FFmpeg and a thousand fixes (Google Online Security Blog)

I've done quite some triaging on CVE IDs assigned for ffmpeg commits originating from the Google fuzzing effort as compared to libav in Debian.

Quite a bunch of them didn't affect libav because the code didn't exist there,