summaryrefslogtreecommitdiffstats
path: root/meta/recipes-multimedia
Commit message (Collapse)AuthorAgeFilesLines
* alsa-lib: libasound should runtime depends on alsa-confZidan Wang2014-09-031-1/+1
| | | | | | | | | Make libasound runtime depends on alsa-conf to install alsa-conf to rootfs. (From OE-Core rev: e72aac2ae9e5fce1715fa04b7e94034fd06892d9) Signed-off-by: Zidan Wang <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-utils: upgrade to 1.0.28Cristian Iorga2014-08-313-17/+29
| | | | | | | | | | | | Changelog: http://www.alsa-project.org/main/index.php/Changes_v1.0.27.2_v1.0.28 0001-alsactl-don-t-let-systemd-unit-restore-the-volume-wh.patch updated. (From OE-Core rev: b2aae7176f71772a43f19b897e09291579008ad8) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-tools: upgrade to 1.0.28Cristian Iorga2014-08-312-20/+3
| | | | | | | | | | | mips_has_no_io_h.patch removed, no longer necessary. Changelog: http://www.alsa-project.org/main/index.php/Changes_v1.0.27.2_v1.0.28 (From OE-Core rev: f28e6f4131e675a60795156012851b8367ac1b4d) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: upgrade to 1.0.28Cristian Iorga2014-08-313-87/+19
| | | | | | | | | | | | | | Changelog: http://www.alsa-project.org/main/index.php/Changes_v1.0.27.2_v1.0.28 Update-iatomic.h-functions-definitions-for-mips.patch removed, integrated upstream. Check-if-wordexp-function-is-supported.patch updated. (From OE-Core rev: 736dc0abd22be122cac053e8934e8bfd5b82eec0) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-ugly: upgrade to 1.4.1Cristian Iorga2014-08-311-2/+2
| | | | | | | | | Bugfix release. (From OE-Core rev: 04e53e971451b023ac1c57086603a9a7fbba838c) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-rtsp-server: upgrade to 1.4.1Cristian Iorga2014-08-312-6/+6
| | | | | | | | | Bugfix release. (From OE-Core rev: 4bc977e532b67311a6ba4da78397badc0e4c4ac5) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: upgrade to 1.4.1Cristian Iorga2014-08-311-2/+2
| | | | | | | | | Bugfix release. (From OE-Core rev: 8fbdb1d64dd469624004cc82660a25b98f44dee0) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: upgrade to 1.4.1Cristian Iorga2014-08-311-3/+2
| | | | | | | | | Bugfix release. (From OE-Core rev: 1f70d23430e803e9e8950e5bd825df972194feb4) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: upgrade to 1.4.1Cristian Iorga2014-08-311-2/+2
| | | | | | | | | Bugfix release. (From OE-Core rev: ba03f8ddc2fc6d6f85628d6d4a87d465c83c9fde) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade to 1.4.1Cristian Iorga2014-08-311-2/+2
| | | | | | | | | Bugfix release. (From OE-Core rev: 7f58488e1ed175136da49109ead3d3eaaf988aeb) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade to 1.4.1Cristian Iorga2014-08-311-3/+2
| | | | | | | | | bugfix release. (From OE-Core rev: 7640444d1b947ae3d7b9b43f70bdb9798a38c5ae) Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: Add DEPENDS on jpegCarlos Rafael Giani2014-08-281-1/+1
| | | | | | | | | | libjpeg is automatically linked to if present. This cannot be turned off. Adding DEPENDS on jpeg ensures that a proper dependency is established. (From OE-Core rev: 4c13eced019eac49f047a620994c1b56af5d4951) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: Fix GL/GLES configurationCarlos Rafael Giani2014-08-283-2/+51
| | | | | | | | | | | | | | | | | | * Replace --disable/enable-gl with the individual EGL, GLES, GL switches (--disable-gl turns off GL support entirely) * Put the default opengl packageconfig into its own variable to make it easier for distros and BSP layers to define what to use (GL, GLES, or neither) * Add libglu as a dependency for desktop GL * Patch configure.ac to ensure libraries are only searched and linked to if the corresponding API isn't disabled (this prevents cases where libgstgl is linked to GLU even though desktop GL is dis- and GLES enabled) (From OE-Core rev: 7bf062f2e2b92c2401fa2386b6281aae023b21a8) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: Add DEPENDS on libpngCarlos Rafael Giani2014-08-281-1/+1
| | | | | | | | | | libpng is automatically linked to if present. This cannot be turned off. Adding DEPENDS on libpng ensures that a proper dependency is established. (From OE-Core rev: 413d5665cedd740125862e5eec5ca1f3b38b8363) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: Add DEPENDS on gstreamer1.0-plugins-badCarlos Rafael Giani2014-08-281-1/+1
| | | | | | | | | | | gst-omx links to libgstgl if it is present, and libgstgl is built by gstreamer1.0-plugins-bad. Adding it as a DEPENDS ensures a proper dependency is established. (From OE-Core rev: a9790695e207ef989a691d97658d63b022144c7c) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: add opencv haar cascade XML files to packageCarlos Rafael Giani2014-08-281-0/+2
| | | | | | | (From OE-Core rev: fbd886eff693135bcd9fbe62cfd37f255798ca78) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtiff: fix CVE-2013-1961Muzaffar Mahmood2014-08-272-0/+787
| | | | | | | | | | | | | | | | | Integrate community fix for the issue CVE-2013-1961 and migrated to version 4.0.3. Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file. (From OE-Core rev: f24e3456c60951d2985d7c23bdcc1f8c15d6c167) Signed-off-by: Priyanka Shobhan <priyanka_shobhan@mentor.com> Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Muzaffar Mahmood <muzaffar_mahmood@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-plugins-base: add perl to RDEPENDS_gst-plugins-base-appsRobert Yang2014-08-231-0/+2
| | | | | | | | | | | | | Perl script: gst-plugins-base-apps/usr/bin/gst-visualise-0.10 There are two files in this pacakge, another one is (binary): gst-plugins-base-apps/usr/bin/gst-discoverer-0.10 (From OE-Core rev: efb3b13c4a5f99824622fcb5baf95ae3a4441b64) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-ffmpeg: add PACKAGECONFIG for libav9 and patch from GentooMartin Jansa2014-08-172-0/+9306
| | | | | | | | | | * apply the patch only when PACKAGECONFIG is selected, because the changes aren't backwards compatible (From OE-Core rev: 7324d7deb18b81943100bc35301b0c4aa22dc404) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-rtsp-server: Upgrade to 1.4.0Peter Kjellerstedt2014-08-152-9/+6
| | | | | | | (From OE-Core rev: 466268fc86c3a08fab0ba45243c32bfaad613a96) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: Add a PACKAGECONFIG for udevPeter Kjellerstedt2014-08-151-1/+2
| | | | | | | | | | | | | | This solves these floating dependencies: WARNING: QA Issue: gstreamer1.0-plugins-good-video4linux2 rdepends on libudev, but it isn't a build dependency? [build-deps] WARNING: QA Issue: gstreamer1.0-plugins-good-video4linux2 rdepends on libgudev-1.0, but it isn't a build dependency? [build-deps] (From OE-Core rev: b23a9c94e574fec0f0dcda498c1f5a0592114055) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libav: update 9.x version to 9.16Paul Eggleton2014-08-151-2/+2
| | | | | | | (From OE-Core rev: 32e95316db40d20bb2aa7dd48e35114f3ea7a0ee) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libav: update 0.8 version to 0.8.15Paul Eggleton2014-08-151-2/+2
| | | | | | | (From OE-Core rev: 1bfa027e4667248eeb74ee12fad84e82415efc4b) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mpeg2dec: add PACKAGECONFIG for x11 and fix dependenciesMartin Jansa2014-08-111-3/+4
| | | | | | | | | | | | * the configure script checks for Xext and Xv when X/libvo is enabled * fixes following warnings: WARN: mpeg2dec: mpeg2dec rdepends on libxext but it isn't a build dependency? WARN: mpeg2dec: mpeg2dec rdepends on libxv but it isn't a build dependency? (From OE-Core rev: 1876548c14945c317d4f0a3a2b8df44ea1ed019f) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-fluendo*: add --disable-debug only to gst-fluendo-mp3Martin Jansa2014-08-112-2/+4
| | | | | | | | | | | | * fixes following QA warnings: gst-fluendo-mpegdemux-0.10.72: gst-fluendo-mpegdemux: configure was passed unrecognised options: --disable-debug [unknown-configure-option] (From OE-Core rev: e6e20fba657e37e1d2b7440a00cfb3c395bde19f) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: fix the bug for gstrtpmp4gpayWang Zidan2014-08-112-0/+66
| | | | | | | | | | | | set dafault value for MPEG4 without codec data in caps https://bugzilla.gnome.org/show_bug.cgi?id=734263 (From OE-Core rev: fe4dc1d30eea723361a0f88109717d8a70b2b17d) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: Remove unnecessary dependency on plugins-bad.Drew Moseley2014-08-061-2/+0
| | | | | | | | | | | This also corrects an erroneous overwriting of the dependencies from the inc file. (From OE-Core rev: d98e43a332f708b6db75109b90dcc6f562685f7a) Signed-off-by: Drew Moseley <drew_moseley@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: pcm_local.h: include <time.h> to enable CLOCK_MONOTONICWang Zidan2014-08-062-0/+33
| | | | | | | | | CLOCK_MONITONIC is defined in <bits/time.h>, add <time.h> before <sys/time.h>. (From OE-Core rev: 77b4d82687e7d65e8c6619c36d337b1d5763fc36) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: fix hw_ptr exceed the boundaryWang Zidan2014-08-062-0/+35
| | | | | | | | | | For long time test case, the hw_ptr will exceed the boundary, then cause the avail size wrong. (From OE-Core rev: b8d472cb96cf4f6c3077bdb8acf1026d37dac438) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: use get32_labels for multi-sourceWang Zidan2014-08-062-1/+347
| | | | | | | | | | | | | | | | | | | | The PCM route plugin can assign the destination value from average of multiple sources with attenuation. This requires the read of each channel value, sums and writes the resultant value in the requested format. get_labels gives the value as is only with endianness and signedness conversions, but put32_labels assumes that the value is normalized to 32bit int and it shifts down to the dest format. In addition, the current code lacks get_labels entries for the 24bit formats. For fixing these bugs, this patch replaces the read with get32_labels and use always 64bit int for sum. (From OE-Core rev: aef6f71e68c3ef1d662cda237d85307142a997be) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: upgrade to 1.2.0Carlos Rafael Giani2014-08-021-2/+2
| | | | | | | | (From OE-Core rev: 8b55dd80a54e9a8e10e9e689ad40fac8d0130ba7) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade to 1.4.0Carlos Rafael Giani2014-08-022-79/+3
| | | | | | | | | | * Backported patch removed, since it is already included in this release (From OE-Core rev: e9bc4272c7415db278046d2dd9ac2df33f9b7122) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-ugly: upgrade to 1.4.0Carlos Rafael Giani2014-08-021-2/+2
| | | | | | | | (From OE-Core rev: 095b6fdcffacfe0770ae191fde0995331969da4b) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: upgrade to 1.4.0Carlos Rafael Giani2014-08-022-15/+18
| | | | | | | | | | | | | | | * eglglessink was replaced by glimagesink * sndfile plugin has been ported to 1.0 * webp support added since libwep recipe has been added to meta-multimedia * mfc was replaced by v4l2videodec, which does not need special flags * cdaudio was removed * directshow plugin was replaced by winks (From OE-Core rev: e2fb717c0a081534252c5026401e3fee8328c502) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: upgrade to 1.4.0Carlos Rafael Giani2014-08-022-4/+4
| | | | | | | | | | | * xvideo options removed, since the V4L2 XV support never became upstream and is pretty much dead now (From OE-Core rev: 2ac6e260f94c7ecfc5ed00798e8431632ae6245c) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: upgrade to 1.4.0Carlos Rafael Giani2014-08-021-2/+2
| | | | | | | | (From OE-Core rev: 831086316671a123606f3a3feef6332950f915e9) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade to 1.4.0Carlos Rafael Giani2014-08-022-35/+2
| | | | | | | | | | * Backported patch removed, since it is already included in this release (From OE-Core rev: 3cd159ab21a0d56c9c16c8fbd534fd5db63c6819) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: Add upgrade path for alsa-devJackie Huang2014-08-021-0/+4
| | | | | | | | | | | Previous commit removed non PN based -dev packages but lack of upgrade path for alsa-dev. (From OE-Core rev: bbc8565f9627b164cdc2c171395e6a1f5b40cf7d) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: fix CVE-2014-3970Shan Hai2014-07-292-1/+55
| | | | | | | | | | | | | | | The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet. Fix it by picking a patch from pulseaudio upstream code. (From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd) Signed-off-by: Shan Hai <shan.hai@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libav: fix PACKAGECONFIG for theora and libvorbisMatthieu Crapet2014-07-291-2/+0
| | | | | | | | | | Switches must not be in EXTRA_OECONF anymore. (From OE-Core rev: 251a5cc8c940f54f058588977734fd0ede664c3c) Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: remove non PN based -dev packagesJackie Huang2014-07-251-2/+1
| | | | | | | | | | All dev related items should be packaged in the core PN-dev package not in seperate packages. (From OE-Core rev: 9aa75f06e9e78602ad8e9a5ffa312f71057a90d7) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: add missing dependency on libcapJackie Huang2014-07-251-1/+1
| | | | | | | | (From OE-Core rev: e1ac22b340a66e3da53182faf0d624db9ccbdee1) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-plugins-good: add missing dependency on libcapJackie Huang2014-07-251-1/+1
| | | | | | | | (From OE-Core rev: ad68fd0e73a549356741bb050c4343ebd4a1e2fb) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: add missing dependency on libcapJackie Huang2014-07-251-1/+1
| | | | | | | | (From OE-Core rev: 4f0a1fc6c324840459919b80a9c096efdd2bf5bd) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libomxil-0.9.3: Remove versioning for bellagio .so files.Drew Moseley2014-07-252-3/+43
| | | | | | | | | | | The so files installed under ${libdir}/bellagio are not versioned and should be installed without version-based symlinks so that omxregister-bellagio can properly find and register them. (From OE-Core rev: 3846b1ec782ba0cc64d389d03116743208e2383f) Signed-off-by: Drew Moseley <drew_moseley@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "libomxil-0.9.3: Remove versioning for .so files."Drew Moseley2014-07-252-80/+6
| | | | | | | | | | | The previous version of this fix was too aggressive and removed versioning from too many of the .so files in the libomxil package. This reverts commit 0ef3734c2f279bf463ba4d1aef5241cd4882d483. (From OE-Core rev: b76d254db92d9c08e8d5d41becb2e60178cebb33) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-ffmpeg: Add CVE patchesYue Tao2014-07-2318-0/+917
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security Advisory - ffmpeg - CVE-2013-0866 The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0866 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0875 The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0875 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0860 The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0860 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2011-3934 Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3934 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2011-3946 The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3946 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-7023 The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7023 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-7009 The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7009 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0855 Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (ALAC) data, which triggers an out-of-bounds array access. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0855 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2011-4351 Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4351 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0848 The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0848 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2011-3944 The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3944 file://0001-huffyuvdec-check-width-more-completely-avoid-out-of-.patch \ gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-7010 Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7010 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2011-3941 The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bound write. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3941 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0846 Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0846 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2012-6618 The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient frames to estimate rate. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6618 gst-ffmpeg: Security Advisory - ffmpeg - CVE-2012-6617 The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6617 (From OE-Core rev: 58f08a96764094189b5aaf3cc8b4cc0c95e23409) Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: get caps from src pad when query caps in gsttagdemuxWang Zidan2014-07-232-0/+45
| | | | | | | (From OE-Core rev: b9a2aacfc0343d522cce9183dae15f1ae042b36d) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: do not change eos event to gap event if no data ↵Wang Zidan2014-07-232-0/+41
| | | | | | | | | has passed to streamsynchronizer. (From OE-Core rev: 8b85075e592e867e7ffba919b10fca150f6a62b0) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: pass rate of input segment to output segment in gstbaseparse.Wang Zidan2014-07-232-1/+35
| | | | | | | (From OE-Core rev: e25c5b228178f13b2f9e25b5bd423d5ef7b40765) Signed-off-by: Wang Zidan <b50113@freescale.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>