ffmpeg-3.3.3

[bdubbs@…]

New point version.

[bdubbs@…]

version 3.3.3:

• avcodec/dirac_dwt: Fix multiple integer overflows in COMPOSE_DD97iH0()
• avcodec/diracdec: Fix integer overflow in divide3()
• avcodec/takdec: Fix integer overflow in decode_subframe()
• avformat/rtmppkt: Convert ff_amf_get_field_value() to bytestream2
• avformat/rtmppkt: Convert ff_amf_tag_size() to bytestream2
• avcodec/diracdec: Fix integer overflow in signed multiplication in UNPACK_ARITH()
• avcodec/pixlet: Simplify nbits computation
• avcodec/dnxhddec: Move mb height check out of non hr branch
• avcodec/hevc_ps: fix integer overflow in log2_parallel_merge_level_minus2
• avformat/oggparsecelt: Do not re-allocate os->private
• avcodec/ylc: Fix shift overflow
• avcodec/aacps: Fix multiple integer overflow in map_val_34_to_20()
• avcodec/aacdec_fixed: fix: left shift of negative value -1
• avcodec/dirac_vlc: Fix undefined shift
• doc/filters: typo in frei0r
• avcodec/cfhd: Fix decoding regression due to height check
• avcodec/aacdec_template (fixed point): Check gain in decode_cce() to avoid undefined shifts later
• avcodec/ffv1dec_template: Fix signed integer overflow
• avcodec/aacdec_template: Fix undefined integer overflow in apply_tns()
• avcodec/magicyuv: Check that vlc len is not too large
• avcodec/mjpegdec: Clip DC also on the negative side.
• avcodec/aacps (fixed point): Fix multiple signed integer overflows
• avcodec/ylc: Fix vlc of 31 bits
• avcodec/sbrdsp_fixed: Fix integer overflow in sbr_hf_apply_noise()
• avcodec/hevcdec: do not let updated extradata corrupt state
• avcodec/wavpack: Fix invalid shift
• avcodec/h264_slice: Fix signed integer overflow
• avcodec/hevc_ps: Fix integer overflow with beta/tc offsets
• avcodec/cfhd: Fix invalid left shift of negative value
• avcodec/vb: Check vertical GMC component before multiply
• avcodec/hevcdec: do basic validity check on delta_chroma_weight and offset
• avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
• avcodec/apedec: Fix integer overflow
• avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
• avcodec/hevc_ps: Fix max_dec_buffer check
• avcodec/mpeg4videodec: Fix GMC with videos of dimension 1
• avcodec/wavpack: Fix integer overflow
• avcodec/takdec: Fix integer overflow
• avcodec/tiff: Update pointer only when the result is used
• avcodec/cfhd: Check bpc before setting bpc in context
• avcodec/cfhd: Fix undefined shift
• avcodec/hevc_filter: Fix invalid shift
• avcodec/mpeg4videodec: Fix overflow in virtual_ref computation
• avcodec/lpc: signed integer overflow in compute_lpc_coefs() (aacdec_fixed)
• avcodec/wavpack: Fix undefined integer negation
• avcodec/aacdec_fixed: Check s for being too small
• avcodec/htmlsubtitles: Replace very slow redundant sscanf() calls by cleaner and faster code
• avcodec/h264: Fix mix of lossless and lossy MBs decoding
• avcodec/h264_mb: Fix 8x8dct in lossless for new versions of x264
• avcodec/h264_cabac: Fix CABAC+8x8dct in 4:4:4
• avcodec/takdec: Fixes: integer overflow in AV_SAMPLE_FMT_U8P output
• avcodec/jpeg2000dsp: Reorder operations in ict_int() to avoid 2 integer overflows
• avcodec/hevcpred_template: Fix left shift of negative value
• avcodec/hevcdec: Fix signed integer overflow in decode_lt_rps()
• avcodec/jpeg2000dec: Check nonzerobits more completely
• avcodec/shorten: Sanity check maxnlpc
• avcodec/truemotion2: Move skip computation after checks
• avcodec/jpeg2000: Fixes integer overflow in ff_jpeg2000_ceildivpow2()
• avcodec/dnxhd_parser: Do not return invalid value from dnxhd_find_frame_end() on error
• avcodec/hevcdec: Check nb_sps
• avcodec/hevc_refs: Check nb_refs in add_candidate_ref()
• avcodec/mpeg4videodec: Check sprite delta upshift against overflowing.
• avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case
• avcodec/aacsbr_fixed: Check shift in sbr_hf_assemble()
• avcodec/sbrdsp_fixed: Return an error from sbr_hf_apply_noise() if operations are impossible
• avcodec/libvpxdec: Check that display dimensions fit in the storage dimensions
• avcodec/jpeg2000dwt: Fix runtime error: left shift of negative value -123
• avcodec/wavpack: Fix runtime error: signed integer overflow: 1886191616 + 277872640 cannot be represented in type 'int'
• avcodec/snowdec: Fix runtime error: left shift of negative value -1
• avcodec/aacdec_fixed: Fix runtime error: left shift of negative value -1297616
• avcodec/tiff: Fix leak of geotags[].val
• avcodec/ra144: Fix runtime error: signed integer overflow: -2200 * 1033073 cannot be represented in type 'int'
• avcodec/flicvideo: Fix runtime error: signed integer overflow: 4864 * 459296 cannot be represented in type 'int'
• avcodec/cfhd: Check band parameters before storing them
• avcodec/h264_parse: Check picture structure when initializig weight table
• avcodec/indeo4: Check remaining data in Pic hdr extension parsing code
• avcodec/ac3dec_fixed: Fix multiple runtime error: signed integer overflow: -39271008 * 59 cannot be represented in type 'int'
• lavc/aarch64/simple_idct: fix idct_col4_top coefficient

[bdubbs@…]

Fixed at revision 18991.