January 2008 - MPlayer-DOCS - lists.mplayerhq.hu

A typo in trunk/docs/man/en/mpalyer.1 r23748
by JRaSH 05 Feb '08

05 Feb '08

I found something that might be a typo in trunk/docs/man/en/mpalyer.1 r23748. In line 9466, the document says: "Motion vectors are interpolated from the following P-frame." I guess here the "interpolated" should be "extrapolated", for in line 9463, the sentence there uses "extrapolated" instead of "interpolated", and "extrapolated" seems to express the right idea. JRaSH

2 1

[homepage]: r3127 - trunk/src/news.src.en
by rtogni 30 Jan '08

30 Jan '08

Author: rtogni Date: Wed Jan 30 22:35:29 2008 New Revision: 3127 Log: Security fixes for url.c and stream_cddb.c Modified: trunk/src/news.src.en Modified: trunk/src/news.src.en ============================================================================== --- trunk/src/news.src.en (original) +++ trunk/src/news.src.en Wed Jan 30 22:35:29 2008 @@ -9,6 +9,130 @@ <div class="newsentry"> <h2> + <a name="vuln19">2008-01-30, Wednesday :: buffer overflow in stream_cddb.c</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A buffer overflow was found and reported by Adam Bozanich of Musecurity in the +code used to extract album titles from cbbd server answers. +</p> + +<p> +When parsing answers from the cddb server, the album title is copied into a +fixed-size buffer with insufficient checks on its size, and may cause a buffer +overflow. A malicious database entry could trigger a buffer overflow in the +program, that can lead to arbitrary code execution with the UID of the user +running MPlayer. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary code execution under the user ID running the player) when +getting disk information from a malicious cddb entry, null if you do not use +this feature. Please note that it is possible to overwrite entries in the cddb +database, so an attack can also be performed via a non-compromised server. At +the time the buffer overflow was fixed there was no known exploit in the wild. +</p> + +<h3>Solution</h3> + +<p> +A +<a href="http://svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c?r1=25820&r2=25824">fix</a> +for this problem was committed to SVN on Sun Jan 20 20:58:02 2008 UTC as r25824. +Users of affected MPlayer versions should download a +<a href="http://www.mplayerhq.hu/MPlayer/patches/stream_cddb_fix_20080120.diff">patch</a> +for MPlayer 1.0rc2 or update to the latest version if they're using SVN. +</p> + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0rc2 and SVN before r25824 (Sun Jan 20 20:58:02 2008 UTC). +Older versions are probably affected, too, but they were not checked. +</p> + + +<h3>Unaffected versions</h3> + +<p> +SVN HEAD after r25824 (Sun Jan 20 20:58:02 2008 UTC)<br> +MPlayer 1.0rc2 + security patches +</p> + +</div> + + + +<div class="newsentry"> + +<h2> + <a name="vuln18">2008-01-30, Wednesday :: buffer overflow in url.c</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A buffer overflow was found and reported by Adam Bozanich of Musecurity in the +code used to escape url strings. +</p> + +<p> +The code used to skip over IPv6 addresses can be tricked to leave a pointer to +a temporary buffer with a non-NULL value; this causes the unescape code to reuse +the buffer, and may lead to a buffer overflow if the old buffer is smaller than +required. A malicious url string may be used to trigger a buffer overflow in the +program, that can lead to arbitrary code execution with the UID of the user +running MPlayer. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary code execution under the user ID running the player) if you can +play untrusted urls (eg. delivered by a remote playlist), null if you do not +use this feature. At the time the buffer overflow was fixed there was no known +exploit in the wild. +</p> + +<h3>Solution</h3> + +<p> +A +<a href="http://svn.mplayerhq.hu/mplayer/trunk/stream/url.c?r1=25648&r2=25823">fix</a> +for this problem was committed to SVN on Sun Jan 20 20:43:46 2008 UTC as r25823. +Users of affected MPlayer versions should download a +<a href="http://www.mplayerhq.hu/MPlayer/patches/url_fix_20080120.diff">patch</a> +for MPlayer 1.0rc2 or update to the latest version if they're using SVN. +</p> + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0rc2 and SVN before r25823 (Sun Jan 20 20:43:46 2008 UTC). +Older versions are probably affected, too, but they were not checked. +</p> + + +<h3>Unaffected versions</h3> + +<p> +SVN HEAD after r25823 (Sun Jan 20 20:43:46 2008 UTC)<br> +MPlayer 1.0rc2 + security patches +</p> + +</div> + + + +<div class="newsentry"> + +<h2> <a name="vuln17">2008-01-29, Tuesday :: buffer overflow in demux_mov.c</a> <br><span class="poster">posted by Roberto</span> </h2>

1 0

[homepage]: r3126 - trunk/src/news.src.en
by rtogni 30 Jan '08

30 Jan '08

Author: rtogni Date: Tue Jan 29 23:49:17 2008 New Revision: 3126 Log: Security fixes for demux_mov.c and demux_audio.c Modified: trunk/src/news.src.en Modified: trunk/src/news.src.en ============================================================================== --- trunk/src/news.src.en (original) +++ trunk/src/news.src.en Tue Jan 29 23:49:17 2008 @@ -9,6 +9,130 @@ <div class="newsentry"> <h2> + <a name="vuln17">2008-01-29, Tuesday :: buffer overflow in demux_mov.c</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A buffer overflow was found and reported by Felipe Manzano and Anibal Sacco of +CORE Security Technologies in the code used to parse the mov file headers. +Other similar issues were found by Reimar Döffinger while fixing the code. +The vulnerability is identified with CORE-2008-0122. +</p> + +<p> +The code read some values from the file and uses them as indexes into an array +allocated on the heap, without performing any boundary check. A malicious file +may be used to trigger a buffer overflow in the program, that can lead to +arbitrary code execution with the UID of the user running MPlayer. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary code execution under the user ID running the player) when +playing a malicious mov file, null if you do not use this feature. At the time +the buffer overflow was fixed there was no known exploit in the wild. +</p> + +<h3>Solution</h3> + +<p> +A +<a href="http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demux_mov.c?r1=25920&r…">fix</a> +for this problem was committed to SVN on Tue Jan 29 22:13:20 2008 UTC as r25920, +Tue Jan 29 22:13:47 2008 UTC as r25921 and Tue Jan 29 22:14:00 2008 UTC as +r25922. +Users of affected MPlayer versions should download a +<a href="http://www.mplayerhq.hu/MPlayer/patches/demux_mov_fix_20080129.diff">patch</a> +for MPlayer 1.0rc2 or update to the latest version if they're using SVN. +</p> + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0rc2 and SVN before r25922 (Tue Jan 29 22:14:00 2008 UTC). +Older versions are probably affected, too, but they were not checked. +</p> + + +<h3>Unaffected versions</h3> + +<p> +SVN HEAD after r25922 (Tue Jan 29 22:14:00 2008 UTC)<br> +MPlayer 1.0rc2 + security patches +</p> + +</div> + + + +<div class="newsentry"> + +<h2> + <a name="vuln16">2008-01-29, Tuesday :: stack overflow in demux_audio.c</a> + <br><span class="poster">posted by Roberto</span> +</h2> + +<h3>Summary</h3> + +<p> +A stack overflow was found and reported by Damian Frizza and Alfredo Ortega of +CORE Security Technologies in the code used to parse FLAC comments. The +vulnerability is identified with CORE-2008-1218. +</p> + +<p> +When loading a comment from the file, a length value is read from the file and +then used as an index to a VLA array with no check performed. A malicious file +could trigger a stack overflow in the program, leading to arbitrary code +execution with the UID of the user running MPlayer. +</p> + +<h3>Severity</h3> + +<p> +High (arbitrary code execution under the user ID running the player) when +playing a FLAC file with malicious comments, null if you do not use this +feature. At the time the buffer overflow was fixed there was no known exploit +in the wild. +</p> + +<h3>Solution</h3> + +<p> +A +<a href="http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demux_audio.c?r1=25911&amp…">fix</a> +for this problem was committed to SVN on Tue Jan 29 22:00:58 2008 UTC as r25917. +Users of affected MPlayer versions should download a +<a href="http://www.mplayerhq.hu/MPlayer/patches/demux_audio_fix_20080129.diff">patch</a> +for MPlayer 1.0rc2 or update to the latest version if they're using SVN. +</p> + +<h3>Affected versions</h3> + +<p> +MPlayer 1.0rc2 and SVN before r25917 (Tue Jan 29 22:00:58 2008 UTC). +Older versions are probably affected, too, but they were not checked. +</p> + + +<h3>Unaffected versions</h3> + +<p> +SVN HEAD after r25917 (Tue Jan 29 22:00:58 2008 UTC)<br> +MPlayer 1.0rc2 + security patches +</p> + +</div> + + + +<div class="newsentry"> + +<h2> <a name="HUPAward2007">2008-01-03, Wednesday :: HUP Readers' Choice Award 2007</a> <br><span class="poster">posted by Diego</span> </h2>

2 1

[homepage]: r3125 - trunk/src/projects.src.en
by compn 23 Jan '08

23 Jan '08

Author: compn Date: Wed Jan 23 18:07:38 2008 New Revision: 3125 Log: fix typo spotted by diego and add xvidenc project Modified: trunk/src/projects.src.en Modified: trunk/src/projects.src.en ============================================================================== --- trunk/src/projects.src.en (original) +++ trunk/src/projects.src.en Wed Jan 23 18:07:38 2008 @@ -225,7 +225,11 @@ <li><a href="http://jmencode.sourceforge.net/">JMencode</a><br> JMencode is a simple Java frontend for MEncoder.</li> <li><a href="http://sf.net/projects/flashconversion/">Internet Flash Video Utility</a><br> - Internet Video Utility is a graphical frontend to convert all kinds of video's to the flash .flv format.</li> + Internet Video Utility is a graphical frontend to convert all kinds of + videos to the flash .flv format.</li> + <li><a href="http://xvidenc.sourceforge.net">xvidenc</a><br> + An easy to use shell script to encode DVDs or videos to the Xvid video + format using MEncoder.</li> </ul>

2 1

[homepage]: r3124 - trunk/src/projects.src.en
by compn 22 Jan '08

22 Jan '08

Author: compn Date: Tue Jan 22 16:05:51 2008 New Revision: 3124 Log: add project Modified: trunk/src/projects.src.en Modified: trunk/src/projects.src.en ============================================================================== --- trunk/src/projects.src.en (original) +++ trunk/src/projects.src.en Tue Jan 22 16:05:51 2008 @@ -224,6 +224,8 @@ No-cost utility to encode video to play on a RIM Blackberry.</li> <li><a href="http://jmencode.sourceforge.net/">JMencode</a><br> JMencode is a simple Java frontend for MEncoder.</li> + <li><a href="http://sf.net/projects/flashconversion/">Internet Flash Video Utility</a><br> + Internet Video Utility is a graphical frontend to convert all kinds of video's to the flash .flv format.</li> </ul>

2 1

r25821 - trunk/DOCS/man/en/mplayer.1
by cehoyos 20 Jan '08

20 Jan '08

Author: cehoyos Date: Sun Jan 20 18:03:35 2008 New Revision: 25821 Log: Added missing single quotation mark. Modified: trunk/DOCS/man/en/mplayer.1 Modified: trunk/DOCS/man/en/mplayer.1 ============================================================================== --- trunk/DOCS/man/en/mplayer.1 (original) +++ trunk/DOCS/man/en/mplayer.1 Sun Jan 20 18:03:35 2008 @@ -509,7 +509,7 @@ directory (e.g.\& /etc/\:mplayer or /usr specific one is '~/\:.mplayer/\:config'. The configuration file for MEncoder is 'mencoder.conf' in your configuration directory (e.g.\& /etc/\:mplayer or /usr/\:local/\:etc/\:mplayer), the -user specific one is '~/\:.mplayer/\:mencoder.conf. +user specific one is '~/\:.mplayer/\:mencoder.conf'. User specific options override system-wide options and options given on the command line override either. The syntax of the configuration files is 'option=<value>', everything after

1 0

r25786 - in trunk: DOCS/man/en/mplayer.1 libvo/gl_common.c libvo/gl_common.h
by reimar 18 Jan '08

18 Jan '08

Author: reimar Date: Fri Jan 18 20:05:29 2008 New Revision: 25786 Log: Add a fragment program for 5x5 unsharp masking Modified: trunk/DOCS/man/en/mplayer.1 Changes in other areas also in this revision: Modified: trunk/libvo/gl_common.c trunk/libvo/gl_common.h Modified: trunk/DOCS/man/en/mplayer.1 ============================================================================== --- trunk/DOCS/man/en/mplayer.1 (original) +++ trunk/DOCS/man/en/mplayer.1 Fri Jan 18 20:05:29 2008 @@ -3657,6 +3657,8 @@ Works on a few more cards than method 1. Might be faster on some cards. .br 4: Use experimental unsharp masking with 3x3 support and a strength of 0.5. +.br +5: Use experimental unsharp masking with 5x5 support and a strength of 0.5. .RE .IPs cscale=<n> Select the scaling function to use for chrominance scaling.

1 0

r25772 - in trunk: DOCS/tech/encoding-tips.txt DOCS/xml/en/video.xml cfg-mplayer.h
by diego 16 Jan '08

16 Jan '08

Author: diego Date: Wed Jan 16 10:30:28 2008 New Revision: 25772 Log: typo fix Modified: trunk/DOCS/xml/en/video.xml Changes in other areas also in this revision: Modified: trunk/DOCS/tech/encoding-tips.txt trunk/cfg-mplayer.h Modified: trunk/DOCS/xml/en/video.xml ============================================================================== --- trunk/DOCS/xml/en/video.xml (original) +++ trunk/DOCS/xml/en/video.xml Wed Jan 16 10:30:28 2008 @@ -2066,7 +2066,7 @@ compilation should go without problems. <varlistentry> <term><option>-vo dxr3:prebuf:sync:norm=x:<replaceable>device</replaceable></option></term> <listitem><para> -<option>overlay</option> activates the overlay instead of TVOut. It requires +<option>overlay</option> activates the overlay instead of TV-out. It requires that you have a properly configured overlay setup to work right. The easiest way to configure the overlay is to first run autocal. Then run mplayer with dxr3 output and without overlay turned on, run dxr3view. In dxr3view you can @@ -2348,7 +2348,7 @@ for Matrox G450/G550 TV-out instructions <listitem> <para> Using the <emphasis role="bold">matroxfb modules</emphasis> in the 2.4 - kernels. 2.2 kernels don't have the TVout feature in them, thus unusable + kernels. 2.2 kernels don't have the TV-out feature in them, thus unusable for this. You have to enable ALL matroxfb-specific feature during compilation (except MultiHead), and compile them into <emphasis role="bold">modules</emphasis>!

1 0

r25771 - trunk/DOCS/xml/en/ports.xml
by diego 16 Jan '08

16 Jan '08

Author: diego Date: Wed Jan 16 10:29:40 2008 New Revision: 25771 Log: VIDIX is no longer a shared library. Modified: trunk/DOCS/xml/en/ports.xml Modified: trunk/DOCS/xml/en/ports.xml ============================================================================== --- trunk/DOCS/xml/en/ports.xml (original) +++ trunk/DOCS/xml/en/ports.xml Wed Jan 16 10:29:40 2008 @@ -607,11 +607,7 @@ Open a console and change to that direct <screen>gcc -o dhasetup.exe dhasetup.c</screen> and execute <screen>dhasetup.exe install</screen> -as Administrator. After that you will have to reboot. When you are -done, copy the <systemitem class="library">.so</systemitem> files from -<filename class="directory">vidix/drivers</filename> to the -<filename class="directory">mplayer/vidix</filename> directory -relative to your <filename>mplayer.exe</filename>. +as Administrator. After that you will have to reboot. </para> <para>

1 0

r25770 - trunk/DOCS/xml/en/ports.xml
by diego 16 Jan '08

16 Jan '08

Author: diego Date: Wed Jan 16 10:29:02 2008 New Revision: 25770 Log: URL updates for contributed win32 stuff. Modified: trunk/DOCS/xml/en/ports.xml Modified: trunk/DOCS/xml/en/ports.xml ============================================================================== --- trunk/DOCS/xml/en/ports.xml (original) +++ trunk/DOCS/xml/en/ports.xml Wed Jan 16 10:29:02 2008 @@ -590,7 +590,7 @@ performance varies greatly between syste distort video or crash on some systems. If the image is distorted, try turning off hardware acceleration with <option>-vo directx:noaccel</option>. Download -<ulink url="http://www.mplayerhq.hu/MPlayer/releases/win32/contrib/dx7headers.tgz">DirectX 7 header files</ulink> +<ulink url="http://www.mplayerhq.hu/MPlayer/contrib/win32/dx7headers.tgz">DirectX 7 header files</ulink> to compile the DirectX video output driver. Furthermore you need to have DirectX 7 or later installed for the DirectX video output driver to work. </para> @@ -724,7 +724,7 @@ it before compiling <application>MPlayer <para> Complete instructions for building <application>MPlayer</application> and necessary libraries can be found in the -<ulink url="http://www.mplayerhq.hu/MPlayer/releases/win32/contrib/MPlayer-MinGW-Howto.…">MPlayer MinGW HOWTO</ulink>. +<ulink url="http://www.mplayerhq.hu/MPlayer/contrib/win32/MPlayer-MinGW-Howto.txt">MPlayer MinGW HOWTO</ulink>. </para> </sect2> </sect1>

1 0