05 swscale/utils: zero init filter memory as before
new 0cf01132dd avformat/dashdec: check value valid after read value from
mpd xml
new 096bb7b187 avcodec/jpeg2000dec: Print bpno level when erroring out
new da3d9b0436 avcodec/qdm2: fix heap-use-after-free in qdm2_decode_frame
new d2c944970b avformat/mpegts: Check IOD_DESCRIPTOR len
new 1877b31590 avformat/mpegts: Check program_info_length
new ad6c823733 avcodec/dca_xll: Check get_rice_array()
new cfe3dad445 vfilter/vf_find_rect: Clamp x/y min/max to valid values
new 93818dbb61 avcodec/dca_xll: Clear padding in ff_dca_xll_parse()
new 5d6c488db7 avformat/hls: Check for integer overflow with #EXTINF:
new c47f085b47 avcodec/adpcm: Check input buffer size
new 3421962ddf Fix overflow in STSD parser
new 46d134c4c9 avformat/yuv4mpegen: Sanity check input packet frame
dimensions
new a120b52bdf avformat/img2enc: Check split planes packet size
new b9c777ac2d avformat/mpegtsenc: Check remaining space in SDT
new 6bef292824 avformat/img2dec: Check avio_size() for failure
new 8b5894e0eb avcodec/vp9: Reallocate on resolution change which does not
change tile_cols
new 6b1f7eecde avformat/cafdec: Check nb_entries in read_info_chunk()
new 44fb8cf0f6 avcodec/exr: Handle axmax like bxmin in
04d7a6d3db56ea1a93908ff2d3d312e3fc40a58c
new 8f0dfc03b0 avcodec/bmp: fix indention
new 50ceb4a88e swscale/rgb2rgb_template: fix signed shift into sign bit
new 16d3a59062 fftools/ffmpeg_opt: limit recursion of presets
new a4edf7d845 avformat/http: allow adjusting the redirect limit
new 5080e6dfb3 avformat/lrcdec: Check ss for finiteness
new 085da59105 avformat/icodec: Check size
new fb70a2da75 avcodec/cfhd: Add CFHDSegment enum and named identifiers
new 0c98ad41ba avcodec/cfhd: Check transform type before continuing
new 064fab59c7 avcodec/exr: fix AVERROR typo
new 8600ea7668 avcodec/flashsv: Check for input space before
(re)allocating frame
new fe2afafc76 avcodec/interplayacm: Check input for fill_block()
new febba238be avcodec/imm5: Dont pass EAGAIN on as is
new 07f5159ddb avformat/wtvdec: Check that language is fully read
new b7e56970da avcodec/h264_parser: Check pts for overflow
new 2a0ae4d576 swresample/resample_template: add casts to avoid undefined
overflows
new 000c69ae30 avcodec/golomb: Fix get_ur_golomb_jpegls() with esclen = 0
new a874da5ec1 avcodec/exr: check tile_attr.x/ySize
new 14220b8431 avformat/segafilm: dont read uninitialized value
new c768e52888 avformat/dhav: Check avio_seek() return
new 2310f1f5d6 avcodec/vp3: Sanity check cropping
new 42d91658da avformat/matroskadec: Check that end_time_ns >=
start_time_ns
new 38045cc428 avformat/vividas: Reset n_audio_subpackets on error
new 8cae96eb62 avutil/eval: Check depth of AVExpr
new 2446135b92 avfilter/vf_convolution: Handle corner cases with small
frames
new e313d8d443 avfilter/vf_convolution: Use avpriv_mirror
new b3927f18d9 avformat/rtsp: Explicitly check protocol
new 187ed94440 avformat/rtsp: Pass blacklist
new d0d34fca71 swscale/utils: initialize chroma when luma switched to
cascade
new 72b2d5791b swscale/output: Fixes integer overflow in yuv2planeX_8_c
new 007877d3d0 avfilter/vf_scale: Fix integer overflow in config_props()
new 9dd5bd8fde swscale/utils: Check *Inc
new 241530f9be swscale/output: Fix integer overflow in alpha in
yuv2rgba64_1_c_template()
new fcae8974c0 avcodec/magicyuv: fix small median images
new 7453c35298 avformat/mlvdec: avoid uninitialized read in read_string()
new 9fd68baff0 avcodec/av1dec: sync frame header and tile group behavior
with CBS
new d1e401f31b avcodec/lcldec: Fixes uqvq overflow
new ab0702cbf3 swscale/output: fix integer overflows in chroma in
yuv2rgba64_X_c_template()
new efb61b7f9e avfilter/af_lv2: call lilv_instance_activate before
lilv_instance_run
new 4fdcf4450b avformat/mov: do not allocate out-of-range buffers
new 950afa23b5 avutil/timecode: Check for integer overflow in
av_timecode_init_from_components()
new 6d57428858 avcodec/h264_slice: reject slice_num >= 0xFFFF
new cb92c58c41 avcodec/exr: Check input space before reverse_lut()
new 37b2c7b6f8 avcodec/xxan: zero-initialize y_buffer
new 070f276c5f avformat/mpegts: fix descriptor accounting across multiple
IOD descriptors
new 35ba3f4d97 avutil/bswap: fix implicit conversion warning in av_bswap64
new 1b5cd3a792 avcodec/dvdsub_parser: Fix buf_size check
new a2f90b6dc9 avformat/mov: Handle integer overflow in MOV parser
new daf2cb8bfd avcodec/alsdec: fix abs(INT_MIN) UB in
read_diff_float_data()
new 520a3042d2 libavfilter/vf_v360: fix operator precedence in stereo loop
condition
new e586dd1fe5 avcodec/alsdec: fix mantissa unpacking in compressed Part A
path
new eb1e36462a avcodec/alsdec: propagate read_diff_float_data() errors in
read_frame_data()
new ce2b4727a9 avcodec/alsdec: preserve full float value in zero-truncated
samples
new 164c5d1764 avformat: check avio_read() return values in dss/dtshd/mlv
new 8fa3990331 avutil/samplefmt: Dont claim that av_get_sample_fmt_string
checks sample_fmt
new 7aaf8d16b5 avcodec/escape130: Initialize old_y_avg
new 7e9f8fe7f9 avformat/rtpdec_qdm2: Check block_size
new 127dd6ddd6 avcodec/vp9: Rollback dimensions when format is rejected
new f8501d3399 avcodec/svq1dec: Check input space for minimum
new b6697fbdca avformat/wavdec: Fix use-of-uninitialized-value in
find_guid()
new 897ab53e0a avformat/rtspdec: reject non-positive ANNOUNCE
Content-Length
new e954e4632b avformat/mov: Check read size for opus extradata
new 082f6ddb5c avformat/mov: check extradata in mov_read_dops()
new baf0b00ef7 avcodec/tdsc: Check tile_size
new 1c32efde4b avcodec/tdsc: Better input size check
new 3375dc11e2 avcodec/tdsc: Check jpeg size
new 26439c3878 avformat/vividas: use-of-uninitialized-value in keybuffer
new d84bec2bd6 avformat/rtpdec_jpeg: check qtable_len
new 5d24736758 avcodec/notchlc: Check 255 loops
new d9cd659979 avformat/cafdec: fix negative index use in read_seek
new 8027aa35a8 avcodec/tdsc: remove double stride adjustment
new f93b672460 avcodec/wmaenc: Fix missing padding in extradata
new 3dc35e8529 avcodec/h264_refs: Clear stale pointers from ref_list
new c5baeda37e avcodec/h264: recompute per-slice direct mode state for
every slice
new ebc5fd31d0 avformat/rtpdec_latm: avoid integer overflow in LATM length
parsing
new d773a4ab25 avformat/rtsp: Fix out-of-bounds read in SDP parser when
control_url is empty
new 031b93537f avformat/rtmpproto: validate compressed SWF header length
new 93484c6d38 avformat/rtmpproto: prevent integer overflow accumulating
FLV buffer size
new 7e0fac3cbc fftools/ffmpeg_opt: validate stream index in negative map
handling
new 856d22943b avformat/rtpdec_mpeg4: reject zero-length AU header sections
new 88580e69b8 avcodec/rasc: fix heap use-after-free in decode_move()
new b7580604ca avcodec/zmbv: reject XOR data that overruns the
decompression buffer
new 0832b9efed avcodec/ralf: Add the missing return statement after the
error log
new a3779c8d75 avfilter/vf_kerndeint: Check for minimum height
new 5de49f09d8 libavformat/xwma: fix overflow in seek position
new 5d142f8dc3 avformat/avidec: validate INFO list size before parsing
new 8df701d7b2 avformat/avidec: check LIST size in avi_load_index()
new 939d84afb0 swscale/swscale_unscaled: adjust last line copy
new 2e6b53db41 avcodec/alsdec: do not set nbits invalidly
new 26f36be1da configure: bump CONFIG_THIS_YEAR to 2026
new c3795bf59a avcodec/av1dec: check that primary_ref_frame is within range
The 127 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
configure | 2 +-
doc/fate_config.sh.template | 5 +++
fftools/ffmpeg.h | 1 +
fftools/ffmpeg_opt.c | 10 +++++
libavcodec/adpcm.c | 2 +
libavcodec/alsdec.c | 17 ++++++--
libavcodec/av1dec.c | 16 ++++++--
libavcodec/bmp.c | 2 +-
libavcodec/cfhd.c | 9 ++++-
libavcodec/cfhd.h | 9 +++++
libavcodec/cfhdenc.c | 12 +++---
libavcodec/dca_xll.c | 20 +++++++---
libavcodec/dvdsub_parser.c | 2 +-
libavcodec/escape130.c | 2 +-
libavcodec/exr.c | 21 +++++++---
libavcodec/flashsv.c | 3 ++
libavcodec/golomb.h | 4 +-
libavcodec/h264_direct.c | 34 +++++++++-------
libavcodec/h264_parser.c | 8 +++-
libavcodec/h264_refs.c | 6 +--
libavcodec/h264_slice.c | 9 ++++-
libavcodec/imm5.c | 2 +
libavcodec/interplayacm.c | 3 ++
libavcodec/jpeg2000dec.c | 7 +++-
libavcodec/lcldec.c | 4 +-
libavcodec/magicyuv.c | 3 +-
libavcodec/mjpegdec.c | 10 +++--
libavcodec/notchlc.c | 6 ++-
libavcodec/omx.c | 5 +++
libavcodec/qdm2.c | 2 +
libavcodec/ralf.c | 1 +
libavcodec/rasc.c | 10 +++--
libavcodec/svq1dec.c | 5 +++
libavcodec/tdsc.c | 10 +++--
libavcodec/vp3.c | 2 +
libavcodec/vp9.c | 18 ++++++---
libavcodec/wmaenc.c | 4 +-
libavcodec/xxan.c | 2 +-
libavcodec/zmbv.c | 14 ++++++-
libavfilter/af_lv2.c | 6 +++
libavfilter/convolution.h | 1 +
libavfilter/scale_eval.c | 13 +++++-
libavfilter/vf_convolution.c | 36 +++++++----------
libavfilter/vf_find_rect.c | 55 ++++++++++++++-----------
libavfilter/vf_kerndeint.c | 6 +++
libavfilter/vf_libopencv.c | 2 +-
libavfilter/vf_neighbor_opencl.c | 3 ++
libavfilter/vf_scale.c | 4 +-
libavfilter/vf_stack.c | 33 ++++++++++++---
libavfilter/vf_v360.c | 3 +-
libavfilter/vf_zscale.c | 13 +++++-
libavformat/avidec.c | 10 ++++-
libavformat/cafdec.c | 6 +++
libavformat/dashdec.c | 84 +++++++++++++++++++++------------------
libavformat/dhav.c | 4 +-
libavformat/dss.c | 5 ++-
libavformat/dtshddec.c | 7 +++-
libavformat/hls.c | 11 ++++-
libavformat/http.c | 7 +++-
libavformat/icodec.c | 2 +-
libavformat/img2dec.c | 17 ++++----
libavformat/img2enc.c | 6 +++
libavformat/lrcdec.c | 2 +-
libavformat/matroskadec.c | 4 ++
libavformat/mlvdec.c | 8 +++-
libavformat/mov.c | 19 +++++++--
libavformat/mpegts.c | 9 +++--
libavformat/mpegtsenc.c | 7 ++++
libavformat/rtmpproto.c | 57 ++++++++++++++++----------
libavformat/rtpdec_jpeg.c | 6 +++
libavformat/rtpdec_latm.c | 6 ++-
libavformat/rtpdec_mpeg4.c | 2 +-
libavformat/rtpdec_qdm2.c | 10 ++++-
libavformat/rtsp.c | 19 +++++++--
libavformat/rtspdec.c | 9 +++--
libavformat/segafilm.c | 2 +-
libavformat/vividas.c | 8 +++-
libavformat/wavdec.c | 3 +-
libavformat/wtvdec.c | 3 +-
libavformat/xwma.c | 2 +-
libavformat/yuv4mpegenc.c | 3 ++
libavutil/bswap.h | 2 +-
libavutil/eval.c | 15 +++++++
libavutil/samplefmt.h | 3 +-
libavutil/timecode.c | 11 ++++-
libswresample/resample_template.c | 17 +++++---
libswscale/output.c | 20 +++++-----
libswscale/rgb2rgb_template.c | 4 +-
libswscale/swscale_unscaled.c | 6 ++-
libswscale/utils.c | 56 +++++++++++++++++++-------
tests/ref/fate/zmbv-8bit | 1 -
91 files changed, 665 insertions(+), 285 deletions(-)
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
