And guess what? it was tagged a FALSE positive.

Again, I wonder why the heck this was a tagged as a FALSE positive.

If (a < 0 || b < 0) is false, then (a >= 0 && b >= 0) is true,
which implies (a >= || b >= 0) is true as well.
And this was tagged as a FALSE positive!?!

(cherry picked from commit fe5605fa)

(N/A for master)

Already fixed in master.

(cherry picked from commit e81f6fca)
Signed-off-by: Rémi Denis-Courmont <rdenis@simphalempin.com>

(cherry picked from commit a11cc336)
Signed-off-by: Rémi Denis-Courmont <rdenis@simphalempin.com>

When i_size is sufficiently large, we would overflow malloc(), and then
overwrite the heap with stream_Read().

Bug reported by: Alin Rad Pop, Secunia Research.

(cherry picked from commit c8ef7621)

(cherry picked from commit 21899078)

VLC_SAVE_FLAGS is intended to be used only once : before any modification of the flags
Do not use $LIBS after it has been overwritten by FFmpeg checks
(cherry picked from commit 18c6e88e0aff698dc8647c244b509bf786d14c59)

This patch is aimed to have pkg-config support for directfb
It also keep the legacy header detection as a falback

Nicolas Chauvet (kwizart)
Signed-off-by: Jean-Paul Saman <jpsaman@videolan.org>

Manually backport [2123e7c2] to improve our support for MPEG2 content provided by FCP

Fixed a typo in NEWS