libav.git
17 months agoUpdate changelog for v11.11 v11.11
Sean McGovern [Sat, 14 Oct 2017 20:20:52 +0000 (16:20 -0400)]
Update changelog for v11.11

17 months agoChangelog: add missing issue tracker references
Sean McGovern [Sat, 14 Oct 2017 20:29:43 +0000 (16:29 -0400)]
Changelog: add missing issue tracker references

17 months agosmacker: fix integer overflow with pts_inc
Michael Niedermayer [Sun, 24 Sep 2017 10:58:42 +0000 (12:58 +0200)]
smacker: fix integer overflow with pts_inc

Bug-Id: 1073

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
(cherry picked from commit ec683ed527cef9aad208d1daeb10d0e7fb63e75e)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agosmacker: return meaningful error codes on failure
Sean McGovern [Sun, 24 Sep 2017 10:57:54 +0000 (12:57 +0200)]
smacker: return meaningful error codes on failure

(cherry picked from commit 9e361022782514d4d4ce97b9c9d5a7863a2de519)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agoarm: Fix SIGBUS on ARM when compiled with binutils 2.29
Martin Storsjö [Thu, 31 Aug 2017 09:06:44 +0000 (12:06 +0300)]
arm: Fix SIGBUS on ARM when compiled with binutils 2.29

In binutils 2.29, the behavior of the ADR instruction changed so that 1 is
added to the address of a Thumb function (previously nothing was added). This
allows the loaded address to be passed to a BLX instruction and the correct
mode change will occur.

See: https://sourceware.org/bugzilla/show_bug.cgi?id=21458

By using adr with a label that isn't annotated as a thumb function,
we avoid the new behaviour in binutils 2.29 and get the same behaviour
as in prior releases, and as in other assemblers (ms armasm.exe,
clang's built in assembler) - an idea that Janne Grunau came up with.

Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 9dde6ab06c48f9447cd16f39bee33569cddb7be4)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agomov: log and return early on non-positive stsd entry counts
Sean McGovern [Fri, 28 Jul 2017 20:17:33 +0000 (16:17 -0400)]
mov: log and return early on non-positive stsd entry counts

Based on an FFmpeg patch by Michael Niedermayer <michael@niedermayer.cc>

(cherry picked from commit d7bdab1ad78ef582ba8c96dc7b79ec9fdbeeb94f)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agoyadif: Account for the buffer alignment while processing the frame edges
Michael Niedermayer [Mon, 21 Aug 2017 07:55:48 +0000 (09:55 +0200)]
yadif: Account for the buffer alignment while processing the frame edges

Avoid out of bound reads.

Bug-Id: 1031
CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit feed239021bad89743d5e7989b426ae594322eb7)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agocaf: add an Opus tag
Anton Khirnov [Sat, 1 Jul 2017 08:49:58 +0000 (10:49 +0200)]
caf: add an Opus tag

CC: libav-stable@libav.org
(cherry picked from commit 48a5c35346aeded1c65b8709bbb085fa4e705c91)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agormdec: don't ignore the return value of av_get_packet()
Sean McGovern [Wed, 12 Jul 2017 23:45:46 +0000 (19:45 -0400)]
rmdec: don't ignore the return value of av_get_packet()

(cherry picked from commit b1494579cd2e6bd4e3bbaa7a78dab6dec061f1c8)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agodvbsubdec: Fixed segfault when decoding subtitles
Lorenz Brun [Fri, 21 Oct 2016 20:51:37 +0000 (22:51 +0200)]
dvbsubdec: Fixed segfault when decoding subtitles

This fixes a segfault (originally found in Movian, but traced to libav)
when decoding subtitles because only an array of rects is allocated,
but not the actual structs it contains. The issue was probably
introduced in commit 2383323 where the loop to allocate the rects in
the array was thrown away.

Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
(cherry picked from commit 1cfd566324f4a9be066ea400685b81c0695e64d9)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agodvbsubdec: improve error checking
Vittorio Giovara [Sun, 9 Nov 2014 07:48:44 +0000 (08:48 +0100)]
dvbsubdec: improve error checking

Use av_mallocz_array instead of iterating and check the returned memory.
Check returned memory and cleanly exit in case of error during the loop.
Avoid a null pointer dereference for invalid data.

CC: libav-stable@libav.org
Bug-Id: CID 29575
(cherry picked from commit 2383323661f3b8342b2c4d356fcfe8c5d1b045f8)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
17 months agoh264_cavlc: check the value of run_before
Anton Khirnov [Wed, 28 Dec 2016 12:02:02 +0000 (13:02 +0100)]
h264_cavlc: check the value of run_before

Section 9.2.3.2 of the spec implies that run_before must not be larger
than zeros_left.

Fixes invalid reads with corrupted files.

CC: libav-stable@libav.org
Bug-Id: 1000
Found-By: Kamil Frankowicz
(cherry picked from commit 522d850e68ec4b77d3477b3c8f55b1ba00a9d69a)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
17 months agopictor: Correctly check frame dimensions
Michael Niedermayer [Tue, 7 Feb 2017 14:49:09 +0000 (15:49 +0100)]
pictor: Correctly check frame dimensions

Fixes: 559/clusterfuzz-testcase-6424225917173760
Bug-Id: CVE-2017-7862

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 8c2ea3030af7b40a3c4275696fb5c76cdb80950a)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
19 months agodfa: Disallow odd width/height and add proper bounds check for DDS1 chunks
Diego Biurrun [Fri, 11 Aug 2017 17:15:20 +0000 (19:15 +0200)]
dfa: Disallow odd width/height and add proper bounds check for DDS1 chunks

DDS1 chunks are decoded in 2x2 blocks, odd chunk width or height is not
allowed in that case. Also ensure that the decode buffer is big enough
for all blocks being processed.

Bug-Id: CVE-2017-9992
CC: libav-stable@libav.org
(cherry picked from commit d34a133b78afe2793cd8537f3c7f42437f441e94)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
20 months agoUpdate changelog for v11.10 v11.10
Sean McGovern [Sat, 1 Jul 2017 16:24:08 +0000 (12:24 -0400)]
Update changelog for v11.10

20 months agodoc: Drop the legacy symlink to README
Luca Barbato [Tue, 13 Jun 2017 23:40:40 +0000 (01:40 +0200)]
doc: Drop the legacy symlink to README

Windows does not like symlinks and README.md is pretty common nowadays.
(cherry picked from commit c5c76370ae240b5e451c4a00a7ab485c0c0e0e98)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
20 months agovc1dec: raise an error if sprite picture data is missing
Sean McGovern [Sat, 22 Apr 2017 23:16:34 +0000 (19:16 -0400)]
vc1dec: raise an error if sprite picture data is missing

Bug-Id: 1013
CC: libav-stable@libav.org
(cherry picked from commit 2e1ab6a67dd5d9a30558d008aa6e541c68d76221)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
20 months agomjpeg: Report non-3 component rgb lossless as not supported
Luca Barbato [Mon, 17 Apr 2017 19:11:57 +0000 (19:11 +0000)]
mjpeg: Report non-3 component rgb lossless as not supported

Bug-Id: 1043
(cherry picked from commit f2c469b73f8ac3dd6a98d38281f61b68ea6dd336)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
20 months agoflv: Validate the packet size
Luca Barbato [Mon, 17 Apr 2017 14:10:52 +0000 (14:10 +0000)]
flv: Validate the packet size

Size can be negative at that point.

Bug-Id: 1041
(cherry picked from commit 279e3aaa14daba6b7a37d75f3fb6e29c732d123f)

20 months agobuild: Add an option for passing linker flags to the shared library build
Janne Grunau [Tue, 20 Jun 2017 17:25:43 +0000 (19:25 +0200)]
build: Add an option for passing linker flags to the shared library build

Also employ this mechanism to pass $libdir to the runtime library search
path if rpath is enabled. This fixes underlinking of some test binaries
on some systems.

(cherry picked from commit 857e26b655a769e5a56bada1a0d9adb44cc176b7)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
21 months agosmacker: Check that the data size is a multiple of a sample vector
Michael Niedermayer [Sun, 15 Nov 2015 13:52:08 +0000 (14:52 +0100)]
smacker: Check that the data size is a multiple of a sample vector

Fixes out of array access
Fixes: ce19e41f0ef1e52a23edc488faecdb58/asan_heap-oob_2504e97_4202_ffa0df1baed14022b9bfd4f8ac23d0cb.smk

Bug-Id: CVE-2015-8365
CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 4a9af07a49295e014b059c1ab624c40345af5892)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
(cherry picked from commit b98f082d8ddc0a0d8317114d8414ab51de60ef02)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
22 months agoaacsbr: Turnoff in the event of over read.
Alex Converse [Mon, 20 Mar 2017 19:44:42 +0000 (12:44 -0700)]
aacsbr: Turnoff in the event of over read.

Aliased compressed AAC bytes are almost certainly not meaningful SBR
data. In the wild this causes harsh artifacts switching HE-AAC streams
that don't have SBR headers aligned with segment boundaries.

Turning off SBR falls back to a default set of upsampling parameters
that can function as a sort of error concealment. This is consistent
with how the decoder handles other sorts of errors.

Bug-Id: 1047
CC: libav-stable@libav.org
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
22 months agomm: Skip unexpected audio packets
Luca Barbato [Mon, 17 Apr 2017 19:25:35 +0000 (19:25 +0000)]
mm: Skip unexpected audio packets

Bug-Id: 1046
CC: libav-stable@libav.org
(cherry picked from commit 1731c3530bffb876deb9e00dfffdf9841a8412cd)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
23 months agoRevert "travis: Add travis support for release/11"
Sean McGovern [Wed, 19 Apr 2017 21:27:53 +0000 (17:27 -0400)]
Revert "travis: Add travis support for release/11"

This reverts commit 4d397f4bcca62d13b8b7b91ee912461c0335e3e4.

Wrong authorship.

Additionally, Travis fails to build due to missing bc(1).

23 months agotravis: Add travis support for release/11
Sean McGovern [Wed, 19 Apr 2017 20:40:13 +0000 (16:40 -0400)]
travis: Add travis support for release/11

Hi Luca,

On Apr 17, 2017 6:37 PM, "Luca Barbato" <lu_zero@gentoo.org> wrote:

23 months agoUpdate changelog for v11.9 v11.9
Sean McGovern [Mon, 10 Apr 2017 00:57:58 +0000 (20:57 -0400)]
Update changelog for v11.9

23 months agompeg4videodec: raise an error if sprite_trajectory.table is NULL
Sean McGovern [Thu, 30 Mar 2017 20:21:38 +0000 (16:21 -0400)]
mpeg4videodec: raise an error if sprite_trajectory.table is NULL

CC: libav-stable@libav.org
Bug-Id: 1012
(cherry picked from commit 6ac0e7818399a57e4684202bac79f35b3561ad1e)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agovf_fade: Make sure to not miss the last lines of a frame
Martin Storsjö [Thu, 16 Feb 2017 10:23:20 +0000 (12:23 +0200)]
vf_fade: Make sure to not miss the last lines of a frame

When slice_h is rounded up due to chroma subsampling, there's
a risk that jobnr * slice_h exceeds frame->height.

Prior to a638e9184d63, this wasn't an issue for the last slice
of a frame, since slice_end was set to frame->height for the last
slice.

a638e9184d63 tried to fix the case where other slices than the
last one would exceed frame->height (which can happen where the
number of slices/threads is very large compared to the frame
height).

However, the fix in a638e9184d63 instead broke other cases,
where slice_h * nb_threads < frame->height. Therefore, make
sure the last slice always ends at frame->height.

CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 8f5de34c8fb18fa1416e77d2cb998773a49ddb3d)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agomatroskadec: make sure not to leave EbmlBin in an inconsistent state
Anton Khirnov [Wed, 28 Dec 2016 12:15:14 +0000 (13:15 +0100)]
matroskadec: make sure not to leave EbmlBin in an inconsistent state

If a read fails, the current code will free the data but leave the size
non-zero. Make sure the size is zeroed in such a case.

CC: libav-stable@libav.org
Bug-Id: 1001
Found-By: Kamil Frankowicz
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
(cherry picked from commit 9026ec8aaf5fa19cb4fb266c16f608af0d863b2b)

2 years agocmdutils: update copyright year to 2017
Sean McGovern [Sun, 1 Jan 2017 21:31:15 +0000 (16:31 -0500)]
cmdutils: update copyright year to 2017

CC: libav-stable@libav.org
(cherry picked from commit d31f46e1999fab31be46f0cbce0546a5aa49fe48)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agohttp: Check for negative chunk sizes
Martin Storsjö [Thu, 15 Dec 2016 08:24:20 +0000 (10:24 +0200)]
http: Check for negative chunk sizes

A negative chunk size is illegal and would end up used as
length for memcpy, where it would lead to memory accesses
out of bounds.

Found-by: Paul Cher <paulcher@icloud.com>
CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 131644677970a3c4a0096270ea2a5b5d437c2e63)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agompeg12dec: move setting first_field to mpeg_field_start()
Anton Khirnov [Sat, 17 Dec 2016 16:04:55 +0000 (17:04 +0100)]
mpeg12dec: move setting first_field to mpeg_field_start()

For field picture, the first_field is set based on its previous value.
Before this commit, first_field is set when reading the picture
coding extension. However, in corrupted files there may be multiple
picture coding extension headers, so the final value of first_field that
is actually used during decoding can be wrong. That can lead to various
undefined behaviour, like predicting from a non-existing field.

Fix this problem, by setting first_field in mpeg_field_start(), which
should be called exactly once per field.

CC: libav-stable@libav.org
Bug-ID: 999
(cherry picked from commit c2fa6bb0e8703a7a6aa10e11f9ab36094416d83f)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agompeg12dec: avoid signed overflow in bitrate calculation
Anton Khirnov [Sat, 17 Dec 2016 14:07:51 +0000 (15:07 +0100)]
mpeg12dec: avoid signed overflow in bitrate calculation

CC: libav-stable@libav.org
Bug-Id: 981
Found-By: Agostino Sarubbo
(cherry picked from commit e807491fc6a336e4becc0cbc981274a8fde18aba)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agompegvideo_parser: avoid signed overflow in bitrate calculation
Anton Khirnov [Sat, 17 Dec 2016 14:07:51 +0000 (15:07 +0100)]
mpegvideo_parser: avoid signed overflow in bitrate calculation

CC: libav-stable@libav.org
Bug-Id: 981
Found-By: Agostino Sarubbo
(cherry picked from commit 58405de0951a843765625159402870c1eea3c3b1)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoh264_slice: Wait for refs to be available before we use them in error concealment
Derek Buitenhuis [Mon, 12 Dec 2016 14:33:27 +0000 (14:33 +0000)]
h264_slice: Wait for refs to be available before we use them in error concealment

This could happen when there was a frame number gap and frame threading was used.

Debugging-by: Ronald S. Bultje <rsbultje@gmail.com>
Debugging-by: Justin Ruggles <justin.ruggles@gmail.com>
Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
CC:libav-stable@libav.org
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoh264: er: Copy from the previous reference only if compatible
Andreas Cadhalpun [Sun, 14 Jun 2015 10:40:18 +0000 (12:40 +0200)]
h264: er: Copy from the previous reference only if compatible

Also use the frame pixel format instead of the one from the codec
context, which is more robust.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit a4fbd55d6e03eabdbecc3b7892ec09eb8062d066)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Conflicts:
libavcodec/h264_slice.c

2 years agompegvideo: Fix undefined negative shifts in mpeg_motion_internal
Luca Barbato [Fri, 4 Mar 2016 15:57:29 +0000 (16:57 +0100)]
mpegvideo: Fix undefined negative shifts in mpeg_motion_internal

Bug-Id: 980

Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
(cherry picked from commit 0242351390643d176b10600c2eb854414f9559e6)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agompegvideo: Fix undefined negative shifts in ff_init_block_index
Luca Barbato [Wed, 2 Mar 2016 23:52:23 +0000 (18:52 -0500)]
mpegvideo: Fix undefined negative shifts in ff_init_block_index

Bug-Id: 980
Found-by: gcc5-ubsan.
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
(cherry picked from commit 7d4a1ff344cbf969ac648642a0fd8484fd5b8637)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agom4vdec: Check for non-startcode 00 00 00 sequences in probe
Michael Niedermayer [Sun, 7 Sep 2014 14:39:39 +0000 (16:39 +0200)]
m4vdec: Check for non-startcode 00 00 00 sequences in probe

This makes the m4v detection less trigger-happy.

Bug-Id: 962
Signed-off-by: Diego Biurrun <diego@biurrun.de>
(cherry picked from commit e5b019725f53b79159931d3a7317107cbbfd0860)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agom4vdec: K&R formatting cosmetics
Gabriel Dume [Tue, 23 Sep 2014 14:29:59 +0000 (10:29 -0400)]
m4vdec: K&R formatting cosmetics

Signed-off-by: Diego Biurrun <diego@biurrun.de>
(cherry picked from commit 4620affa24eedb167482198aa04126bcedd05620)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoavconv: Fix the audio next dts computation
Luca Barbato [Mon, 28 Nov 2016 19:52:47 +0000 (20:52 +0100)]
avconv: Fix the audio next dts computation

Use the correct timebase.

CC: libav-stable@libav.org
(cherry picked from commit d0c84c41d33ffd270d5f9fe0290e08341397fdee)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
Conflicts:
avconv.c

2 years agortsp: Fix a crash with the RTSP muxer
Martin Storsjö [Thu, 15 Sep 2016 11:21:38 +0000 (14:21 +0300)]
rtsp: Fix a crash with the RTSP muxer

This was introduced in bc2a32969e.

The whole block that the statement was added to is only
relevant when used as a demuxer, but the other statements
there have had other if statements guarding them. Make
sure to only run this whole block if being used as a
demuxer.

CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit df3795025337479a639cb3cd26c93a4e82ccd4db)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
Conflicts:
libavformat/rtsp.c

2 years agortsp: move the CONFIG_ macros to the beginning of the check
Vittorio Giovara [Sat, 29 Nov 2014 16:39:41 +0000 (17:39 +0100)]
rtsp: move the CONFIG_ macros to the beginning of the check

With --disable-optimizations, the DCE of some compilers does not remove
such unused code, causing linking failure.

(cherry picked from commit 604c9b1196c70d79bbbc1f23e75f6a8253a74da3)
Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoaacsbr: Check that sample_rate is not 0 before division
Diego Biurrun [Wed, 2 Nov 2016 14:41:47 +0000 (15:41 +0100)]
aacsbr: Check that sample_rate is not 0 before division

Bug-Id: 957

2 years agortmpproto: Send chunk size on the network channel
Martin Storsjö [Thu, 13 Oct 2016 13:17:11 +0000 (16:17 +0300)]
rtmpproto: Send chunk size on the network channel

This makes sure that e.g. Adobe FME actually reacts to it. As long
as the value we've been sending is the default one (128), the bug
hasn't been noticed.

Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 8b5e0d17e70400eaf5dc3845b5c1df8b2b88d830)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 3155e05f6b69ad0100b6f858429fb3bf5370e480)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agortmpproto: Lengthen the filename buffer when receiving streams
Martin Storsjö [Thu, 13 Oct 2016 12:25:33 +0000 (15:25 +0300)]
rtmpproto: Lengthen the filename buffer when receiving streams

Some applications such as Adobe FME append lots of parameters
here, making it easily overflow the current limit.

Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit d6ded94036e43a04889f4ff2813a7f7dd60b82fe)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit b4f65c050c881b4e5aa90222f995500b0ca92fd1)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agortmpproto: Check the return from ff_amf_read_string
Martin Storsjö [Thu, 13 Oct 2016 12:24:54 +0000 (15:24 +0300)]
rtmpproto: Check the return from ff_amf_read_string

If this failed, we used to continue with an uninitialized
filename buffer.

CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit 7395784ba72742b6daa62d35db4028e09f3fdf06)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 25da35dadade75526157dddf8637d43e34834b1e)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agofile protocol: handle the file: protocol string in file_check
Anton Khirnov [Thu, 13 Oct 2016 08:03:18 +0000 (10:03 +0200)]
file protocol: handle the file: protocol string in file_check

This is consistent with what file_open() does.

CC: libav-stable@libav.org
(cherry picked from commit 20b75970e43a030f959b17ff2dfd561174b6f24e)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 0464c3c706c88c71dbaa5c8a3d07bcb69ab05abd)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agompegvideo_motion: Handle edge emulation even without unrestricted_mv
Michael Niedermayer [Tue, 12 Nov 2013 15:11:42 +0000 (16:11 +0100)]
mpegvideo_motion: Handle edge emulation even without unrestricted_mv

Fix out of bounds read.

Bug-Id: 959
Found by: F4B3CD@STARLAB and Agostino Sarubbo
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
(cherry picked from commit 136f55207521f0b03194ef5b55ba70f1635d6aee)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoaudiodsp/x86: clear the high bits of the order parameter on 64bit
Anton Khirnov [Tue, 9 Aug 2016 12:17:15 +0000 (14:17 +0200)]
audiodsp/x86: clear the high bits of the order parameter on 64bit

Also change shl to add, since it can be faster on some CPUs.

CC: libav-stable@libav.org
(cherry picked from commit 75d98e30afab61542faab3c0f11880834653bd6b)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoaudiodsp/x86: fix ff_vector_clip_int32_sse2
Anton Khirnov [Tue, 9 Aug 2016 12:17:15 +0000 (14:17 +0200)]
audiodsp/x86: fix ff_vector_clip_int32_sse2

This version, which is the only one doing two processing cycles per loop
iteration, computes the load/store indices incorrectly for the second
cycle.

CC: libav-stable@libav.org
(cherry picked from commit 1d6c76e11febb58738c9647c47079d02b5e10094)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agolibvpxenc: remove some unused ctrl id mappings
James Zern [Tue, 20 Oct 2015 05:44:11 +0000 (22:44 -0700)]
libvpxenc: remove some unused ctrl id mappings

VP8E_UPD_ENTROPY, VP8E_UPD_REFERENCE, VP8E_USE_REFERENCE were removed
from libvpx and the remaining values were never used here

Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Zern <jzern@google.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 4d05e9392f84702e3c833efa86e84c7f1cf5f612)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoUpdate changelog for v11.8 v11.8
Sean McGovern [Tue, 30 Aug 2016 02:56:15 +0000 (22:56 -0400)]
Update changelog for v11.8

2 years agoavprobe: Fix memory leak
Vittorio Giovara [Thu, 21 Jul 2016 13:47:47 +0000 (15:47 +0200)]
avprobe: Fix memory leak

After init_opts() there needs to be an uninit_opts() call
to free the swscale context and other buffers.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agoavprobe: do not call avio_close() on a custom context
Anton Khirnov [Fri, 19 Feb 2016 13:18:15 +0000 (14:18 +0100)]
avprobe: do not call avio_close() on a custom context

avio_close() can only be called on AVIOContexts created by avio_open(2).

2 years agomov: Remove old b-frame/video delay heuristic
Derek Buitenhuis [Fri, 26 Aug 2016 13:30:07 +0000 (14:30 +0100)]
mov: Remove old b-frame/video delay heuristic

This was added before edts support existed, and is no longer
valid.

Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agomov: Remove ancient heuristic hack
Derek Buitenhuis [Fri, 26 Aug 2016 13:30:06 +0000 (14:30 +0100)]
mov: Remove ancient heuristic hack

This breaks files with legitimate single-entry edit lists,
and the hack, introduced in f03a081df09f9c4798a17d7e24446ed47924b11b,
has no link to any known sample in its commit message.

Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agomss12: validate display dimensions
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
mss12: validate display dimensions

The code currently reads the coded dimensions from the extradata, but
expects the display dimensions to be set by the caller, and does not
check that they are compatible (i.e. that the displayed size is smaller
than the coded size).

Make sure that when the display dimensions are set, they are also valid.
Fixes possible invalid memory access.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 6755eb5b212384e0599f7f2c5de42df49fff57de)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agovc1: check that slices have a positive height
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
vc1: check that slices have a positive height

Fixes possible invalid reads.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 33f10546ec012ad4e1054b57317885cded7e953e)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agopcx: use the bytestream2 API for reading from input
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
pcx: use the bytestream2 API for reading from input

Fixes possible invalid reads.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 09b23786b3986502ee88d4907356979127169bdd)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Conflicts:
libavcodec/pcx.c

2 years agopcx: check that the packet is large enough before reading the header
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
pcx: check that the packet is large enough before reading the header

Fixes possible invalid reads.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 221402c1c88b9d12130c6f5834029b535ee0e0c5)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agopcx: properly pad the scanline
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
pcx: properly pad the scanline

It is passed to the get_bits API, which requires buffers to be padded.

Fixes possible invalid reads.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 15ee419b7abaf17f8c662c145fe93d3dbf43282b)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agocook: use the bytestream2 API for reading extradata
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
cook: use the bytestream2 API for reading extradata

Fixes possible invalid reads in corrupted files.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 409d1cd2c955485798f8b0b0147c2b899b9144ec)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoqpeg: fix an off by 1 error in the MV check
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
qpeg: fix an off by 1 error in the MV check

height - me_y is the line from which we read, so it must be strictly
smaller than the frame height. Fixes possible invalid reads in corrupted
files.

Also, use a proper context for logging the error.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit bba9d8bdfb208b0ec2ccf182530347151ee3528b)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoalac: do not return success if nothing was decoded
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
alac: do not return success if nothing was decoded

If we encounter an END element before anything is decoded, we would
return success even though the output frame has not been allocated,
which is invalid.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit 796dca027be09334d7bbf4f2ac1200e06bb054cb)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agovmnc: check that subrectangles fit into their containing rectangles
Anton Khirnov [Sun, 14 Aug 2016 08:18:39 +0000 (10:18 +0200)]
vmnc: check that subrectangles fit into their containing rectangles

Fixes possible invalid writes with corrupted files.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit f5d46d332258dcd8ca623019ece1d5e5bb74142b)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoriff: don't overwrite bps from WAVEFORMATEX if EXTENSIBLE doesn't contain that data.
Hendrik Leppkes [Wed, 2 May 2012 14:34:45 +0000 (16:34 +0200)]
riff: don't overwrite bps from WAVEFORMATEX if EXTENSIBLE doesn't contain that data.

According to the specification on the MSDN [1], 0 is valid for that
particular field, and it should be ignored in that case.

[1]: http://msdn.microsoft.com/en-us/library/windows/desktop/dd757714(v=vs.85).aspx

Bug-Id: 950

Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 7f549b8338ed3775fec4bf10421ff5744e5866dd)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agovp9: make mv bounds 32bit.
Ronald S. Bultje [Tue, 7 Jan 2014 12:24:03 +0000 (07:24 -0500)]
vp9: make mv bounds 32bit.

The frame dimensions are 16bit, so the mv bounds can easily overflow
int16 for large videos.

Bug-Id: Handbrake/46
CC: libav-stable@libav.org
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 0df4801105d84883071b0978cb3afc7cd5184ce8)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agobuffer: fix av_buffer_realloc() when the data is offset wrt buffer start
Anton Khirnov [Tue, 2 Aug 2016 19:16:44 +0000 (21:16 +0200)]
buffer: fix av_buffer_realloc() when the data is offset wrt buffer start

In such a case behave as if the buffer was not reallocatable -- allocate a
new one and copy the data (preserving just the part described by the
reference passed to av_buffer_realloc).

CC: libav-stable@libav.org
Reported-By: wm4 <nfxjfg@googlemail.com>
(cherry picked from commit 24a362569bff1d4161742fffaca80a4a4428be8a)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agomimic: do not release the newly obsolete reference at the end of decoding
Anton Khirnov [Mon, 25 Jul 2016 11:52:59 +0000 (13:52 +0200)]
mimic: do not release the newly obsolete reference at the end of decoding

The reference frames are used in update_thread_context(), so modifying
them after finish_setup() is a race. The frame in question will be
released during the next decode call.

CC: libav-stable@libav.org
(cherry picked from commit a115eb9e750543f1d8bf951414d291069bf396c2)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoh264: only allow starting a new picture in the first slice thread
Anton Khirnov [Wed, 20 Jul 2016 11:39:10 +0000 (13:39 +0200)]
h264: only allow starting a new picture in the first slice thread

Decoding different pictures in different slice threads simultaneously
leads to all kinds of UB.

Bug-Id: 690

2 years agolibrtmp: Avoid an infiniloop setting connection arguments
Luca Barbato [Wed, 22 Jun 2016 04:36:31 +0000 (06:36 +0200)]
librtmp: Avoid an infiniloop setting connection arguments

The exit condition was missing.

CC: libav-stable@libav.org
(cherry picked from commit 4dbfcd07570a9e45e9597561023adb6da26f27f6)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agoac3: Check the array bound before dereferencing
Luca Barbato [Thu, 26 May 2016 00:41:25 +0000 (02:41 +0200)]
ac3: Check the array bound before dereferencing

CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agofft: ppc: Place ff_fft_calc_interleave_altivec() under correct ifdefs
Diego Biurrun [Sat, 30 Jan 2016 13:39:00 +0000 (14:39 +0100)]
fft: ppc: Place ff_fft_calc_interleave_altivec() under correct ifdefs

Also fix #endif comments in the FFT init code.

(cherry picked from commit 47570dbde8b33001d5ccac44e7ebaaeecbcb807c)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoppc: Restrict some Altivec implementations to Big Endian
Luca Barbato [Sun, 10 May 2015 21:22:17 +0000 (23:22 +0200)]
ppc: Restrict some Altivec implementations to Big Endian

In Little Endian the vec_ld/vec_st operations work as
expected only for byte-vectors.

(cherry picked from commit da60b99a8857d5ca236f32c1799a066e0135a866)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoppc: linux: Check altivec using the auxv
Luca Barbato [Fri, 3 Apr 2015 13:31:32 +0000 (15:31 +0200)]
ppc: linux: Check altivec using the auxv

Should prevent trying to use altivec when it is disabled by the kernel.

(cherry picked from commit baa94563fede8959a638b0fa132dd2124acd93e8)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoppc: avutil: Drop a potentially dangerous workaround
Luca Barbato [Sun, 10 May 2015 20:48:30 +0000 (22:48 +0200)]
ppc: avutil: Drop a potentially dangerous workaround

The compiler is free to optimize such expressions in any sort of way.

(cherry picked from commit 254eb5b6faebb7bcfc3cefc1edced6652fe9d5be)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoppc: Support little endian intreadwrite
Luca Barbato [Thu, 28 Aug 2014 17:40:45 +0000 (19:40 +0200)]
ppc: Support little endian intreadwrite

(cherry picked from commit c19a49e565bd06ea47947d50779ba236df9d4943)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
2 years agoUpdate changelog for v11.7 v11.7
Sean McGovern [Tue, 26 Apr 2016 23:15:44 +0000 (19:15 -0400)]
Update changelog for v11.7

2 years agomatroska: Support V_QUICKTIME as written in the specification
Luca Barbato [Sat, 12 Mar 2016 12:46:13 +0000 (13:46 +0100)]
matroska: Support V_QUICKTIME as written in the specification

Check if the size is written the first 4 bytes and read the next 4
as fourcc candidate, fallback checking the initial for 4 bytes.

"The CodecPrivate contains all additional data that is stored in the
'stsd' (sample description) atom in the QuickTime file after the
mandatory video descriptor structure (starting with the size and FourCC
fields)"

CC: libav-stable@libav.org
(cherry picked from commit 8b4b1c1eea9daa4e2003aa0935e73f56aab8102d)

Conflicts:

libavformat/matroskadec.c

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agomov: Check the entries value when parsing dref boxes
Luca Barbato [Tue, 8 Mar 2016 10:57:16 +0000 (11:57 +0100)]
mov: Check the entries value when parsing dref boxes

And properly reset the entries count when resetting the entries.

CC: libav-stable@libav.org
Bug-Id: 929
Bug-Id: CVE-2016-3062
(cherry picked from commit 7e01d48cfd168c3dfc663f03a3b6a98e0ecba328)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoindeo2: Fix banding artefacts
Luca Barbato [Tue, 23 Feb 2016 00:58:19 +0000 (19:58 -0500)]
indeo2: Fix banding artefacts

Rename luma table to delta table and change how it is used.

CC: libav-stable@libav.org
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
Signed-off-by: Diego Biurrun <diego@biurrun.de>
(cherry picked from commit f8c34f4b8d62afad3f63cf3d9617d73735bef8c1)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agoindeo2data: K&R formatting cosmetics
Luca Barbato [Tue, 23 Feb 2016 00:58:18 +0000 (19:58 -0500)]
indeo2data: K&R formatting cosmetics

Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
Signed-off-by: Diego Biurrun <diego@biurrun.de>
(cherry picked from commit d4066a702407352a0648af882c34ea81a404fa2b)

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agopgssub: Fix subpicture colorspace and range
Jan Ekström [Sun, 24 Apr 2016 18:33:45 +0000 (20:33 +0200)]
pgssub: Fix subpicture colorspace and range

Widen the values from limited to full range and use BT.709 where it
should be used according to the video resolution:

SD is BT.601, HD is BT.709

Default to BT.709 due to most observed HDMV content being HD.

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agocolorspace: Add support for BT709
Jan Ekström [Sun, 24 Apr 2016 18:30:06 +0000 (20:30 +0200)]
colorspace: Add support for BT709

BT.709 coefficients were gathered from the first two parts of BT.709
to BT.2020 conversion guide in ARIB STD-B62 (Pt. 1, Chapter 6.2.2).
They were additionally confirmed by manually calculating values.

Signed-off-by: Sean McGovern <gseanmcg@gmail.com>
2 years agocmdutils: update copyright year to 2016
Sean McGovern [Sat, 12 Mar 2016 19:38:10 +0000 (14:38 -0500)]
cmdutils: update copyright year to 2016

CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
2 years agoavpacket: fix setting AVPacket.data in av_packet_ref()
Anton Khirnov [Thu, 12 May 2016 13:34:58 +0000 (15:34 +0200)]
avpacket: fix setting AVPacket.data in av_packet_ref()

The data field does not necessarily point to the beginning of the
underlying AVBuffer.

CC: libav-stable@libav.org
(cherry picked from commit 8996515b137f962e3a8691241c285c96437b6c53)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agoavpacket: Check buffer reference
Vittorio Giovara [Mon, 2 Feb 2015 19:53:51 +0000 (20:53 +0100)]
avpacket: Check buffer reference

CC: libav-stable@libav.org
Bug-Id: CID 1267889
(cherry picked from commit fe0f4e56577a2dbd373bb50b0ae2d49e69d822fc)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
2 years agotls: Use the right return value for breaking out due to the interrupt callback
Martin Storsjö [Thu, 24 Mar 2016 09:27:49 +0000 (11:27 +0200)]
tls: Use the right return value for breaking out due to the interrupt callback

The retry_transfer_wrapper function higher up in the call chain
ignores AVERROR(EINTR), which only means "interrupted by system call".

This makes sure that returning due to the interrupt callback
works as intended.

CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
2 years agovf_fade: make sure the slice end is always in the frame
Anton Khirnov [Thu, 24 Mar 2016 20:38:54 +0000 (21:38 +0100)]
vf_fade: make sure the slice end is always in the frame

CC: libav-stable@libav.org
(cherry picked from commit a638e9184d63e57e67901f34afe919fd56fd3ac4)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
3 years agoasfenc: fix some possible integer overflows
Anton Khirnov [Fri, 4 Mar 2016 15:32:07 +0000 (16:32 +0100)]
asfenc: fix some possible integer overflows

Store the file duration in the same timebase it arrives (i.e.
milliseconds) and only convert it to the file duration units (100ns)
when it's actually written, thus simplifying some calculations. Also,
store the duration as unsigned, since it cannot be negative.

CC: libav-stable@libav.org
Bug-ID: CVE-2016-2326
(cherry picked from commit ff3db937ef3aa30046a3936146f86ad48ee2ff90)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Conflicts:
libavformat/asfenc.c

3 years agoUpdate changelog for v11.5 and v11.6 v11.6
Sean McGovern [Fri, 26 Feb 2016 22:46:44 +0000 (17:46 -0500)]
Update changelog for v11.5 and v11.6

Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
3 years agoconcat: disable by default
Sean McGovern [Thu, 18 Feb 2016 23:51:12 +0000 (18:51 -0500)]
concat: disable by default

It is a known security issue.

Also, issue a Big Fat Warning if the user explicity requests it.

Original patch by Luca Barbato <lu_zero@gentoo.org>

3 years agoconfigure: add --enable-rpath
Reinhard Tartler [Sat, 23 Aug 2014 14:04:26 +0000 (10:04 -0400)]
configure: add --enable-rpath

This option facilitates testing shared libarary builds: for instance
fate builders do no longer need to set LD_LIBRARY_PATH as the binaries will
get the right search paths hardcoded into their executable file.

This option is only meant to be used for testing purposes: The installed
libraries must not move around in the file system, and doing so will
cause a lot of subtle problems. For more information why using RPATH is
dangerous, please refer to

https://blog.flameeyes.eu/2010/06/the-why-and-how-of-rpath

(cherry picked from commit 749b1f1359b5af0a08221923b016551b18ab6171)
Signed-off-by: Diego Biurrun <diego@biurrun.de>
3 years agomatroska: Always consider S_TEXT/UTF8 as SRT when demuxing v11.5
Luca Barbato [Fri, 19 Feb 2016 12:49:43 +0000 (13:49 +0100)]
matroska: Always consider S_TEXT/UTF8 as SRT when demuxing

Reported-By: Maxim Koitsov <maksbotan@gentoo.org>
3 years agomkv: Force the full parsing of mp3
Luca Barbato [Sat, 6 Feb 2016 12:15:37 +0000 (13:15 +0100)]
mkv: Force the full parsing of mp3

Some muxer might or might not fit incomplete mp3 frames in
their packets.

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
3 years agomov: Force the full parsing of mp3
Luca Barbato [Sat, 6 Feb 2016 12:15:36 +0000 (13:15 +0100)]
mov: Force the full parsing of mp3

Some muxer might or might not fit incomplete mp3 frames in
their packets.

Bug-Id: 899

CC: libav-stable@libav.org
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
3 years agoUpdate changelog for v11.5
Sean McGovern [Sun, 7 Feb 2016 21:43:42 +0000 (16:43 -0500)]
Update changelog for v11.5

3 years agomov: Use the correct type for size
Luca Barbato [Tue, 9 Feb 2016 22:07:18 +0000 (23:07 +0100)]
mov: Use the correct type for size

An AVIO offset is int64_t.

Bug-Id: 921

3 years agoavi: Validate the stream-id for DV as well
Michael Niedermayer [Sat, 28 Nov 2015 20:06:45 +0000 (21:06 +0100)]
avi: Validate the stream-id for DV as well

Avoid false positives while syncing.

Bug-Id: ffmpeg/4086
Bug-Id: 879

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>