Over 100 security-report emails received in September already - and we’re only halfway through the month.
The chart is noisy, but the security workload has grown substantially.
If you’re a large company relying on FFmpeg please donate
ffmpeg.org/donations.html
FFmpeg is critical infrastructure for a lot of big companies.
The security-report workload is rising fast. It would be nice if donations, sponsorships, and code contributions kept pace.
Ampere has clarified that the 2021/22 server was sent to VideoLAN. That server benefited the wider free software multimedia ecosystem. Ampere has also agreed to donate a server to SPI for use in FFmpeg CI. We thank Ampere for helping resolve this.
A few "behind the scenes" shots from our @lexfridman podcast
1) Post interview photo
2) Post interview @TerryBlacks_BBQ
3) Fatigue after six hours of talking
Thank you to all the people who took the time to write nice messages.
Great pull request from @ruikai fixing security issues with patches.
A sixteen year old showing security "researchers" how it's done.
In FFmpeg, teenagers work on world leading C and assembly code.
That's very counter intuitive, I'd assume you'd get more consistency on RISC than on CISC.
But I guess Intel and AMD have an incentive to match the other's performance stronger than on ARM
Patch by legendary "mkver", removing a few redundant functions in existing hand written assembly code.
Speed improvement change from up to 16x faster than C to 18x faster than C.
Assembly code is not necessarily ever finished.
More hand written assembly patches from legendary "mkver", removing old MMX code and adding SSE4 for niche audio codec SBC.
Nearly ten times faster than C
Hybrid approach to crc32 with interleaved crc32 instruction and pmull hand written assembly patch.
Over 67 times faster than C.
Thanks to @corsix for the original implementation.
More ARM hand written assembly patches from @TencentGlobal today cleaning up existing assembly code.
ARM assembly needs constant maintenance as algorithmic approaches may need changing as newer ARM CPUs are released.
(Generally speaking x86 is not like that, code remains broadly the same speed forever)
"There's no value in FFmpeg on its own" according to this guy who doesn't understand the world value apart from its monetary meaning:
piped.video/watch?v=77fH--tl…
Huge patchset from @TencentGlobal adding hand written assembly code for HEVC intra prediction
Up to ten times faster than C!
Companies which use FFmpeg should submit hand written assembly patches like Tencent
It's with much sadness that we announce the passing of our friend and colleague Ralph Giles, or rillian as he was known on IRC.
Ralph began contributing to Xiph.org in 2000 and became a core Ghostscript developer in 2001¹ . Ralph made many contributions to the royalty-free media ecosystem, whether it was as a project lead on Theora or maintaining Xiph infrastructure that has been used across the industry by codec engineers and researchers².
He was also the first to ship Rust code in Firefox³ during his time at Mozilla, which was a major milestone for both the language and Firefox itself.
Ralph was a great contributor, a kind colleague and will be greatly missed.
¹ wizards-of-os.org/archiv/spr…
² media.xiph.org/
³ medium.com/mozilla-tech/depl…
The infamous example how not to do it, was NAB 2023 where a company (Videolabs) had a booth
that appeared to represent FFmpeg possibly for commercial advantage without knowledge
or consensus of the FFmpeg community. And not donating any Videolabs shares to FFmpeg/SPI.
Patch by legendary "mkver" to optimise HEVC dequant with hand written assembly.
Over five times faster than C.
Also a great example of how Clang is much slower than GCC in this case.
Indeed a significant portion of the "C code" in FFmpeg today is for various tables (e.g huffman codes) needed by codecs. Not really "C code" as such.
The assembly portion of FFmpeg needs to accelerate.
Hand written RISC-V assembly code written by @AlibabaGroup Cloud submitted to FFmpeg
Up to 14 times faster than C.
It's great to see so many corporate contributors of hand written assembly, a field historically dominated by volunteers!