On branch release/4.1-next1
Changes not staged for commit:
  (use "git add ..." to update what will be committed)
  (use "git checkout -- ..." to discard changes in working directory)

	modified:   configure

no changes added to commit (use "git add" and/or "git commit -a")
commit 6ca42176ffe3c05c61e1c163541e8a48ce57586a
Author: Carl Eugen Hoyos 
Date:   Wed Jun 19 13:41:01 2019 +0200

    lavc/tableprint_vlc: Remove avpriv_request_sample() from included files.
    
    Fixes compilation with --enable-hardcoded-tables.
    Fixes ticket #7962.

commit 6bf06c58d161ee27ea67f7b672c99ad0d0c3dc19
Author: Kirill Gavrilov 
Date:   Sat Jan 26 16:39:29 2019 +0300

    Workaround missing  within VS2010

commit a35354a4b04ec50d522decd420d477ba6ee681ae
Author: Kirill Gavrilov 
Date:   Wed Jan 23 23:11:54 2019 +0300

    Workaround building on old Android NDK (before r17)
    
    @sa https://gitlab.gnome.org/GNOME/glib/commit/7efd76dd6796f886134436e04fb149132b18b989

commit 0c904c0d3ff85ed5f634ff3e3202d5c1cd4a95d1
Author: Mark Harris 
Date:   Sat Nov 24 13:02:02 2018 -0800

    avutil/mem: Fix invalid use of av_alloc_size
    
    The alloc_size attribute is valid only on functions that return a
    pointer.  GCC 9 (not yet released) warns about invalid usage:
    
    ./libavutil/mem.h:342:1: warning: 'alloc_size' attribute ignored on a function returning int' [-Wattributes]
      342 | av_alloc_size(2, 3) int av_reallocp_array(void *ptr, size_t nmemb, size_t size);
          | ^~~~~~~~~~~~~
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 4361293fcf59edb56879c36edcd25f0a91e0edf8)

commit 6e0cf9a9df4a21df89825427914e38bd4c6216ba
Author: Andreas Rheinhardt 
Date:   Wed Jun 5 04:18:54 2019 +0200

    cbs_h2645: Fix infinite loop in more_rbsp_data
    
    cbs_h2645_read_more_rbsp_data does not handle malformed input very well:
    1. If there were <= 8 bits left in the bitreader, these bits were read
    via show_bits. But show_bits requires the number of bits to be read to
    be > 0 (internally it shifts by 32 - number of bits to be read which is
    undefined behaviour if said number is zero; there is also an assert for
    this, but it is only an av_assert2). Furthermore, in this case a shift
    by -1 was performed which is of course undefined behaviour, too.
    2. If there were > 0 and <= 8 bits left and all of them were zero
    (this can only happen for defective input), it was reported that there
    was further RBSP data.
    
    This can lead to an infinite loop in H.265's cbs_h265_read_extension_data
    corresponding to the [vsp]ps_extension_data_flag syntax elements. If the
    relevant flag indicates the (potential) occurence of these syntax elements,
    while all bits after this flag are zero, cbs_h2645_read_more_rbsp_data
    always returns 1 on x86. Given that a checked bitstream reader is used,
    we are also not "saved" by an overflow in the bitstream reader's index.
    
    Signed-off-by: Andreas Rheinhardt 
    (cherry picked from commit d4035ca849bdb90e95c87e2737a99ea657be0716)

commit a21a9c78637ac1d86dd272214b6fc2008aef4db1
Author: James Almer 
Date:   Sat Jul 20 21:47:55 2019 -0300

    avformat/aacdec: resync to the next adts frame on invalid data instead of aborting
    
    Should fix ticket #6634
    
    Signed-off-by: James Almer 
    (cherry picked from commit 881e1f5a6227a6fbaf67083d4d4b6caf58ff9892)

commit 1fbe0286e4091dd4cdc0694965d92c42b98cacf1
Author: James Almer 
Date:   Sat Jul 20 10:13:08 2019 -0300

    avformat/aacdec: factorize the adts frame resync code
    
    Signed-off-by: James Almer 
    (cherry picked from commit a38eab8b7501440f872ff1af8a0c5482b7b3e532)

commit 1b6bcee9fe6f59a2d8c11c18711d65d744b0b5aa
Author: Andreas Rheinhardt 
Date:   Wed May 22 03:04:34 2019 +0200

    cbs_mpeg2: Fix storage type for frame_centre_*_offset
    
    The frame_centre_horizontal/vertical_offset values contained in picture
    display extensions are actually signed values (i.e. it is possible to
    indicate that the display device should add black bars/pillars).
    
    The files sony-ct3.bs and tcela-6.bits (which are both used in fate
    tests for mpeg2_metadata) contain picture display extensions; the former
    even contains a negative frame_centre_vertical_offset. Fortunately, the
    old code did not damage the picture display extensions when one did a
    cycle of reading and writing. For the same reason the fate tests needn't
    be updated either.
    
    Furthermore these fields now use the trace output for matrices.
    
    Signed-off-by: Andreas Rheinhardt 
    (cherry picked from commit de5880383967f44927c599ab16fa0f4f96b38365)

commit b010caa6c9e85657c2032046773cb1a816a5b1da
Author: Andreas Rheinhardt 
Date:   Wed May 22 03:04:32 2019 +0200

    cbs_mpeg2: Improve checks for invalid values
    
    MPEG-2 contains several elements that mustn't be zero according to the
    specifications: horizontal/vertical_size_value, aspect_ratio_information,
    frame_rate_code, the quantiser matrices, the colour_description
    elements, picture_coding_type, the f_code[r][s] values and
    quantiser_scale_code. It is now checked that the invalid values don't
    occur.
    
    The colour_description elements are treated specially in this regard:
    Given that there are files in the wild which use illegal values for the
    colour_description elements (some of them created by mpeg2_metadata),
    they will be corrected to the value meaning "unknown" (namely 2) during
    reading. This has been done in such a way that trace_headers will
    nevertheless report the original value, together with a message about
    the fixup.
    
    Furthermore, the trace_headers output of user_data has been beautified.
    
    Signed-off-by: Andreas Rheinhardt 
    (cherry picked from commit 9c3f2a8894a66d6b5b9285caa25f91fbfca7b3bc)

commit ae5c80b9cae8716085eaacd887c28378ae99233b
Author: James Almer 
Date:   Wed May 22 03:04:38 2019 +0200

    avcodec/cbs_mpeg2: fix leak of extra_information_slice buffer in cbs_mpeg2_read_slice_header()
    
    cbs_mpeg2_free_slice() calls av_buffer_unref() on extra_information_ref,
    meaning allocating with av_malloc() was not the intention.
    
    Signed-off-by: James Almer 
    (cherry picked from commit d903c09d9a5c641223f0810d24161520e977544a)

commit b3b5941ec7b4c1dbb059b0cd85db3c659d5c8039
Author: Carl Eugen Hoyos 
Date:   Mon Dec 17 14:39:41 2018 +0100

    lavc/cbs: Do not use format specifier "z" on Windows.
    
    (cherry picked from commit 0b7269e62d0345fec5f1ee9ee7b960e8d25c5dd1)

commit 84b94fdd05d24f161f6559bfef63a8db049e0cc7
Author: Carl Eugen Hoyos 
Date:   Mon Dec 10 02:18:56 2018 +0100

    lavc/cbs_vp9: Make variable prob unsigned.
    
    Silences a warning with clang:
    libavcodec/cbs_vp9_syntax_template.c:220:17: warning: implicit conversion from 'int' to 'int8_t' (aka 'signed char')
          changes value from 255 to -1
    
    (cherry picked from commit de441ad52a4d9791d93c278b4cf6867815c28b92)

commit a2132139852c57e71c731d10e5dc20e97342c289
Author: James Almer 
Date:   Mon Apr 15 17:50:01 2019 -0300

    avcodec/cbs_h264: fix storage type for time_offset in Pic Timing SEI
    
    The spec defines it as a signed value.
    
    Reviewed-by: Mark Thompson 
    Signed-off-by: James Almer 
    (cherry picked from commit 9bf520d04d6137d0772e019356356614bbf7ca82)

commit 94b1630b7ca34964aa873a59540ecd895a1bf9e6
Author: James Almer 
Date:   Mon Apr 15 17:48:55 2019 -0300

    avcodec/cbs_h2645: add helper macros for signed values
    
    Reviewed-by: Mark Thompson 
    Signed-off-by: James Almer 
    (cherry picked from commit 3dc6adf326c8cd6c7fc830ccb8def8772835c676)

commit 7dc2366533d63df9d46be5ea3ec066e1977898d4
Author: James Almer 
Date:   Mon Apr 15 17:46:53 2019 -0300

    avcodec/cbs: add helper functions and macros to read and write signed values
    
    Reviewed-by: Mark Thompson 
    Signed-off-by: James Almer 
    (cherry picked from commit 5006dcdf9af177444e3e0185640d7d84629e4215)

commit 2ac6315c7c3a0049b02d1d79f7944507fdc4c456
Author: Andreas Rheinhardt 
Date:   Wed Nov 7 04:47:51 2018 +0100

    cbs_h264: Fix handling of auxiliary pictures
    
    The earlier code used the most recent non-auxiliary slice to determine
    whether an auxiliary slice has the syntax of an IDR slice, even when
    the most recent slice was from a slice of a redundant frame. Now only
    slices of the primary coded picture are used, as the specifications
    mandate.
    
    Signed-off-by: Andreas Rheinhardt 
    (cherry picked from commit 8d1cf2d89481ca986af893425188d065c0f8f857)

commit 9d06c1f95ebe4f9c2cc05d041dbfd3de52d2518a
Author: Michael Niedermayer 
Date:   Mon Jul 8 20:10:55 2019 +0200

    Changelog: fix typo
    
    Signed-off-by: Michael Niedermayer 

commit 7d4e9074c6aba80a0e08fc26128e3603714ffaad
Author: Michael Niedermayer 
Date:   Mon Jul 8 11:53:46 2019 +0200

    Changelog: update
    
    Signed-off-by: Michael Niedermayer 

commit 7654e5aa3b6e57f6cf161531af340ae41929fa70
Author: Michael Niedermayer 
Date:   Sun Jun 30 23:28:13 2019 +0200

    avcodec/ilbcdec: Simplify use of unsigned and fix more undefined overflows
    
    Fixes: signed integer overflow: 2147475672 + 8192 cannot be represented in type 'int'
    Fixes: 15415/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ILBC_fuzzer-5712074128228352
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 019d729039aaa164152035864d65d77e53df1c98)
    Signed-off-by: Michael Niedermayer 

commit 6ddb253f79677e2e0594715b1b91720606b0e331
Author: Michael Niedermayer 
Date:   Sun Jun 30 17:54:45 2019 +0200

    avcodec/golomb: Correct the doxy about get_ue_golomb() and errors
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 1bb3b3f11c6960e90bcfe685c0ad1e355a3e787e)
    Signed-off-by: Michael Niedermayer 

commit a1416c6c8d1234a53b7e52f45d7f5d613ff8cf10
Author: Michael Niedermayer 
Date:   Sat Jun 29 23:23:25 2019 +0200

    avformat/utils: Check timebase before use in estimate_timings()
    
    Fixes: division by 0
    Fixes: 15480/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5746727434321920
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit f57e97dfd9539bc3f4f97a76ebc001f0b055cb88)
    Signed-off-by: Michael Niedermayer 

commit 3e3db69193809d5c1844b0e49f9f8da181492133
Author: Michael Niedermayer 
Date:   Sat Jun 29 21:53:09 2019 +0200

    avcodec/hq_hqa: Use ff_set_dimensions()
    
    Fixes: 15530/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HQ_HQA_fuzzer-5637370344374272
    Fixes: signed integer overflow: 65312 * 65312 cannot be represented in type 'int'
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit a6229fcd405d4135848c83df73634871260de59c)
    Signed-off-by: Michael Niedermayer 

commit 16f8e50f86ce6c9944f31045dae9639baaadf444
Author: Michael Niedermayer 
Date:   Fri Jun 28 19:20:43 2019 +0200

    avcodec/rv10: Fix integer overflow in aspect ratio compare
    
    Fixes: signed integer overflow: 2040 * 1187872 cannot be represented in type 'int'
    Fixes: 15368/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RV20_fuzzer-5681657136283648
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 14fcf42958608223a0be6558fb6e323419c9fc27)
    Signed-off-by: Michael Niedermayer 

commit 4db3ec5e7b1ab08abbe08dbcb7c9de37e8b3dfe4
Author: Michael Niedermayer 
Date:   Thu Jun 27 00:15:03 2019 +0200

    avcodec/4xm: Fix signed integer overflows in idct()
    
    Fixes: signed integer overflow: 20242 * 121095 cannot be represented in type 'int'
    Fixes: 15310/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FOURXM_fuzzer-5737051745419264
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 2bbea155bf7c6ce6d5ae53cc41e44798cad2f39c)
    Signed-off-by: Michael Niedermayer 

commit 2424d0096e303786fdd4eb6663215f76f8e9da87
Author: Michael Niedermayer 
Date:   Mon Jun 24 01:01:04 2019 +0200

    avcodec/qdm2: Check checksum_size for 0
    
    Fixes: Infinite loop
    Fixes: 15337/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDM2_fuzzer-5757428949319680
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 7b2ebf89a411d957ca999f1e7a919ff617fbfd56)
    Signed-off-by: Michael Niedermayer 

commit 07975e89d32642e588d7713feed5a949e976e50e
Author: Michael Niedermayer 
Date:   Mon Jun 24 01:01:03 2019 +0200

    avcodec/qdm2: error out of qdm2_fft_decode_tones() before entering endless loop
    
    Fixes: signed integer overflow: 2147483646 + 2 cannot be represented in type 'int'
    Fixes: infinite loop
    Fixes: 15396/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDM2_fuzzer-5116605501014016
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 694be24bd6c4cc9c62222f4583260bf79056e4c1)
    Signed-off-by: Michael Niedermayer 

commit e5c21ed6e35e1efc89b583c793fd64b8b53f93e3
Author: Michael Niedermayer 
Date:   Mon Jun 24 01:01:02 2019 +0200

    avcodec/qdm2: Do not read out of array in fix_coding_method_array()
    
    Instead we ask for a sample, its unclear what to do in this case.
    
    Fixes: index 30 out of bounds for type 'int8_t [30][64]'
    Fixes: 15339/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDM2_fuzzer-5749441484554240
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit ae021c1239ec3bc0a30dc5a4720569071599ece4)
    Signed-off-by: Michael Niedermayer 

commit dd59d92e942f0986d87a80ea69b570e804ed7106
Author: Michael Niedermayer 
Date:   Tue Jun 25 23:42:43 2019 +0200

    avcodec/svq3: Use ff_set_dimension()
    
    Fixes: OOM
    Fixes: 15410/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_SVQ3_fuzzer-5659464805384192
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 7b114d76878f1a542bcb75456492cc43e6414f8b)
    Signed-off-by: Michael Niedermayer 

commit d534cb834564f440c6368b5c6597c67e1f97635d
Author: Michael Niedermayer 
Date:   Sat Jun 22 19:21:50 2019 +0200

    avcodec/iff: Check ham vs bpp
    
    This checks the ham value much stricter and avoids hitting cases which cannot be reached
    with data from the libavformat demuxer.
    
    Fixes: out of array access
    Fixes: 15320/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5080476840099840
    Fixes: 15423/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5630765833912320
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit f76d7352e05526fde7c607b9a9db536a5760af29)
    Signed-off-by: Michael Niedermayer 

commit 074f40608e19ce7ce44c320dda87836806991d59
Author: Michael Niedermayer 
Date:   Fri Jun 21 22:43:23 2019 +0200

    avcodec/ffwavesynth: use uint32_t to compute difference, it is enough
    
    Fixes: signed integer overflow: 6494225984479297536 - -6043795377581187040 cannot be represented in type 'long'
    Fixes: 15285/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5632780307791872
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit e9dd3c7126097d7c8d4f137db9957b81a219aa2c)
    Signed-off-by: Michael Niedermayer 

commit 73885bf3e19651b2316eac6690167095039603b2
Author: Michael Niedermayer 
Date:   Fri Jun 21 22:41:25 2019 +0200

    avcodec/ffwavesynth: Simplify lcg_seek(), avoid negative case
    
    Fixes: negation of -9223372036854775808 cannot be represented in type 'int64_t' (aka 'long'); cast to an unsigned type to negate this value to itself
    Fixes: 15289/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5709034499342336
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 8c022099351c04ae21e0b8696ea71a690ed03cd2)
    Signed-off-by: Michael Niedermayer 

commit 24ea2679e2c93891a6a4c5fbddad6c27e459c140
Author: Michael Niedermayer 
Date:   Fri Jun 21 22:08:27 2019 +0200

    avcodec/ffwavesynth: Fix backward lcg_seek()
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit cf2bd3ce79b12256d7d129b2ada5ee649b9a27eb)
    Signed-off-by: Michael Niedermayer 

commit 10880dd695daa1fb85ef96a15be5b46ce339d2fb
Author: Michael Niedermayer 
Date:   Fri Jun 21 23:45:36 2019 +0200

    avcodec/flicvideo: Fix off by 1 error in flic_decode_frame_24BPP()
    
    Fixes: out of array access
    Fixes: 15360/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLIC_fuzzer-5653837190266880
    Fixes: 15412/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FLIC_fuzzer-5740537648250880
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 37708cbae8d6887b80f58a70a1dfa01af6ea2c85)
    Signed-off-by: Michael Niedermayer 

commit 4d7ee3b0ff12c79a84ec29f9b876760795ef3d5d
Author: Michael Niedermayer 
Date:   Sat Jun 15 23:28:25 2019 +0200

    avcodec/vc1_block: Check for vlc error in vc1_decode_ac_coeff()
    
    Fixes: index -1 out of bounds for type 'const uint8_t [185][2]'
    Fixes: 15250/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMV3IMAGE_fuzzer-5648992869810176
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 79204a1fc8f1988f7d7e6cae2c3b68f513444d38)
    Signed-off-by: Michael Niedermayer 

commit ac9d8e7c501cc1118d99b6226a7fbef4e0578c72
Author: Michael Niedermayer 
Date:   Wed Jun 19 01:04:07 2019 +0200

    avcodec/alac: Check lpc_quant
    
    lpc_quant of 0 produces undefined behavior, thus disallow this.
    If valid samples use this then such a sample would be quite
    usefull to confirm the correct&lossles handling of this.
    
    Fixes: libavcodec/alac.c:218:25: runtime error: shift exponent -1 is negative
    Fixes: 15273/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-5656388535058432
    Fixes: 15276/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-5761238417539072
    Fixes: 15315/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALAC_fuzzer-5767260766994432
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit a6474b899c1153e3bb95e399b6605c3507aea0d0)
    Signed-off-by: Michael Niedermayer 

commit c697819aee7ff44181077859ca5f0962049272e2
Author: Michael Niedermayer 
Date:   Mon Jun 3 11:22:36 2019 +0200

    avcodec/dxv: Initialize tex_funct to NULL
    
    Fixes: Various anomalies
    Fixes: 14493/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-5071018000908288
    Fixes: 14630/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-5714888963391488
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit e96b7a8ba62c5e010328b80b647b64dd9cdbdc01)
    Signed-off-by: Michael Niedermayer 

commit c34512371e1d09a1862a3c7f53a17b3e9198729a
Author: Michael Niedermayer 
Date:   Fri Jun 21 00:47:19 2019 +0200

    avcodec/alsdec: Add FF_CODEC_CAP_INIT_CLEANUP
    
    Fixes: multiple memleaks
    Fixes: 15293/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5642409288925184
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit b7b6ddd59693008c35b3247496ecc946331d0856)
    Signed-off-by: Michael Niedermayer 

commit fa2dbcfd8f4b1ed7b62c464fb509a6b3b9bf4ab2
Author: Michael Niedermayer 
Date:   Fri Jun 21 00:47:17 2019 +0200

    avcodec/alsdec: Fix integer overflow with buffer number
    
    Fixes: signed integer overflow: 65313 * 65313 cannot be represented in type 'int'
    Fixes: 15290/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5738074249625600
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 5f64f6058e0c23641a68ce7dfe47b1f55efd401c)
    Signed-off-by: Michael Niedermayer 

commit ed8e191bfb1f64612d9a751e5003f985d9adb402
Author: Michael Niedermayer 
Date:   Fri Jun 21 00:47:16 2019 +0200

    avcodec/alsdec: Fixes signed integer overflow in LSB addition
    
    Fixes: signed integer overflow: 8 * 536870912 cannot be represented in type 'int'
    Fixes: 15281/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5744458785619968
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 7f527021df73b4792323f38f84a4bf2fbe5a2052)
    Signed-off-by: Michael Niedermayer 

commit 75e838a6daa76a913361c7e725976b3b07a1312a
Author: Michael Niedermayer 
Date:   Fri Jun 21 00:47:15 2019 +0200

    avcodec/alsdec: Check opt_order / sb_length in ra_block handling
    
    Fixes: out of array access
    Fixes: 15277/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5184853437317120
    Fixes: 15280/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5741062137577472
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 0794494c8f2f756e3c9384dba21c54f7d4ba9286)
    Signed-off-by: Michael Niedermayer 

commit 99745dc2f353be1eb97291bd501053709b7b2d61
Author: Michael Niedermayer 
Date:   Wed Jun 19 23:27:21 2019 +0200

    avcodec/alsdec: Fix integer overflow with shifting samples
    
    Fixes: signed integer overflow: -346039050 * 8 cannot be represented in type 'int'
    Fixes: 15283/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5692700268953600
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit a3bd4b260eb9f0d5817f9b3d672844f127c51a0b)
    Signed-off-by: Michael Niedermayer 

commit dcef55b5ff8e36d30100df956102ce190b835840
Author: Michael Niedermayer 
Date:   Wed Jun 19 23:17:31 2019 +0200

    avcodec/alsdec: Fix undefined behavior in decode_rice()
    
    Fixes: left shift of 72 by 26 places cannot be represented in type 'int'
    Fixes: 15279/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5700665621348352
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 51f6870c37cc29e1ea7e0c66df2fe505938b7561)
    Signed-off-by: Michael Niedermayer 

commit 10562175405277ac24f02ee2d29455169b1b54e0
Author: Michael Niedermayer 
Date:   Wed Jun 19 21:53:43 2019 +0200

    avcodec/alsdec: Fixes invalid shifts in read_var_block_data() and INTERLEAVE_OUTPUT()
    
    Fixes: left shift of negative value -6
    Fixes: 15275/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5742361767837696
    Fixes: signed integer overflow: 41582592 * 256 cannot be represented in type 'int'
    Fixes: 15296/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5739558227935232
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit e131568752ad41222946304c61eadb87b0a24791)
    Signed-off-by: Michael Niedermayer 

commit df61ec263faa1408a0a63bad2d3d5bf0462dadb2
Author: Michael Niedermayer 
Date:   Tue Jun 25 10:29:57 2019 +0200

    avcodec/hevc_ps: Change num_tile_rows/columns checks to sps->ctb_height/weight
    
    Suggested-by: James Almer 
    Reviewed-by: James Almer 
    (cherry picked from commit 3b2082c663dac93fd722289a540c1b1e24a12564)
    Signed-off-by: Michael Niedermayer 

commit 3fa15bb096b1e64206f0307460c9b694e6d368d9
Author: Michael Niedermayer 
Date:   Thu Jun 13 15:05:54 2019 +0200

    avcodec/hevc_ps: Fix integer overflow with num_tile_rows and num_tile_columns
    
    Fixes: signed integer overflow: -2147483648 - 1 cannot be represented in type 'int'
    Fixes: 14880/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5130977304641536
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: James Almer 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit c692051252693155c4eecd16f4f8a79caf66cd54)
    Signed-off-by: Michael Niedermayer 

commit 523a47b3f6004352236ec46e9d870e236b1428f3
Author: Michael Niedermayer 
Date:   Sun Jun 16 11:26:57 2019 +0200

    avcodec/apedec: Add k < 24 check to the only k++ case which lacks such a check
    
    Fixes: 15255/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-5718831688843264
    Fixes: left shift of 1 by 31 places cannot be represented in type 'int'
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 3d4f4f4a15e79c96c3613e5c252b2f5cc4190e18)
    Signed-off-by: Michael Niedermayer 

commit 7d075c5f337f76bbefee8fbcff7e3cc8d9f14a24
Author: Michael Niedermayer 
Date:   Sun Jun 9 22:04:16 2019 +0200

    avformat/aviobuf: Delay buffer downsizing until asserts are met
    
    Fixes: Assertion failure
    Fixes: 15151/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5757079496687616
    Fixes: 15205/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5767573242642432
    May fix: Ticket7094
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 0334632d5c02720f1829d59cd20c009584b5b163)
    Signed-off-by: Michael Niedermayer 

commit b5d6b509b1ce6c663c30d329d939ff13bfd4e280
Author: Michael Niedermayer 
Date:   Thu Jun 13 00:24:53 2019 +0200

    avcodec/fitsdec: Check data_min/max
    
    Fixes: division by 0
    Fixes: 15206/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FITS_fuzzer-5657260212092928
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit eb82d19f035f59edf0aee215f02baaea908875de)
    Signed-off-by: Michael Niedermayer 

commit f3bfb0717982992959ac4ecd40f4d2ddcab25eb1
Author: Michael Niedermayer 
Date:   Mon Jun 17 21:13:17 2019 +0200

    avcodec/m101: Fix off be 2 error
    
    Fixes: out of array read
    Fixes: 15263/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_M101_fuzzer-5728999453491200
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 89b96900fa7c17d0770c9af26af7c3ae36ae0253)
    Signed-off-by: Michael Niedermayer 

commit 423d0bbc556721849847d6dc9143d41d97b9a03c
Author: Michael Niedermayer 
Date:   Mon Jun 17 20:58:47 2019 +0200

    avcodec/qdm2: Move fft_order check up
    
    This avoids undefined computations with unchecked values
    
    Fixes: shift exponent -21 is negative
    Fixes: 15262/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDM2_fuzzer-5651261753393152
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 8d8b8c4ac6fb5b5d40bd131f2d2ea9d85b8759a6)
    Signed-off-by: Michael Niedermayer 

commit 1aa0c2a06f005cac6e2f310f368a38af91682c62
Author: Michael Niedermayer 
Date:   Mon Jun 17 21:26:45 2019 +0200

    avcodec/libvorbisdec: Check extradata size
    
    Fixes: out of array read
    Fixes: 15261/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer-5764908467093504
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit cf3c245566e8a8d45ed2ad9fdff9ef50327ba2d3)
    Signed-off-by: Michael Niedermayer 

commit 5b8bce805c687e3558f0c77deea49aa97190e0ed
Author: Michael Niedermayer 
Date:   Tue Jun 18 23:17:23 2019 +0200

    avformat/vqf: Check header_size
    
    Fixes: 15271/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5735262606327808
    Fixes: signed integer overflow: -2147483648 - 8 cannot be represented in type 'int'
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 7c30ff38880570377168096417f714b21102b343)
    Signed-off-by: Michael Niedermayer 

commit 7daa138f6819ef5ec65fd6af52aeb2ebb0ed9486
Author: Michael Niedermayer 
Date:   Sun Jun 16 21:01:50 2019 +0200

    avcodec/atrac9dec: Check q_unit_cnt in parse_band_ext()
    
    Fixes: global-buffer-overflow
    Fixes: 15247/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer-5671602181636096
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit fb4a4557d15bce601e2462207648741600fa273f)
    Signed-off-by: Michael Niedermayer 

commit 3d1903acfee865935b73957e1b4df5ae090c93f9
Author: Michael Niedermayer 
Date:   Sun Jun 16 20:56:20 2019 +0200

    avcodec/atrac9dec: Check that the reused block has succeeded initilization
    
    Fixes: global-buffer-overflow
    Fixes: 15247/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer-5671602181636096
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit ac9af7e9a5befa8a554bacbcc59ab2f11203d85e)
    Signed-off-by: Michael Niedermayer 

commit 6872daee87b9b7a8adcb3bd3b1defea6f2153d2b
Author: Michael Niedermayer 
Date:   Thu Jun 27 19:51:59 2019 +0200

    Update for 4.1.4
    
    Signed-off-by: Michael Niedermayer 

commit 1603661523e37940ec98e320e631886fca48fd87
Author: Michael Niedermayer 
Date:   Tue Jun 18 23:55:56 2019 +0200

    avcodec/utils: Check bits_per_coded_sample
    
    This avoids the need for each decoder separately having to handle this case
    
    Fixes: shift exponent -100663046 is negative
    Fixes: out of array access
    Fixes: 15270/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5727829913763840
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit d33414d2ad27a5d2193c9ab0948ba7a282c2f910)
    Signed-off-by: Michael Niedermayer 

commit 297c5c26cddab668f22a2595ddc0a5984ddd4056
Author: Michael Niedermayer 
Date:   Sat Jun 15 00:47:06 2019 +0200

    avcodec/videodsp_template: Fix overflow of addition
    
    Fixes: addition of unsigned offset to 0x7f56fc26a9b6 overflowed to 0x7f56fc26a8be*
    Fixes: clusterfuzz-testcase-minimized-mediasource_MP4_AVC1_pipeline_integration_fuzzer-4917949056679936
    
    Reported-by: Matt Wolenetz 
    Reviewed-by: Matt Wolenetz 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 247a1de7f7d9c5628cf188e677d10ce9e12bd2f2)
    Signed-off-by: Michael Niedermayer 

commit 9ede5cab3afae1473a63f148b15af9d88809e646
Author: Michael Niedermayer 
Date:   Thu Jun 20 19:09:11 2019 +0200

    avcodec/alsdec: Fix invalid shift in multiply()
    
    Fixes: shift exponent -24 is negative
    Fixes: 15292/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ALS_fuzzer-5768533318828032
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit f30be1ec9856551d96f3876eec5f8b8abf456b81)
    Signed-off-by: Michael Niedermayer 

commit c434a043ac081e0f5d8c166f8416346002d462fa
Author: Michael Niedermayer 
Date:   Sun Jun 16 16:12:42 2019 +0200

    avcodec/ffwavesynth: Check ts_end - ts_start for overflow
    
    Fixes: signed integer overflow: 2314885530818453536 - -8926099139098304480 cannot be represented in type 'long'
    Fixes: 15259/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FFWAVESYNTH_fuzzer-5764366093254656
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 2db7a3bc4acdd293ed10b71e55f16a45ca28b629)
    Signed-off-by: Michael Niedermayer 

commit 92140d7b24e40797d171e73482e8d408fbdfbfd5
Author: Michael Niedermayer 
Date:   Sun Jun 16 16:17:12 2019 +0200

    avcodec/vc1dsp: Avoid undefined shifts in vc1_v_s_overlap_c / vc1_h_s_overlap_c
    
    Fixes: left shift of negative value -13
    Fixes: 15260/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VC1_fuzzer-5702076048343040
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 507ca66ee41aa8a95b75654163f77af0a99a25b1)
    Signed-off-by: Michael Niedermayer 

commit 1b4b738033df2d3afd0acf23aa668ec874dafac4
Author: Michael Niedermayer 
Date:   Sun Jun 16 15:55:55 2019 +0200

    avcodec/tta: Fix undefined shift
    
    Fixes: left shift of negative value -4483
    Fixes: 15256/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TTA_fuzzer-5738691617619968
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit ebccd2f778a861b41ad38a8464ea120d4f16b2d7)
    Signed-off-by: Michael Niedermayer 

commit d00e33ed3a2127901b622081b364580144be12c4
Author: Michael Niedermayer 
Date:   Sun Jun 16 15:53:27 2019 +0200

    avcodec/qdmc: Fix integer overflows in PRNG
    
    Fixes: signed integer overflow: 214013 * 2531011 cannot be represented in type 'int'
    Fixes: 15254/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_QDMC_fuzzer-5698137026461696
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 2921b45a388a81968d946996bb32e72d7bb5d5b7)
    Signed-off-by: Michael Niedermayer 

commit 9b8a58fa78062ddee07a54237c77dcdc6186aab1
Author: Michael Niedermayer 
Date:   Sun Jun 16 16:01:45 2019 +0200

    avcodec/bintext: Check font height
    
    Fixes: division by zero
    Fixes: 15257/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINTEXT_fuzzer-5757352881422336
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit bfb58bdd7015a6df2d130c92cf284d6a2362f3df)
    Signed-off-by: Michael Niedermayer 

commit d08d4b1066d3c7956b6f7bce74d159fae888f41b
Author: Michael Niedermayer 
Date:   Tue Jun 18 14:28:17 2019 +0200

    avcodec/binkdsp: Fix integer overflows in idct
    
    Fixes: signed integer overflow: 3784 * 682038 cannot be represented in type 'int'
    Fixes: 15265/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-5088311799971840
    Fixes: 15268/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-5666502344179712
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 7a072fbcc4c6f8ddbf37b131c2d141589118abcd)
    Signed-off-by: Michael Niedermayer 

commit 9a68341e9ee90e8f02d3aea7b8a981a867e8da14
Author: Michael Niedermayer 
Date:   Tue Jun 18 14:28:17 2019 +0200

    avcodec/bink: Fix integer overflow in unquantize_dct_coeffs()
    
    Fixes: signed integer overflow: -3447 * 2883584 cannot be represented in type 'int'
    Fixes: 15265/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-5088311799971840
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 62ad08cef993f7a103b6d3a5498f6fa49190e085)
    Signed-off-by: Michael Niedermayer 

commit da081ecf69f4c46c6638abb28b0acac33c2be075
Author: Michael Niedermayer 
Date:   Sat Jun 15 21:08:31 2019 +0200

    avcodec/motionpixels: Check for vlc error in mp_get_vlc()
    
    Fixes: 15246/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MOTIONPIXELS_fuzzer-5168534407086080
    Fixes: runtime error: index -1 out of bounds for type 'HuffCode [16]'
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 930cdef80ab695132d3de2128c3c23f2d698918b)
    Signed-off-by: Michael Niedermayer 

commit 479b70d2f84b340a66ade598454df968bf71cf5f
Author: Michael Niedermayer 
Date:   Sat Jun 15 21:47:16 2019 +0200

    avcodec/loco: Limit lossy parameter so it is sane and does not overflow
    
    Fixes: 15248/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_LOCO_fuzzer-5087440458481664
    Fixes: signed integer overflow: 3 + 2147483647 cannot be represented in type 'int'
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit ce3b0b9066b433564ed3ee3eed3a1e8f2c0834a1)
    Signed-off-by: Michael Niedermayer 

commit 65e144014080281165a4cc04ab6096995c118d91
Author: Michael Niedermayer 
Date:   Sat Jun 15 00:12:36 2019 +0200

    avformat/mov: Set fragment.found_tfhd only after TFHD has been parsed
    
    Fixes: Assertion failure
    Fixes: crbug971646.mp4
    
    Reported-by: Matt Wolenetz 
    Reviewed-by: Matt Wolenetz 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 696312c487d9d8c49a087017a829d1cdcbd68651)
    Signed-off-by: Michael Niedermayer 

commit 529a719a25e2949e80a4efee7880e3cf314cb98e
Author: Michael Niedermayer 
Date:   Wed Jun 12 20:13:34 2019 +0200

    avcodec/xpmdec: Do not use context dimensions as temporary variables
    
    Fixes: Integer overflow
    Fixes: 15134/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_XPM_fuzzer-5722635939348480
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 5ea7f2050050fd6a9177a9b618f2bb2d4add9230)
    Signed-off-by: Michael Niedermayer 

commit c0e3f54ec061629d79549ee4855c8b4f844d3ad1
Author: Michael Niedermayer 
Date:   Thu Jun 13 16:08:03 2019 +0200

    avcodec/fitsdec: Fix division by 0 in size check
    
    Fixes: division by zero
    Fixes: 15210/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FITS_fuzzer-5746033243455488
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 07ffe94c172041cfb03109b9bb6b8bf577332bda)
    Signed-off-by: Michael Niedermayer 

commit 26605408f1aaf212d966277ece9dc6ce73ce5a1d
Author: Michael Niedermayer 
Date:   Thu Jun 13 15:00:14 2019 +0200

    avcodec/aacpsdsp_template: Fix integer overflow in ps_hybrid_analysis_c()
    
    Fixes: signed integer overflow: -1539565182 + -798086761 cannot be represented in type 'int'
    Fixes: 14807/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-564925382682214
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit f8f5668df590d853429586e1f95cbd9cee38920e)
    Signed-off-by: Michael Niedermayer 

commit ef73b0da2df22f5f589692961d17d2294cd2a457
Author: Michael Niedermayer 
Date:   Thu Jun 13 19:45:50 2019 +0200

    avcodec/truemotion2: Fix integer overflow in last loop in tm2_update_block()
    
    Fixes: signed integer overflow: -1727985666 - 538976288 cannot be represented in type 'int'
    Fixes: 15031/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2_fuzzer-5100228035739648
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 3aecd0170413c7e56f19de4e34d093a2c4027c2a)
    Signed-off-by: Michael Niedermayer 

commit 8ba9b195e7780f86260d3eb2023504dac10e7277
Author: Michael Niedermayer 
Date:   Sat Jun 22 21:17:52 2019 +0200

    avcodec/iff: finetune the palette size check in the mask case
    
    Fixes: out of array access
    Fixes: 15381/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5668057826983936
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 0f9789c8e37eb6d166729e876729beb21b7d5647)
    Signed-off-by: Michael Niedermayer 

commit 4d2343825c04fdf0433678da2d58d6f342124e3f
Author: Michael Niedermayer 
Date:   Sat Jun 22 20:05:15 2019 +0200

    avcodec/iff: Fix mask_buf / mask_palbuf leak
    
    Fixes: 15372/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer-5708881759567872
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 92e8db532cdee3c73913174413428ffdc35032e2)
    Signed-off-by: Michael Niedermayer 

commit 45d3ba9e5f57761a56f08f743f8ba9a137fca623
Author: Michael Niedermayer 
Date:   Sat Jun 8 10:48:41 2019 +0200

    avformat/icodec: Free ico->images on error paths
    
    Fixes: 15116/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5715173567889408
    Fixes: memleak
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 54918b51161610a364de697b80acb9583eecf41b)
    Signed-off-by: Michael Niedermayer 

commit 0789b6295bbf343ef07bb6629ff19aaf1de49ed7
Author: Michael Niedermayer 
Date:   Sat Jun 8 09:27:49 2019 +0200

    avformat/wsddec: Fix undefined shift
    
    Fixes: left shift of 1 by 31 places cannot be represented in type 'int'
    Fixes: 15123/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5738039235575808
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 112eb17a2bbf6d02f81fdf0743b353a6b010aedc)
    Signed-off-by: Michael Niedermayer 

commit a56b96a3dade2552efd13a30d395c135fab7f8cb
Author: Michael Niedermayer 
Date:   Sun Jun 2 23:16:40 2019 +0200

    avcodec/fmvc: Check if header fields are available before allocating the image
    
    Fixes: Timeout (15sec -> 0.5sec)
    Fixes: 14846/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FMVC_fuzzer-5068322120400896
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Paul B Mahol 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 561cc161ca617c1b8d48fef0f02d56c0f1af0486)
    Signed-off-by: Michael Niedermayer 

commit 6e26b1b0b18df60f77f6c0878438783a8b851f6f
Author: Michael Niedermayer 
Date:   Sat Jun 15 21:52:24 2019 +0200

    avcodec/bink: Reorder operations in init to avoid memleak on error
    
    Fixes: Direct leak of 536 byte(s) in 1 object(s)
    Fixes: 15266/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_BINK_fuzzer-5629530426834944
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 2603f25d326476a83f5d093b522590b05b6e703b)
    Signed-off-by: Michael Niedermayer 

commit f487aa964b4e4fcdea8ae2e899d31494ede8c3cd
Author: Michael Niedermayer 
Date:   Thu Jun 13 01:20:19 2019 +0200

    avformat/wtvdec: Avoid (32bit signed) sectors
    
    Fixes: left shift of negative value -14614752
    Fixes: 15174/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5670543606415360
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Peter Ross 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit dd357d76e5faf3ce6fc46ffb924cf30f1cb54af9)
    Signed-off-by: Michael Niedermayer 

commit 0ccdabffd7890402a290b53ab3908bfbd4991f71
Author: Michael Niedermayer 
Date:   Wed Jun 5 12:18:54 2019 +0200

    avcodec/bitstream: Check for more conflicting codes in build_table()
    
    Fixes: out of array read
    Fixes: 14563/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AGM_fuzzer-5646451545210880
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit a7e3b271fc9a91c5d2e4df32e70e525c15c6d3ef)
    Signed-off-by: Michael Niedermayer 

commit ec23fe0fd908e78b0bf23cf2b880dcb7a7c5640a
Author: Michael Niedermayer 
Date:   Wed Jun 5 12:18:54 2019 +0200

    avcodec/bitstream: Check for integer code truncation in build_table()
    
    Fixes: out of array read
    Fixes: 14563/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AGM_fuzzer-5646451545210880
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit e78b0f83748f92ea9e93b21c36082e0dd04d7cb1)
    Signed-off-by: Michael Niedermayer 

commit 837e9e8898f3110cc6328d35ca77eda4fc630820
Author: Michael Niedermayer 
Date:   Thu Jun 6 23:20:49 2019 +0200

    avformat/sbgdec: Fixes integer overflow in str_to_time() with hours
    
    Fixes: signed integer overflow: 904444 * 3600 cannot be represented in type 'int'
    Fixes: 15113/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5764083346833408
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 2a0f23b9d647ad84e0351b43ca4b552add00c8dc)
    Signed-off-by: Michael Niedermayer 

commit e73ef454e89dcce85fbc8c12ccb5c6b73c7a343c
Author: Michael Niedermayer 
Date:   Thu Jun 6 23:17:18 2019 +0200

    avformat/vpk: Check offset for validity
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit aa003019ab9ec5ef7e7b3ff9d6262d3472b427eb)
    Signed-off-by: Michael Niedermayer 

commit a2ebfb6afe9df2fa51d0ece0a205638fe6e1b832
Author: Michael Niedermayer 
Date:   Thu Jun 6 23:14:13 2019 +0200

    avformat/vpk: Fix integer overflow in samples_per_block computation
    
    Fixes: signed integer overflow: 84026453 * 28 cannot be represented in type 'int'
    Fixes: 15111/clusterfuzz-testcase-minimized-ffmpeg_DEMUXER_fuzzer-5675630072430592
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 8c6c4129b4cc3b9e0b3a527a5a15c904ec6ae3b6)
    Signed-off-by: Michael Niedermayer 

commit 1a022c66c827d8f3192c6c1d1dca0c679b8cff92
Author: Michael Niedermayer 
Date:   Sat Jun 1 19:06:07 2019 +0200

    avcodec/mjpegdec: Check for non ls PAL8
    
    Fixes: Null-dereference READ in av_malloc
    Fixes: 15002/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THP_fuzzer-5643474625363968
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 442375fee7f1fb15e42fbc128dc38bdfcc2cc105)
    Signed-off-by: Michael Niedermayer 

commit c4a14a630328b45d8b98309056d88563c7fef0c5
Author: Michael Niedermayer 
Date:   Sun May 26 23:18:34 2019 +0200

    avcodec/interplayvideo: check decoding_map_size with video_data_size
    
    Fixes: Timeout (90543 ms -> 59 ms)
    Fixes: 14721/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_INTERPLAY_VIDEO_fuzzer-5697492148027392
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 914d6a7c1a7a1850b4053847a784b174c9146c55)
    Signed-off-by: Michael Niedermayer 

commit 66cbac4a0bdbb84b5f5eae4a5a821796e31623cf
Author: Michael Niedermayer 
Date:   Thu May 23 23:17:35 2019 +0200

    avcodec/h264_parse: Use 64bit for expectedpoc and expected_delta_per_poc_cycle
    
    Fixes: signed integer overflow: -2142516591 + -267814575 cannot be represented in type 'int'
    Fixes: 14450/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-5716105319940096
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: James Almer 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 4896fa18add7636ea9986edde51493331f1fb01e)
    Signed-off-by: Michael Niedermayer 

commit f021c40c30564d08215d3014cd4ae336588c0b4a
Author: Michael Niedermayer 
Date:   Tue May 14 14:29:43 2019 +0200

    avcodec/mss4: Check input size against skip bits
    
    Fixes: Timeout (17sec -> 20ms)
    Fixes: 14615/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MTS2_fuzzer-5093007763701760
    Fixes: 14797/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MTS2_fuzzer-5651696119709696
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 0fef412dffb74fef3494f7fae0c138c32a444484)
    Signed-off-by: Michael Niedermayer 

commit 43afeaa08652543fd44f993001b2be01aca122a6
Author: Michael Niedermayer 
Date:   Tue May 21 01:33:03 2019 +0200

    avcodec/dxv: Check op_offset in dxv_decompress_cocg()
    
    Fixes: signed integer overflow: -2147483648 - 12 cannot be represented in type 'int'
    Fixes: 14732/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-5735273129836544
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 8e520843dd76a644c019134ac7b17eba9f1118b3)
    Signed-off-by: Michael Niedermayer 

commit 04c3e3d4e257a7e46e7e699f5d26f849837f907d
Author: Michael Niedermayer 
Date:   Wed May 22 02:01:33 2019 +0200

    avcodec/diracdec: Fix integer overflow in global_mv()
    
    Fixes: signed integer overflow: 16384 * 196607 cannot be represented in type 'int'
    Fixes: 14810/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DIRAC_fuzzer-5091232683917312
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit a99ffb5bb4454c625748972d9389cfaa5433a342)
    Signed-off-by: Michael Niedermayer 

commit eed8561f7cb845aa6df8daf4abf1945be18a4930
Author: Michael Niedermayer 
Date:   Fri May 17 23:28:49 2019 +0200

    avcodec/vmnc: Check available space against chunks before reget_buffer()
    
    Fixes: Timeout (16sec -> 60ms)
    Fixes: 14673/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_VMNC_fuzzer-5640217517621248
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 279d9a84af37cc1a7cf79c1cd667105eeb948611)
    Signed-off-by: Michael Niedermayer 

commit 5fbc6dcdccf16996ce79f17f8c0ae37069447aed
Author: Michael Niedermayer 
Date:   Sat May 18 10:37:26 2019 +0200

    avcodec/aacdec_template: skip apply_tns() if max_sfb is 0 (from previous header decode failure)
    
    Fixes: NULL pointer dereference
    Fixes: 14723/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5654612436058112
    Fixes: 14724/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer-5712607111020544
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit cf3156e762bbd3fbaf9da53f3ef1ea6d1bad2ec5)
    Signed-off-by: Michael Niedermayer 

commit 42245d49a4ad76b84e62aa1f7d2eca5b15534fbf
Author: Michael Niedermayer 
Date:   Thu May 16 12:00:18 2019 +0200

    avcodec/aacdec_fixed: Handle more extreem cases in noise_scale()
    
    Its unclear if these cases have any relevance in real files
    
    Fixes: shift exponent -2 is negative
    Fixes: 14489/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer-5681941631729664
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 3d14663f8345a84613b1ec041fd65e4a90057320)
    Signed-off-by: Michael Niedermayer 

commit 11f5eb0f16378581171ca3068ea7e751947f43a7
Author: Michael Niedermayer 
Date:   Thu May 16 11:55:43 2019 +0200

    avcodec/aacdec_template: Merge 3 #ifs related to noise handling
    
    Fewer #if and fewer lines
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit bc33c99d56791fc26ccafb49512b59e38b99ca12)
    Signed-off-by: Michael Niedermayer 

commit a527b49cb927fb1dcbb305b345479979a71e0478
Author: Michael Niedermayer 
Date:   Thu May 16 11:03:59 2019 +0200

    avcodec/aacdec_fixed: ssign seems always -1 in noise_scale(), simplify
    
    (cherry picked from commit 3d5863d73915748013975cac8d2148c5fc3d01c3)
    Signed-off-by: Michael Niedermayer 

commit 3760f17e9b867ea6f31b06899982714736816cf8
Author: Michael Niedermayer 
Date:   Tue May 14 12:12:29 2019 +0200

    avformat/mp3enc: Avoid SEEK_END as it is unsupported
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit bf3ee6a13053d37a0c5022a324624e89f0bce8c5)
    Signed-off-by: Michael Niedermayer 

commit 57e9b3cac1b646967ef4c228b1463338e403ee52
Author: Michael Niedermayer 
Date:   Sun May 5 00:31:24 2019 +0200

    avcodec/truemotion2: Fix several integer overflows in tm2_update_block()
    
    Fixes: signed integer overflow: -1877966852 + -469491713 cannot be represented in type 'int'
    Fixes: 14561/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2_fuzzer-5167608359288832
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 8eecf761a65baf4ce6f25c0a149819cc9414c0f0)
    Signed-off-by: Michael Niedermayer 

commit 75501f90fd203949903ba103e5f719e1530e1444
Author: Michael Niedermayer 
Date:   Thu May 2 20:36:18 2019 +0200

    avformat/webm_chunk: Specify expected argument length of get_chunk_filename()
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 1a74b04737f08e2e11a02ada280407889f6cadb1)
    Signed-off-by: Michael Niedermayer 

commit fd05665f9c9997cc43275be1befe81806a1a79d1
Author: Michael Niedermayer 
Date:   Thu May 2 20:45:14 2019 +0200

    avformat/webm_chunk: Check header filename length
    
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 3b5b977c9f96e2c3803317ad75253801bc571791)
    Signed-off-by: Michael Niedermayer 

commit 7ffd2ae87eaa7cda08bdd14bd593c2911f959994
Author: Michael Niedermayer 
Date:   Sun May 19 17:42:04 2019 +0200

    avcodec/cpia: Check input size also against linesizes and EOL
    
    Fixes: Timeout (14sec -> 29ms)
    Fixes: 14733/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_CPIA_fuzzer-5707022445576192
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Reviewed-by: Carl Eugen Hoyos 
    Signed-off-by: Michael Niedermayer 
    (cherry picked from commit 3c0bfa7d1a90a22d5fe8daa415cc689c111562f1)
    Signed-off-by: Michael Niedermayer