diff options
Diffstat (limited to 'lib/faad2/ChangeLog')
| -rw-r--r-- | lib/faad2/ChangeLog | 221 |
1 files changed, 0 insertions, 221 deletions
diff --git a/lib/faad2/ChangeLog b/lib/faad2/ChangeLog deleted file mode 100644 index 499e292c..00000000 --- a/lib/faad2/ChangeLog +++ /dev/null @@ -1,221 +0,0 @@ -2.11.1 (2023-11-14): - [ Fabian Greffrath ] - * Build shared libraries and hide symbols by default. - * Install man page by default. - * Check for `lrintf()` availability, link with `-lm` and define `HAVE_LRINTF` accordingly. - * Set a default build type if none was specified. - * Build DLL name with SOVERSION by default on Windows. - * Fix inlined `lrintf()` function signatures. - -2.11.0 (2023-11-07): - [ Eugène Filin ] - * Fix incorrect variable initialization - - [ Eugene Kliuchnikov ] - * CI/CD, build, etc - - - setup GitHub workflows; test build under MSVC, OSX, MSYS2, Linux - - add CMake build system - - additionally add Bazel build - - remove automake and MSVC project files - - add fuzzers that cover almost all decoder code - - setup fuzzing for various builds: (no-)FIXED_POINT / (no-)DRM - - remove dead code - - address differes compilers warnings - - move version to distingished place that different build systems can read - - * "Safe" bugs - - "Safe" means that it is unlikely to be exploited; those affect the decoded - result for (most likely) extreme inputs. Some fixes are useful only for - "FIXED_POINT" build, since it has more restrictions on intermediate values. - - - "negative range" in estimate_current_envelope - - integer overflow in channel downmixing - - integer overflow in estimate_envelope - - integer overflows caused by "practical infinite" gain - - integer overflows in HF adjustment code - - several "left shift of negative value" - - priming RNG to avoid using values that does not look random at all - - do not drop the first frame of output; other decoders don't do this - - touching uninitialized values in lt_update_state - - touching uninitialized values in bit-reader buffers - - * "Almost Safe" bugs - - "Almost safe" means that those are unlinkly to be exploited; if those surface - depends on build options / environment. - - - division by zero in HF (noise?) generator and scale factor adjustment - - division by zero gen_rand_vector - - * "Unsafe" bugs - - "Unsafe" means that those can cause crash, or could somehow else be exploited. - - - CLI: accessing unallocated memory in mp4info (corrupted / zero-samples input) (CVE-2023-38857) - - CLI: out-of-bounds when parsing mp4 header - - CLI: crash because of wrong mp4 frame offset calculation (CVE-2023-38857) - - error handling rvlc_decode_scale_factors (CPU bomb?) - - null pointer dereference (in DRM + PS build) - - index-out-of-bounds / stack-buffer-overflow in decode_sce_lfe - (for streams with PCE) - - stack-buffer-overflow in pns_decode - - null pointer derefernce (when channels change their type in the middle - of the stream) - - infinite loop on currupted stream - - add practial limits for scale factors; otherwise calculated NaN/Inf values - could confuse further logic, resulting in access-out-of-bounds - - check sf_index in window_grouping_info to avoid access-out-of-bounds - - clamp bs_pointer values to avoid access-out-of-bounds - - infinite loop in fill_element - - sanitize input values in ps_mix_phase to avoid access-out-of-bounds - - fix internal decoder buffer size calculation to avoid heap-out-of-bounds - - calculate channel length multiplier even if main channel is already allocated - to avoid heap-out-of-bounds - - reserve enough slots for channels in decode_sce_lfe - to avoid heap-out-of-bounds - - [ David Korczynski ] - * Fuzzing integration with oss-fuzz - - [ Steveice10 ] - * Add define option to disable SBR/PS support - * Fix coefficient table selection in tns_decode_coef - -2.10.1 (2022-10-20): - [David Korczynski] - * Reject buffers of zero size. - - [François Cartegnie] - * Fix 7.1 with PCE mapping. - * Have proper version string in `faad.h`. - * Add conditional build with DRC. - -2.10.0 (2020-10-20): - [ tatsuz ] - * updated Visual Studio projects to VS 2019 (#54) - - [ Fabian Greffrath ] - * mp4read.c: fix stack-buffer-overflow in stringin()/ftypin() - * fix heap-buffer-overflow in mp4read.c - - [ Clayton Smith ] - * Remove non-ASCII characters - * Remove trailing whitespace - - [ Andrew Wesie ] - * Check return value of ltp_data. - * Restrict SBR frame length to 960 and 1024 samples. - * Support object type 29. - * Support implicit SBR signaling in frontend. - * Fix PNS decoding when only right channel is noise. - * Initialize element_id array with an invalid id. - * Fix NULL pointer dereferences. - * Fix infinite loop in adts_parse. - * Fix infinite loop in huffman_getescape. - * Check for error after each channel decode. - * Check for inconsistent number of channels. - -2.9.2 (2020-05-04): - [ Michał Janiszewski ] - * Only use x86-assembly when explicitly on x86 - * Use unsigned integers correctly - * Initialize pointers that might otherwise not be - - [ Fabian Greffrath ] - * update README esp. WRT directory structure - - [ Rosen Penev ] - * fix compilation without SBR/PS_DEC (#48) - * fix compilation with LC_ONLY_DECODER (#47) - - [ Fabian Greffrath ] - * fix "inline function 'cfftf1' declared but never defined" compiler warning - * fix some inconsistencies in the frontend output - * mp4read_open: add check for failed frame buffer allocation - * stszin: add check for allocation error and integer overflow - * add a pkg-config file - - [ Stefan Pöschel ] - * frontend: address compile warning + add missing LF (#50) - - [ François Cartegnie ] - * library name is faad (#52) - * Unbreak PS audio (#51) - -2.9.1 (2019-11-04): - [ Fabian Greffrath ] - * Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink) - * Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas) - -2.9.0 (2019-09-09): - [ Krzysztof Nikiel ] - * Build system fixes and code clean-up - - [ LoRd_MuldeR ] - * Fix compiler warnings and code indentation - * Fix compilation with GCC <= 4.7.3 - * MSVC solution file clean-up - - [ Cameron Cawley ] - * Fix compilation with GCC 4.7.4 - * Fix compilation with MinGW - - [ Michael Fink ] - * MSVC 2017 project file update - - [ Hugo Lefeuvre ] - * Fix crash with unsupported MP4 files (NULL pointer dereference, - division by zero) - * CVE-2019-6956: ps_dec: sanitize iid_index before mixing - * CVE-2018-20196: sbr_fbt: sanitize sbr->M (should not exceed MAX_M) - * CVE-2018-20199, CVE-2018-20360: specrec: better handle unexpected - parametric stereo (PS) - * CVE-2018-20362, CVE-2018-19504, CVE-2018-20195, CVE-2018-20198, - CVE-2018-20358: syntax.c: check for syntax element inconsistencies - * CVE-2018-20194, CVE-2018-19503, CVE-2018-20197, CVE-2018-20357, - CVE-2018-20359, CVE-2018-20361: sbr_hfadj: sanitize frequency band - borders - - [ Hugo Beauzée-Luyssen ] - * CVE-2019-15296, CVE-2018-19502: Fix a couple buffer overflows - - [ Filip Roséen ] - * Prevent crash on SCE followed by CPE - - [ Gianfranco Costamagna ] - * Fix linking with GCC 9 and "-Wl,--as-needed" - - [ Fabian Greffrath ] - * Enable the frontend to be built reproducibly - -2.8.8: -2.8.7: - - MSVC build fixes - - fixed a coulple bugs -2.8.6: -2.8.5: - - another package fix -2.8.4: - - minor fix to released packages -2.8.3 - - better autotools support -2.8.2 - - PNS bug fixed - - New MP4 input module - - NeAACDecGetVersion: - new api function to get version and copyright strings - -2.8.1: - - seeking support for MP4 files -2.8.0: - - patches and fixed bugs - -2009-02-02 - Version 2.7 - * DAB+ support - * Use public headers internally to prevent duplicate declarations - * Explicitly typedef all types as signed - * Made sure MAIN prediction can't be started after the first frame - * Lot's of compilation issues solved - * Bugfix in SBR envelope border calculation |