CVE-2014-8962
CVE-2014-9028

(cherry picked from commit bc270b0d593aeeb095560e15b6c65e84e5061104)

Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
(cherry picked from commit ff7ee990e3eac51beec12d73044e4fc23efd58b4)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 0a9e3479a69f17734dfe66ee1117839d667c95d8)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 1cb34c7916d538776a0b47785bde9f863358c551)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

One corner case still remains when leaving the fullscreen since we
cannot resize the UI in this mode.

(cherry picked from commit c7acc87279732139580b8f3f674babee5ef3c1c0)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 8bf55dd42dd50f4340d52ab4528c150ad1187f93)

(cherry picked from commit 75fe831c3acc3c1066bacf30e846bb5e438fee31)

```--
access/dvdnav.c: In function 'ProbeDVD':
access/dvdnav.c:1469:6: error: implicit declaration of function 'read' [-Werror=implicit-function-declaration]
      || read( fd, iso_dsc, sizeof (iso_dsc) ) < (int)sizeof (iso_dsc)
      ^
access/dvdnav.c:1481:5: error: implicit declaration of function 'close' [-Werror=implicit-function-declaration]
     close( fd );
     ^
```

--
Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>
(cherry picked from commit 4bcf8bd7ae0e00e9e1a55fce2e559a5dc465a29f)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit e91ea1f9c3f5575c65003818b6b0c2948435c2b8)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 267d8be5f35b8a33bf5e634ff5087a8ab9788019)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

- RFC2974 states in Section 4:
      "If a session announcement message has not been received for ten times the
       announcement period, or one hour, whichever is the greater, then the
       session is deleted from the receiver's session cache."
  But the session was being deleted after three times the announcement period.
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
(cherry picked from commit 125acdef1ed11c0684ccf57110d4f8741a4e705c)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

OMX.google.* are software decoders, it's better to use avcodec.
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
(cherry picked from commit 49fc0b18011e38bb1886bd15575e249ed1728977)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 327a8846b43c7e2426efc8e9af04fc5601540812)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Support for 24bpp was removed from freerdp repository in commit
02c1bf14ce1f3ad2199a349066548977916d9c06.
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
(cherry picked from commit b2cdcba9bfd832760679b12960ea11bfeaf84256)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit c1522ae56c7779126779dc34c0672898a6144421)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

This wraps libavcodec in a way that is worse that VLC, e.g. without
hardware acceleration.

(cherry picked from commit 298edea2b51a3dc7b39ae33a3c4bbf476f4e3290)

Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>
(cherry picked from commit 6db8aefc4e1c8fd8397e76c4b222aec63ee15ba2)

(cherry picked from commit 678a61d1b9420462da2115763dfb284cc12074b8)

Fixes #8078

(cherry picked from commit b48ee570b0e060d64dec95d460ca919d60d06138)
Signed-off-by: Felix Paul Kühne <fkuehne@videolan.org>

This fixes warnings with PulseAudio and with MingW.

(cherry picked from commit 8dcec7992236b8d2528ab088554766058d71505c)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Fixes searching for native qt5 progs on cygwin and msys2

The reason for the issue is that on windows if there is a space in the path
or if the program is prepends with .exe and we specify the search PATH
in AC_PATH_PROGS we must enclose them in quotes or the program will not be
found.

For future reference, if anyone uses AC_PATH_PROGS please enclose defined
search paths (if you have any) in quotes
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>
(cherry picked from commit 636b6c3107f7b797cd16cf84c37d58630a2e201a)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 7529f9c0c3d4418a1bc0af2640ce24c450f0e9b1)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 394c36356e1c59df350ccf287265e3eed4eaf07c)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Close #12753

Thanks to Ruito

(cherry picked from commit fcef78e37a5bffd23693e898ab5ff41a0d8a6d51)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit a7984f0a1cd295f4b80a2003a30dda5ab3b315b0)
(cherry picked from commit cd84eec0f5d64bc4ea6289029cc737e0f8358296)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit b2682aff9c3e85e53e887051833e19b5b0e781a2)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit 234d20686d2fe81ff2f631b60b5457e507e583b1)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Ref #12671

Prevented playback of blockalign less audio samples

(cherry picked from commit 901cfac0e6b756cc5b0f93bf49e45666dd65d7a7)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

(cherry picked from commit c470b251398bc9aefa395865caf3c4c5caacf34a)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Signed-off-by: Rémi Denis-Courmont <remi@remlab.net>
(cherry picked from commit eb588176daa8160191c9ba0a1cf2d80c2beb4f54)

p_chunk->i_sample is next sample, not current

(cherry picked from commit 5676fd5bf296cd8c1e4de9029ad8c033062b5faf)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>

Starting with harfbuzz 0.9.18 there is a known crash.
Stay with 0.9.17 until this is fixed upstream.

refs #12425

(cherry picked from commit d3e964e8e76ea8d58967b8eb20fe48e30ca0c7ef)
Signed-off-by: David Fuhrmann <dfuhrmann@videolan.org>

(cherry picked from commit e76f990e0ba00a9f573c23627ecd66cb9ae9bdd5)

(cherry picked from commit ab9f28ff688eae845bc2deb62bf50072d4a4690b)

(cherry picked from commit 2f1737e730e6e8844a93a32b236e36b16eb9bf33)

(cherry picked from commit 2e8ae8bc6e65da672e544c69199f6f738cafcba3)

(cherry picked from commit f1c04981d9c01d679954b1a33ea3ea124b78a345)