T

Tobias Stoeckmann 95d9a85ca3 ffserver: local OOB write with custom program name

When the command line for children is created, it is assumed that
my_program_name always ends with "ffserver", which doesn't have to
be true if ffserver is called through a symbolic link.

In such a case, it could be that not enough space for "ffmpeg" is
available at the end, leading to a buffer overflow.

One example would be:

$ ln -s /usr/bin/ffserver ~/f; ~/f

As this is only a local buffer overflow, i.e. is based on a weird
program call, this has NO security impact.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

2017-01-08 03:50:56 +01:00

compat

compat/atomics: rename header guards

2016-12-02 20:08:54 -03:00

doc

libavformat/avio: Add avio_get_dyn_buf function

2017-01-07 13:04:05 +01:00

libavcodec

avcodec/dca: add support for 20-bit XLL

2017-01-07 11:28:12 -03:00

libavdevice

avdevice/decklink_enc: do not reference this after freeing it

2016-12-27 01:11:59 +01:00

libavfilter

lavfi/selectivecolor: add a link to algorithm explanations

2017-01-07 14:25:57 +01:00

libavformat

avformat/riff: extend MagicYUV fourcc list

2017-01-07 17:26:33 +01:00

libavresample

Bump minor versions after 3.2 branchpoint to seperate release

2016-10-26 20:52:42 +02:00

libavutil

avutil/tests: added selftest for aes_ctr.c

2017-01-02 02:45:43 +01:00

libpostproc

Bump minor versions after 3.2 branchpoint to seperate release

2016-10-26 20:52:42 +02:00

libswresample

swresample/resample: remove swri_resample function

2016-12-14 06:48:34 +07:00

libswscale

swscale/swscale: Fix dereference of stride array before null check

2016-12-23 21:47:47 +01:00

presets

presets: remove moldering iPod presets

2014-06-17 16:15:04 -08:00

tests

avutil/tests: added selftest for aes_ctr.c

2017-01-02 02:45:43 +01:00

tools

tools/zmqsend: Do not truncate fgetc() return

2016-12-24 14:46:25 +01:00

.gitattributes

Treat all '*.pnm' files as non-text file

2014-11-28 17:52:43 -05:00

.gitignore

Merge commit '6641819feedb086ebba3d2be89b8d33980f367e1'

2016-06-26 15:43:05 +02:00

.travis.yml

Merge commit 'eda183287489b2c705843aa373a19c4e46fb2fec'

2015-11-22 17:12:24 +00:00

arch.mak

mips: rename mipsdspr1 to mipsdsp

2015-12-04 02:35:42 +01:00

Changelog

avcodec: add QDMC decoder

2017-01-06 22:05:45 +01:00

cmdutils_common_opts.h

cmdutils: add show_demuxers and show_muxers

2016-11-08 01:56:31 +01:00

cmdutils_opencl.c

all: use FFDIFFSIGN to resolve possible undefined behavior in comparators

2015-11-03 16:28:30 -05:00

cmdutils.c

cmdutils: remove duplicate windows.h include

2016-11-16 15:06:16 +01:00

cmdutils.h

cmdutils: add show_demuxers and show_muxers

2016-11-08 01:56:31 +01:00

common.mak

Merge commit 'c5fd4b50610f62cbb3baa4f4108139363128dea1'

2016-06-27 19:39:46 +02:00

configure

configure: Fix standalone compilation of the ljpeg encoder.

2017-01-05 11:44:04 +01:00

CONTRIBUTING.md

Add CONTRIBUTING.md

2016-09-18 10:02:13 +01:00

COPYING.GPLv2

…

COPYING.GPLv3

Add configure option to upgrade (L)GPL to version 3.

2009-06-05 11:04:03 +00:00

COPYING.LGPLv2.1

cosmetics: Delete empty lines at end of file.

2012-02-09 12:26:45 +01:00

COPYING.LGPLv3

Add configure option to upgrade (L)GPL to version 3.

2009-06-05 11:04:03 +00:00

CREDITS

CREDITS: redirect to Git log, remove current outdated content

2013-01-31 18:02:52 +01:00

ffmpeg_cuvid.c

doc: fix spelling errors

2016-10-21 23:58:47 +02:00

ffmpeg_dxva2.c

Merge commit '18c506e9e6e8df8b1d496d093077b8240ea68c28'

2016-06-26 15:34:01 +02:00

ffmpeg_filter.c

ffmpeg_filter: fix several logic failures

2016-11-24 16:27:55 +01:00

ffmpeg_opt.c

Avoid using the term "file" and prefer "url" in some docs and comments

2016-12-05 21:30:12 +01:00

ffmpeg_qsv.c

ffmpeg_qsv: Fix hwaccel transcoding

2016-11-13 17:49:48 +00:00

ffmpeg_vaapi.c

ffmpeg_vaapi: fix choice of decoder_format

2016-09-29 01:23:52 +02:00

ffmpeg_vdpau.c

Merge commit 'f72db3f2f3a8c83a4f5dede8fa03434b2bf676c6'

2016-06-26 15:29:39 +02:00

ffmpeg_videotoolbox.c

ffmpeg/videotoolbox: protect UTGetOSTypeFromString on both VDA and VT

2015-10-15 10:22:31 +02:00

ffmpeg.c

ffmpeg: remove stop_encoding variable and related code, it is dead / unused code

2016-12-28 19:19:15 +01:00

ffmpeg.h

Merge commit '50722b4f0cbc5940e9e6e21d113888436cc89ff5'

2016-11-13 15:33:39 +01:00

ffplay.c

ffplay: add startup volume option

2016-12-25 12:51:21 -08:00

ffprobe.c

lavc: Add spherical packet side data API

2016-12-07 14:40:06 -05:00

ffserver_config.c

ffserver_config: Check for failure to allocate FFServerIPAddressACL

2016-12-22 19:23:08 +01:00

ffserver_config.h

ffsrever: Make the status page bitexact if any stream is bitexact

2016-11-29 19:26:26 +01:00

ffserver.c

ffserver: local OOB write with custom program name

2017-01-08 03:50:56 +01:00

INSTALL.md

INSTALL: add markdown syntax

2014-05-28 22:38:38 +02:00

library.mak

Merge commit 'c5fd4b50610f62cbb3baa4f4108139363128dea1'

2016-06-27 19:39:46 +02:00

LICENSE.md

lavfi/f_ebur128: relicense to LGPL

2016-11-27 20:46:20 +01:00

MAINTAINERS

MAINTAINERS: update

2016-12-27 18:24:31 +01:00

Makefile

Merge commit '6641819feedb086ebba3d2be89b8d33980f367e1'

2016-06-26 15:43:05 +02:00

README.md

Add CONTRIBUTING.md

2016-09-18 10:02:13 +01:00

RELEASE

RELEASE: Update for past 3.2 branch

2016-10-26 20:52:43 +02:00

version.sh

version.sh: Fix spurious rebuilds.

2016-03-10 09:53:10 +01:00

README.md

FFmpeg README

FFmpeg is a collection of libraries and tools to process multimedia content such as audio, video, subtitles and related metadata.

Libraries

libavcodec provides implementation of a wider range of codecs.
libavformat implements streaming protocols, container formats and basic I/O access.
libavutil includes hashers, decompressors and miscellaneous utility functions.
libavfilter provides a mean to alter decoded Audio and Video through chain of filters.
libavdevice provides an abstraction to access capture and playback devices.
libswresample implements audio mixing and resampling routines.
libswscale implements color conversion and scaling routines.

Tools

ffmpeg is a command line toolbox to manipulate, convert and stream multimedia content.
ffplay is a minimalistic multimedia player.
ffprobe is a simple analysis tool to inspect multimedia content.
ffserver is a multimedia streaming server for live broadcasts.
Additional small tools such as aviocat, ismindex and qt-faststart.

Documentation

The offline documentation is available in the doc/ directory.

The online documentation is available in the main website and in the wiki.

Examples

Coding examples are available in the doc/examples directory.

License

FFmpeg codebase is mainly LGPL-licensed with optional components licensed under GPL. Please refer to the LICENSE file for detailed information.

Contributing

Patches should be submitted to the ffmpeg-devel mailing list using git format-patch or git send-email. Github pull requests should be avoided because they are not part of our review process and will be ignored.