| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
Allocating a input buffer in the decoder context and copying all input
to this buffer before using. This will ensure that we do not access
memory out of bounds because of our bit read optimisations.
Bug: 72764648
Test: poc before/after
Change-Id: Ide6c58291fa1d0472a9589c95aba231d13122a19
(cherry picked from commit 1532e414898ae7c0abc44cab66681054edceb1f7)
|
|
|
|
|
|
|
|
|
|
|
| |
The output buffer size given by the application, needs to be checked
in every process call. This is required in the case of resolution
change.
Bug: 70399408
Test: manual
Change-Id: Id0d615e44d30f61702b3839be7b679d7d77a2411
(cherry picked from commit 7c88212153fbff998b337e899b496e2e382af54c)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In case of shared display mode, the picture buffer allocated has to be
larger to accomodate the incorrect half pel reference to the last row in
the picture. Adding memory for the same.
Bug: 70350015
Bug: 70349694
Bug: 70349612
Bug: 70349754
Bug: 70349868
Bug: 70526352
Bug: 70350086
Test: manual
Change-Id: I41905d101093ae20ab14193c21669b8c4a24f30c
(cherry picked from commit 5c1ed47b1fc1a0f763c251d62db14f3d74cb3141)
|
|
|
|
|
|
|
|
|
|
|
| |
If the decoder gets multiple sequence headers and there is a change in
resolution in the second header (after a reset call), the decoder will now
return an error.
Bug: 65717533
Test: poc before/after on mnc-dev/hammerhead
Change-Id: I4cb9a5f945fc1150f8ae0714bae4a87b07f0945f
CVE-2017-13148
|
|
|
|
|
|
|
|
|
|
|
| |
If MC is referring to the last MB row, in case of field pictures,
it could incorrectly read up to 8 extra rows in the reference
buffer and 9 rows in case of half_y prediction.
Bug: 63873837
Test: ran POC on patched ASAN-enabled code
Change-Id: I83af03b3c6b7e08a984f7b383bedf706422f6354
CVE-2017-0854
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If header decode was unsuccessful, do not try decoding a frame
Also, initialize pic_wd, pic_ht for reinitialization when
decoder is created with smaller dimensions
Bug: 28886651
Bug: 35219737
AOSP-Change-Id: I8c06d9052910e47fce2e6fe25ad318d4c83d2c50
(cherry picked from commit 2b9fa9ace2dbedfbac026fc9b6ab6cdac7f68c27)
(cherry picked from commit c2395cd7cc0c286a66de674032dd2ed26500aef4)
CVE-2017-0587
Change-Id: I86bf7208f238598a0ffe87b51ffb035044beaf2e
|
|
|
|
|
|
|
| |
This removes unnecessary changes from build to build.
Bug: 24204119
Change-Id: Ie06330f196a64509fc066b329b6e383f02a6db4b
(cherry picked from commit 89fff63d42d951dd538613641ef97ec0ebd7a59d)
|
|
|
|
|
|
|
|
|
| |
Decoder output is deinterlaced if a picture is signalled as interlaced
Added SIMD optimizations for arm, armv8 and x86/x64
Bug: 20932810
Change-Id: I6079922f4fc8f1d3680e5169a4d8e70efe8ea471
|
|
|
|
|
|
|
|
|
|
|
| |
Removed alignment requirements for stride
Fixed strides passed to frame copy function
Display width is passed to frame copy function instead of stride
Moved decoder specific definitions from common to decoder files
Bug: 20932810
Change-Id: Ieb1370e2ff9c6b3d04e4c0b9630653943346eb54
|
|
|
|
|
|
|
|
|
|
|
|
| |
Buffer managers are reset to init state in reset()
Return picture type of picture being output instead of picture decoded
Read start code only if input bitstream has enough bytes
Bug: 22860270
Change-Id: Ic158d9dbff6d6b5295173b6ff2a4c6d6da66115f
|
|
Change-Id: I5a9473876e596e7461e91f971b0243f694f7e8fb
|